Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/9IIsoMMnpikvHBcuZSVkO4nrJKk.roa
File: 9IIsoMMnpikvHBcuZSVkO4nrJKk.roa (raw, json)
Hash identifier: cSUdlP+G2mhJPfIQXK1yix+6qYdP2dph/ar8GExRPuM=
Subject key identifier: F4:82:2C:A0:C3:27:A6:29:2F:1C:17:2E:65:25:64:3B:89:EB:24:A9
Certificate issuer: /CN=5a376c8008d6abd962341563dd2a4dccaf153cba
Certificate serial: 018D367D34FB07BB4701A7AF57722E021CBE
Authority key identifier: 5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/9IIsoMMnpikvHBcuZSVkO4nrJKk.roa
Signing time: Tue 23 Jan 2024 13:23:11 +0000
ROA not before: Tue 23 Jan 2024 13:23:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213250
IP address blocks: 31.214.240.0/24 maxlen: 32
134.255.221.0/24 maxlen: 32
134.255.235.0/24 maxlen: 24
134.255.236.0/24 maxlen: 32
134.255.254.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:36:7d:34:fb:07:bb:47:01:a7:af:57:72:2e:02:1c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a376c8008d6abd962341563dd2a4dccaf153cba
Validity
Not Before: Jan 23 13:23:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4822ca0c327a6292f1c172e6525643b89eb24a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2b:fc:b0:72:50:9f:f3:96:03:17:0a:45:50:
79:1d:8f:28:b8:e3:e8:78:fc:11:87:9f:a8:e6:e2:
86:2b:b5:8a:91:97:a4:05:96:38:0e:93:e1:ac:7c:
3e:c7:ef:92:59:1d:25:c9:1c:c5:8d:31:1a:45:ab:
28:58:d9:6e:8b:e4:8a:40:33:22:55:90:84:65:86:
b4:b8:3c:71:a9:7f:c8:b2:76:df:3a:ff:b3:96:ac:
1e:53:92:06:20:12:8a:c2:d5:df:8d:b7:45:30:bf:
2e:c7:3e:5f:4b:da:01:02:21:ac:64:53:0e:02:3b:
0d:4e:e5:98:13:a0:e1:12:f7:40:7e:37:9d:88:7f:
5d:9f:05:3b:42:05:9e:78:35:d8:a1:c0:9c:8b:47:
d8:79:f1:dd:42:db:4a:e5:b5:67:73:bc:03:51:37:
96:37:a9:85:2f:b4:fa:62:25:ef:cd:6a:c6:1c:0d:
fa:de:c6:0f:2c:49:22:25:f4:fb:93:e6:1c:f8:7e:
16:4d:e2:0b:25:16:89:47:70:8b:e9:8b:07:10:46:
a2:cf:05:07:cf:91:e0:12:97:92:b5:ea:6a:ef:b9:
ba:32:25:c1:09:1a:fd:c6:c8:3d:ef:0f:c9:6e:62:
80:ed:a2:f8:c1:41:5d:f4:ac:dc:73:28:df:16:12:
f5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:82:2C:A0:C3:27:A6:29:2F:1C:17:2E:65:25:64:3B:89:EB:24:A9
X509v3 Authority Key Identifier:
keyid:5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/9IIsoMMnpikvHBcuZSVkO4nrJKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.214.240.0/24
134.255.221.0/24
134.255.235.0-134.255.236.255
134.255.254.0/24
Signature Algorithm: sha256WithRSAEncryption
