Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/H0hYVKo0g18bWY3nx-vLh8DD0Vo.roa
File: H0hYVKo0g18bWY3nx-vLh8DD0Vo.roa (raw, json)
Hash identifier: tX+dx5jC3m8n3QNyTaZy9I5kqMQjrRJ9PSp2z4iw5Lc=
Subject key identifier: 1F:48:58:54:AA:34:83:5F:1B:59:8D:E7:C7:EB:CB:87:C0:C3:D1:5A
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018CC56E03C476566A1791EE291EF23D7FE2
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/H0hYVKo0g18bWY3nx-vLh8DD0Vo.roa
Signing time: Mon 01 Jan 2024 14:29:30 +0000
ROA not before: Mon 01 Jan 2024 14:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43696
IP address blocks: 31.184.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 May 2024 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:03:c4:76:56:6a:17:91:ee:29:1e:f2:3d:7f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 14:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f485854aa34835f1b598de7c7ebcb87c0c3d15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:47:cc:19:cb:d2:3d:75:a9:04:46:9b:66:80:
4b:0d:eb:0f:66:f3:22:c1:8f:e3:60:16:6a:89:51:
75:5d:6d:b4:5e:bb:43:cd:86:b0:d6:40:d0:83:0d:
c9:46:66:ba:d1:68:81:84:f1:24:7f:93:55:5f:94:
eb:c4:33:c5:b7:6f:d3:ca:f4:f0:0b:06:67:48:1d:
6e:26:5c:de:cf:e8:55:6a:6b:d8:04:dc:08:fe:2f:
f0:47:52:f8:17:92:2d:65:d6:f2:46:f9:61:d2:a3:
e2:b9:05:fb:90:61:a5:ff:6b:7b:1a:99:6f:28:b4:
b4:2e:d6:3b:22:0d:f4:c3:d8:3f:57:1b:bb:c9:18:
e8:91:e1:e1:0b:5b:38:6a:4a:a4:22:59:ea:77:6c:
8a:4e:da:d6:f6:ea:d0:65:7f:13:b9:49:10:63:7c:
52:d1:bc:e9:1f:45:2d:92:6c:7c:87:7d:11:49:cf:
b3:47:10:a0:ac:d3:76:a7:ac:48:82:5b:bf:5a:fb:
f2:f7:99:d9:f0:12:79:12:d3:10:4c:c0:5f:91:39:
5f:fb:2c:49:ad:8c:4f:14:f8:1d:56:f5:1a:15:da:
6a:ed:b7:87:1f:8b:02:c8:a9:a5:19:a6:fc:5a:e5:
03:c1:f6:34:a7:90:ca:7f:a8:b2:19:d0:d3:79:ed:
31:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:48:58:54:AA:34:83:5F:1B:59:8D:E7:C7:EB:CB:87:C0:C3:D1:5A
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/H0hYVKo0g18bWY3nx-vLh8DD0Vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.184.230.0/24
Signature Algorithm: sha256WithRSAEncryption
36:6f:5b:20:1d:26:33:a0:b3:58:b6:e7:7b:2b:0e:2e:4c:a6:
94:56:d7:6d:75:06:eb:b6:25:28:32:58:fb:db:91:1d:99:6e:
8d:48:d9:51:aa:a8:2b:aa:48:27:2e:a7:64:12:10:85:c1:ab:
39:b3:c1:1f:b2:42:62:ca:50:4d:3d:59:ed:7a:6f:e4:6a:f1:
81:33:a1:4b:80:2f:7b:1f:de:7b:6e:30:15:57:26:d9:80:4f:
2f:47:74:82:15:98:2d:0a:fd:5e:fd:e9:38:81:0b:f2:f5:63:
80:11:a8:61:41:40:5c:a1:e5:d7:74:8d:96:d9:3b:67:a6:5b:
e1:88:91:2f:2a:e1:11:02:4d:a9:13:4b:fc:24:30:c8:fa:68:
f3:dc:05:36:06:da:b9:36:99:a2:67:d2:76:13:b3:72:cc:7c:
77:5d:89:55:be:dc:1d:5b:46:6c:0f:f5:dc:38:88:e8:2b:35:
d2:e3:cc:d2:ec:e0:ac:88:67:97:88:9c:ef:9d:6c:d0:24:1d:
c8:38:53:4c:62:46:f5:96:e7:12:99:96:b5:70:dc:b1:f7:50:
37:68:b4:b4:50:08:e3:0e:26:0a:1b:9a:9c:44:d3:75:04:c8:
3d:88:eb:57:9d:6e:91:a0:ab:a9:82:13:f2:8a:8f:b5:d3:65:
c9:07:dd:c5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbgPEdlZqF5HuKR7yPX/iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjQwMTAxMTQyOTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjQ4NTg1NGFhMzQ4MzVmMWI1OThkZTdjN2ViY2I4N2MwYzNkMTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkfMGcvSPXWpBEabZoBLDesPZvMi
wY/jYBZqiVF1XW20XrtDzYaw1kDQgw3JRma60WiBhPEkf5NVX5TrxDPFt2/TyvTw
CwZnSB1uJlzez+hVamvYBNwI/i/wR1L4F5ItZdbyRvlh0qPiuQX7kGGl/2t7Gplv
KLS0LtY7Ig30w9g/Vxu7yRjokeHhC1s4akqkIlnqd2yKTtrW9urQZX8TuUkQY3xS
0bzpH0Utkmx8h30RSc+zRxCgrNN2p6xIglu/Wvvy95nZ8BJ5EtMQTMBfkTlf+yxJ
rYxPFPgdVvUaFdpq7beHH4sCyKmlGab8WuUDwfY0p5DKf6iyGdDTee0xgQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB9IWFSqNINfG1mN58fry4fAw9FaMB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvSDBoWVZLbzBnMThiV1kzbngtdkxoOEREMFZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH7jmMA0G
CSqGSIb3DQEBCwUAA4IBAQA2b1sgHSYzoLNYtud7Kw4uTKaUVtdtdQbrtiUoMlj7
25EdmW6NSNlRqqgrqkgnLqdkEhCFwas5s8EfskJiylBNPVntem/kavGBM6FLgC97
H957bjAVVybZgE8vR3SCFZgtCv1e/ek4gQvy9WOAEahhQUBcoeXXdI2W2Ttnplvh
iJEvKuERAk2pE0v8JDDI+mjz3AU2Btq5NpmiZ9J2E7NyzHx3XYlVvtwdW0ZsD/Xc
OIjoKzXS48zS7OCsiGeXiJzvnWzQJB3IOFNMYkb1lucSmZa1cNyx91A3aLS0UAjj
DiYKG5qcRNN1BMg9iOtXnW6RoKupghPyio+102XJB93F
-----END CERTIFICATE-----
Generated at Mon May 13 07:43:15 2024 by rpki-client on console-fra.rpki-client.org