Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/1aTzld8D8wql3KKaOgNKjLSA2SM.roa
File: 1aTzld8D8wql3KKaOgNKjLSA2SM.roa (raw, json)
Hash identifier: IPoJ0KwB+kO8xsW63mb9sAu0F4nNSYfxj02KvVPbCxo=
Subject key identifier: D5:A4:F3:95:DF:03:F3:0A:A5:DC:A2:9A:3A:03:4A:8C:B4:80:D9:23
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018DCC6506E71C4A2C1E4D965A52D72A79FA
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/1aTzld8D8wql3KKaOgNKjLSA2SM.roa
Signing time: Wed 21 Feb 2024 15:59:49 +0000
ROA not before: Wed 21 Feb 2024 15:59:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207710
IP address blocks: 193.31.12.0/24 maxlen: 24
193.31.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:09:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cc:65:06:e7:1c:4a:2c:1e:4d:96:5a:52:d7:2a:79:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 21 15:59:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5a4f395df03f30aa5dca29a3a034a8cb480d923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:93:fd:45:c3:15:e3:5e:fa:62:4e:c3:fa:c4:
78:cf:f4:ca:85:6b:df:cd:fd:50:2c:05:e5:b8:9e:
4b:c1:fb:33:ba:cf:cb:89:1f:d4:78:80:50:8e:a4:
13:4b:ae:a3:5c:ef:cf:3c:f2:e8:80:4c:aa:3e:e9:
b2:ab:ea:b3:d3:c4:1e:b8:a3:78:ba:28:54:da:45:
bc:21:17:24:fa:82:22:6e:2a:7d:1a:f1:bd:a4:b4:
47:d0:49:ac:b7:4a:6d:47:a3:a8:8a:5e:39:5b:a6:
15:4c:78:6a:47:84:a4:d2:b0:fc:92:e9:71:cb:5e:
e4:e8:f8:37:7c:46:72:ff:e8:df:fb:6a:a8:cd:c3:
af:3e:4f:5c:e4:a7:84:5a:9e:db:a3:ad:fb:67:76:
93:48:91:9b:37:b6:39:57:6f:40:c2:76:da:63:5a:
c8:71:5a:9d:5c:ba:e6:13:9c:4b:96:2b:86:fb:65:
3f:f1:50:64:56:5b:33:72:0a:b6:e1:2b:cf:e0:6a:
e6:4e:87:83:f5:1c:2d:dd:8e:53:e2:b8:c2:0a:c9:
17:73:c4:08:37:98:dd:c5:f3:05:c1:0d:0d:d9:81:
77:02:c9:67:b2:08:3e:c6:a8:e4:a8:37:c3:44:b0:
44:a2:d8:6b:11:a5:62:93:81:bc:8b:f9:5d:9e:f9:
99:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A4:F3:95:DF:03:F3:0A:A5:DC:A2:9A:3A:03:4A:8C:B4:80:D9:23
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/1aTzld8D8wql3KKaOgNKjLSA2SM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.12.0/23
Signature Algorithm: sha256WithRSAEncryption
23:98:99:c8:30:15:d1:53:4a:75:49:13:8e:2c:e9:99:e2:38:
d8:69:78:b5:94:bb:9c:24:64:9c:4e:f9:11:b1:3b:92:43:c5:
b6:bd:75:8c:5d:7b:3a:3c:f6:0d:28:e5:a5:ab:e0:fe:be:a0:
27:35:21:5d:a2:8a:a0:2e:be:6a:8a:96:86:d4:5a:50:7e:45:
04:e6:f1:79:ea:e2:de:2d:d0:53:78:5f:d6:34:5c:7d:dc:ca:
bf:be:42:52:b0:0e:ad:2b:69:28:8b:7a:0d:2b:cc:d9:31:72:
6c:d3:7b:4f:80:34:e9:c4:07:07:3a:f2:a1:8e:01:36:a5:a1:
92:a3:25:d4:4a:b8:88:61:68:db:33:cd:c0:55:c5:7c:c1:86:
df:a9:84:d1:ae:1a:cf:3d:67:57:b2:90:0e:05:d7:df:06:41:
e4:e8:fe:85:06:ae:31:82:0e:40:8e:06:33:2f:f0:4b:cb:a4:
31:8a:2a:d5:49:d8:8f:c8:9c:86:b6:48:ba:a8:94:06:67:bd:
14:48:c3:25:ae:52:12:d4:90:d3:15:39:99:47:92:6e:83:93:
7d:7f:92:61:58:e3:d1:2c:a6:c9:46:b3:06:e5:0a:85:dd:35:
6b:40:0a:4b:70:8e:29:44:40:c2:b8:39:f0:ee:50:4c:9e:17:
1f:93:7d:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY3MZQbnHEosHk2WWlLXKnn6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw
N2VlNTYwHhcNMjQwMjIxMTU1OTQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWE0ZjM5NWRmMDNmMzBhYTVkY2EyOWEzYTAzNGE4Y2I0ODBkOTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJP9RcMV4176Yk7D+sR4z/TKhWvf
zf1QLAXluJ5Lwfszus/LiR/UeIBQjqQTS66jXO/PPPLogEyqPumyq+qz08QeuKN4
uihU2kW8IRck+oIibip9GvG9pLRH0Emst0ptR6Ooil45W6YVTHhqR4Sk0rD8kulx
y17k6Pg3fEZy/+jf+2qozcOvPk9c5KeEWp7bo637Z3aTSJGbN7Y5V29AwnbaY1rI
cVqdXLrmE5xLliuG+2U/8VBkVlszcgq24SvP4GrmToeD9Rwt3Y5T4rjCCskXc8QI
N5jdxfMFwQ0N2YF3Aslnsgg+xqjkqDfDRLBEothrEaVik4G8i/ldnvmZ4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNWk85XfA/MKpdyimjoDSoy0gNkjMB8GA1UdIwQY
MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt
OGJmYmRkNDVjYjYyLzEvMWFUemxkOEQ4d3FsM0tLYU9nTktqTFNBMlNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy
LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwR8MMA0G
CSqGSIb3DQEBCwUAA4IBAQAjmJnIMBXRU0p1SROOLOmZ4jjYaXi1lLucJGScTvkR
sTuSQ8W2vXWMXXs6PPYNKOWlq+D+vqAnNSFdooqgLr5qipaG1FpQfkUE5vF56uLe
LdBTeF/WNFx93Mq/vkJSsA6tK2koi3oNK8zZMXJs03tPgDTpxAcHOvKhjgE2paGS
oyXUSriIYWjbM83AVcV8wYbfqYTRrhrPPWdXspAOBdffBkHk6P6FBq4xgg5AjgYz
L/BLy6QxiirVSdiPyJyGtki6qJQGZ70USMMlrlIS1JDTFTmZR5Jug5N9f5JhWOPR
LKbJRrMG5QqF3TVrQApLcI4pREDCuDnw7lBMnhcfk32q
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:36:52 2024 by rpki-client on console-ams.rpki-client.org