45:7f:3b:c5:fa:f8:80:da:0d:3d:54:6e:d8:d0:0d:26:72:a3:
41:2c:af:4c:87:02:57:63:a8:16:46:84:d4:64:1c:69:f6:2d:
87:10:e7:3c:9d:97:b6:4c:6c:38:59:c4:ff:04:d6:e3:5b:61:
71:e4:98:47:f3:fd:f4:aa:98:9e:00:9f:b4:df:14:b2:95:20:
12:9e:cf:62:ac:87:4b:71:6d:df:8a:6a:9e:78:d4:08:70:50:
5f:25:8d:4a:cc:bf:ff:39:4b:a4:0a:4c:22:49:cc:1d:1c:16:
26:fe:a7:7e:03:ac:32:6a:8c:97:40:b9:f7:ac:14:ab:b6:a4:
30:92:a2:81:f7:f7:16:6d:ac:0a:d3:77:e8:60:2d:c8:be:ae:
a7:58:d9:35:e8:b0:a0:a3:4b:99:d1:53:b3:61:f0:be:35:67:
75:cb:f9:a9:97:7c:fe:0f:8d:c8:a1:a5:b5:87:1b:97:39:71:
30:86:1c:0b:fb:e8:2f:fc:5f:1b:96:d2:77:8e:cd:00:67:63:
3a:84:39:86:9d:b2:80:c9:9d:fb:29:e4:10:91:0e:82:8d:07:
76:29:3a:5e:af:0b:b7:1e:7a:1c:11:ab:61:8b:68:b5:d3:a7:
29:7a:4e:b2:dc:92:4a:89:15:e1:42:2b:05:8c:5e:b7:c2:dc:
5a:72:2d:c6
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAY02fTT7B7tHAaevV3IuAhy+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMzc2YzgwMDhkNmFiZDk2MjM0MTU2M2RkMmE0ZGNjYWYx
NTNjYmEwHhcNMjQwMTIzMTMyMzExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDgyMmNhMGMzMjdhNjI5MmYxYzE3MmU2NTI1NjQzYjg5ZWIyNGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSv8sHJQn/OWAxcKRVB5HY8ouOPo
ePwRh5+o5uKGK7WKkZekBZY4DpPhrHw+x++SWR0lyRzFjTEaRasoWNlui+SKQDMi
VZCEZYa0uDxxqX/IsnbfOv+zlqweU5IGIBKKwtXfjbdFML8uxz5fS9oBAiGsZFMO
AjsNTuWYE6DhEvdAfjediH9dnwU7QgWeeDXYocCci0fYefHdQttK5bVnc7wDUTeW
N6mFL7T6YiXvzWrGHA363sYPLEkiJfT7k+Yc+H4WTeILJRaJR3CL6YsHEEaizwUH
z5HgEpeStepq77m6MiXBCRr9xsg97w/JbmKA7aL4wUFd9KzccyjfFhL15wIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFPSCLKDDJ6YpLxwXLmUlZDuJ6ySpMB8GA1UdIwQY
MBaAFFo3bIAI1qvZYjQVY90qTcyvFTy6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEt
NjViZTU1MDMxNjVkLzEvOUlJc29NTW5waWt2SEJjdVpTVmtPNG5ySktrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEtNjViZTU1MDMxNjVk
LzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAH9bwAwQA
hv/dMAwDBACG/+sDBACG/+wDBACG//4wDQYJKoZIhvcNAQELBQADggEBAEV/O8X6
+IDaDT1UbtjQDSZyo0Esr0yHAldjqBZGhNRkHGn2LYcQ5zydl7ZMbDhZxP8E1uNb
YXHkmEfz/fSqmJ4An7TfFLKVIBKez2Ksh0txbd+Kap541AhwUF8ljUrMv/85S6QK
TCJJzB0cFib+p34DrDJqjJdAufesFKu2pDCSooH39xZtrArTd+hgLci+rqdY2TXo
sKCjS5nRU7Nh8L41Z3XL+amXfP4PjcihpbWHG5c5cTCGHAv76C/8XxuW0neOzQBn
YzqEOYadsoDJnfsp5BCRDoKNB3YpOl6vC7ceehwRq2GLaLXTpyl6TrLckkqJFeFC
KwWMXrfC3FpyLcY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:39:06 2024 by rpki-client on console-ams.rpki-client.org