Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/pAfqBqaLfcRNvY7WGbVqlrnR8qE.roa
File: pAfqBqaLfcRNvY7WGbVqlrnR8qE.roa (raw, json)
Hash identifier: MGI06794FZLjDsqVRJ6IkU7TLmlh0QkNmHCIrNJjjhE=
Subject key identifier: A4:07:EA:06:A6:8B:7D:C4:4D:BD:8E:D6:19:B5:6A:96:B9:D1:F2:A1
Certificate issuer: /CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Certificate serial: 018CC50039927521D05575BF6C3D13A64860
Authority key identifier: D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/pAfqBqaLfcRNvY7WGbVqlrnR8qE.roa
Signing time: Mon 01 Jan 2024 12:29:35 +0000
ROA not before: Mon 01 Jan 2024 12:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209483
IP address blocks: 171.22.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:39:92:75:21:d0:55:75:bf:6c:3d:13:a6:48:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Validity
Not Before: Jan 1 12:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a407ea06a68b7dc44dbd8ed619b56a96b9d1f2a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:87:48:93:3c:25:2b:2b:1a:1c:5a:d7:a1:7a:
b1:bd:48:56:a4:9d:58:3d:77:72:fd:22:95:27:41:
df:d4:14:e3:e8:00:66:a3:f5:38:fb:25:19:bb:b3:
94:6f:f9:fe:3f:a5:10:56:75:3d:e6:8a:52:8f:07:
91:1f:66:49:4e:3b:5e:c7:44:9f:24:fe:0b:7a:0b:
b7:46:c4:6a:c0:12:d1:7c:20:e7:1b:b2:46:5b:22:
4b:b1:ee:ce:6e:05:3b:df:8f:a0:22:f5:4f:74:c1:
54:68:18:59:9f:d6:c5:e7:40:86:91:37:11:f6:33:
b5:11:25:2b:1b:be:e4:7c:2c:8f:38:64:85:10:60:
36:f9:75:7a:42:4c:22:f2:58:90:41:ce:da:ad:57:
b6:7c:fd:46:b5:57:5c:69:54:2a:5b:79:ee:f6:ed:
7b:9c:a6:5c:e6:29:10:1f:44:c9:2e:0f:e3:db:9a:
a4:a6:20:09:9f:8e:e2:dd:6b:5d:b4:89:08:40:5f:
11:07:d9:7e:24:9a:e8:37:ee:10:e3:78:df:d1:75:
60:23:56:a0:0a:67:47:3f:c3:58:06:5f:1e:f3:99:
4f:65:30:cc:42:5a:23:4f:83:09:65:58:55:a0:06:
35:3d:a9:07:82:f4:de:b6:ff:8f:49:de:1b:f0:fb:
36:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:07:EA:06:A6:8B:7D:C4:4D:BD:8E:D6:19:B5:6A:96:B9:D1:F2:A1
X509v3 Authority Key Identifier:
keyid:D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/pAfqBqaLfcRNvY7WGbVqlrnR8qE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.156.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:54:1f:9a:e2:62:79:66:ef:42:bf:45:40:53:72:ce:9f:41:
b7:8c:ff:85:55:25:09:f4:6b:89:99:46:67:a6:55:7e:83:b2:
fa:e1:02:fd:95:61:9c:90:f3:12:27:60:31:9e:e3:b5:92:40:
b8:46:83:5d:aa:7d:8c:47:4e:56:fd:b1:1e:46:08:b2:20:8b:
0b:a4:a3:13:79:7b:ea:28:21:3d:45:f3:7c:2b:37:3e:8b:ec:
a9:f8:f8:05:ad:c6:93:d1:54:86:18:c8:ac:f2:b2:55:f1:fb:
03:85:8d:2a:a4:67:36:96:cb:58:fd:77:fb:4e:d1:c9:28:05:
26:91:0e:78:f7:ee:43:a8:b2:d3:c8:60:05:8f:41:36:8f:e3:
95:d8:24:7d:0a:43:12:e5:ec:21:42:20:4a:a8:37:c7:4c:e7:
8b:b5:fd:c2:52:90:cf:c6:bd:cd:fe:2f:ab:e6:2c:6c:2a:d1:
62:b1:84:cc:49:a5:5f:c9:e2:19:7d:62:7a:90:37:ec:47:85:
2a:95:c1:19:e3:62:f1:b5:6d:7b:63:71:ab:7b:88:9a:bd:da:
24:00:49:71:9c:e8:48:84:1e:42:6d:d7:9c:5c:82:af:2d:da:
e9:4b:80:9d:ac:ee:40:42:98:83:3c:bd:9b:3b:a8:56:01:b2:
eb:f8:bc:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFADmSdSHQVXW/bD0TpkhgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNzVkN2E4YmFjMDQ3N2Y1NTA5ZGZmMTFiOTE5NWNhNjBk
Zjg3ZGEwHhcNMjQwMTAxMTIyOTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDA3ZWEwNmE2OGI3ZGM0NGRiZDhlZDYxOWI1NmE5NmI5ZDFmMmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIdIkzwlKysaHFrXoXqxvUhWpJ1Y
PXdy/SKVJ0Hf1BTj6ABmo/U4+yUZu7OUb/n+P6UQVnU95opSjweRH2ZJTjtex0Sf
JP4Legu3RsRqwBLRfCDnG7JGWyJLse7ObgU734+gIvVPdMFUaBhZn9bF50CGkTcR
9jO1ESUrG77kfCyPOGSFEGA2+XV6Qkwi8liQQc7arVe2fP1GtVdcaVQqW3nu9u17
nKZc5ikQH0TJLg/j25qkpiAJn47i3WtdtIkIQF8RB9l+JJroN+4Q43jf0XVgI1ag
CmdHP8NYBl8e85lPZTDMQlojT4MJZVhVoAY1PakHgvTetv+PSd4b8Ps2zQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKQH6gami33ETb2O1hm1apa50fKhMB8GA1UdIwQY
MBaAFNJ116i6wEd/VQnf8RuRlcpg34faMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG5YWHFMckFSMzlWQ2RfeEc1R1Z5bURmaDlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83YmViMDQtMzE3Yi00NDhhLTgyZWQt
NTY1YjE0NDcwMzdiLzEvcEFmcUJxYUxmY1JOdlk3V0diVnFscm5SOHFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS83YmViMDQtMzE3Yi00NDhhLTgyZWQtNTY1YjE0NDcwMzdi
LzEvMG5YWHFMckFSMzlWQ2RfeEc1R1Z5bURmaDlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqxacMA0G
CSqGSIb3DQEBCwUAA4IBAQB8VB+a4mJ5Zu9Cv0VAU3LOn0G3jP+FVSUJ9GuJmUZn
plV+g7L64QL9lWGckPMSJ2AxnuO1kkC4RoNdqn2MR05W/bEeRgiyIIsLpKMTeXvq
KCE9RfN8Kzc+i+yp+PgFrcaT0VSGGMis8rJV8fsDhY0qpGc2lstY/Xf7TtHJKAUm
kQ549+5DqLLTyGAFj0E2j+OV2CR9CkMS5ewhQiBKqDfHTOeLtf3CUpDPxr3N/i+r
5ixsKtFisYTMSaVfyeIZfWJ6kDfsR4UqlcEZ42LxtW17Y3Gre4iavdokAElxnOhI
hB5CbdecXIKvLdrpS4CdrO5AQpiDPL2bO6hWAbLr+LxI
-----END CERTIFICATE-----
Generated at Mon May 13 14:52:29 2024 by rpki-client on console-ams.rpki-client.org