Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/6ce154-c3c6-4463-a6bd-02108cebb3ff/1/UkS8SUInkzgsqSzfJ181bF1GZME.roa
File: UkS8SUInkzgsqSzfJ181bF1GZME.roa (raw, json)
Hash identifier: 6vfQ7YliVT6CTDwHmHx/uDZzV3zdAmKUnuH1ENcvF+g=
Subject key identifier: 52:44:BC:49:42:27:93:38:2C:A9:2C:DF:27:5F:35:6C:5D:46:64:C1
Certificate issuer: /CN=f4e4c991b52c306ff45106011a4e952d8680d2b6
Certificate serial: 018CC7953730BA7224A68A5A43499C1FD59F
Authority key identifier: F4:E4:C9:91:B5:2C:30:6F:F4:51:06:01:1A:4E:95:2D:86:80:D2:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OTJkbUsMG_0UQYBGk6VLYaA0rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/6ce154-c3c6-4463-a6bd-02108cebb3ff/1/UkS8SUInkzgsqSzfJ181bF1GZME.roa
Signing time: Tue 02 Jan 2024 00:31:34 +0000
ROA not before: Tue 02 Jan 2024 00:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216302
IP address blocks: 31.24.248.0/24 maxlen: 24
2a12:48c0::/29 maxlen: 29
2a12:48c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/6ce154-c3c6-4463-a6bd-02108cebb3ff/1/9OTJkbUsMG_0UQYBGk6VLYaA0rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/6ce154-c3c6-4463-a6bd-02108cebb3ff/1/9OTJkbUsMG_0UQYBGk6VLYaA0rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OTJkbUsMG_0UQYBGk6VLYaA0rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 18:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:37:30:ba:72:24:a6:8a:5a:43:49:9c:1f:d5:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e4c991b52c306ff45106011a4e952d8680d2b6
Validity
Not Before: Jan 2 00:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5244bc49422793382ca92cdf275f356c5d4664c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:47:53:86:9a:a7:f2:57:7f:74:02:6f:7c:a3:
7c:81:71:e1:3e:c7:43:18:94:56:a1:0d:a8:a2:40:
0a:00:65:e6:b3:47:ab:33:a6:4c:02:9c:87:59:78:
f7:c2:4c:23:d1:16:dd:71:f1:08:b8:6f:3c:70:81:
ca:b1:87:ec:39:70:08:34:3c:46:1a:ec:d9:2b:e9:
08:b3:d7:38:a1:af:8f:32:3a:11:c2:d7:7b:fd:3e:
93:55:0c:6a:c7:99:c2:67:47:20:5e:28:c3:2d:ff:
b8:f7:46:4a:29:17:70:75:c8:02:21:bf:09:24:1a:
9f:26:55:40:cf:d5:14:f9:40:61:8a:ba:5e:50:a8:
38:1c:bd:8c:e9:ef:44:5a:ba:d4:2e:03:09:56:53:
bb:71:17:ea:d6:03:0d:35:a0:12:f1:f1:15:2b:96:
22:ea:ae:cf:9c:6a:25:08:68:8e:55:75:d1:e8:41:
8e:33:fa:c7:6f:99:af:9e:c4:54:9b:94:d5:9a:73:
2d:a6:49:9c:74:f1:da:68:e4:ec:9c:3e:b4:d0:51:
a2:be:c5:54:7e:aa:76:9e:a6:ce:90:c1:f5:8d:8c:
bc:79:63:b9:bd:3b:81:88:a5:85:1d:9e:a8:61:43:
51:96:58:cc:e5:73:72:fa:3c:4e:75:9f:a8:38:08:
d2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:44:BC:49:42:27:93:38:2C:A9:2C:DF:27:5F:35:6C:5D:46:64:C1
X509v3 Authority Key Identifier:
keyid:F4:E4:C9:91:B5:2C:30:6F:F4:51:06:01:1A:4E:95:2D:86:80:D2:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OTJkbUsMG_0UQYBGk6VLYaA0rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6ce154-c3c6-4463-a6bd-02108cebb3ff/1/UkS8SUInkzgsqSzfJ181bF1GZME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6ce154-c3c6-4463-a6bd-02108cebb3ff/1/9OTJkbUsMG_0UQYBGk6VLYaA0rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.248.0/24
IPv6:
2a12:48c0::/29
Signature Algorithm: sha256WithRSAEncryption
67:2f:89:f9:0c:8b:2d:04:2f:10:b6:1c:a0:80:1c:49:73:ad:
d3:3d:58:ca:3e:f5:9e:f0:c1:c0:63:b1:1b:e2:cb:8c:d4:5e:
8b:29:2a:53:8f:cb:8b:c0:da:0b:c2:c2:68:19:1e:27:fe:16:
23:f0:5c:0f:7d:ab:8f:0e:fa:03:09:d8:40:15:a7:03:3e:da:
d4:0c:e7:35:a8:3d:f1:58:31:56:34:c7:ee:e4:13:3b:fb:e0:
1e:cc:be:4a:9b:4b:03:40:19:ca:2c:4a:ca:43:f3:5e:48:cd:
bf:9e:96:73:1a:65:cf:9f:42:f9:ce:f5:c2:98:b3:da:77:41:
e1:28:a9:54:61:e5:f5:8b:fe:a9:b0:59:f5:1c:4e:fc:66:6c:
ec:75:0e:50:54:d4:1a:4d:64:f7:ee:cf:f5:ce:e6:f1:53:b8:
51:93:66:fc:9f:df:7e:71:95:03:3f:50:ee:35:11:9f:1c:bf:
f5:0e:7e:0a:1c:aa:05:5c:82:85:74:b9:08:69:01:a2:2d:55:
32:aa:a4:7a:cd:c2:51:f4:a4:e9:6a:0c:60:7b:0a:4c:a1:53:
82:82:f5:2b:5c:84:8c:e8:f1:a8:73:4b:19:dc:1e:57:b2:79:
6d:8d:51:e7:de:5e:3e:7c:24:10:df:ec:da:5d:3c:c4:e8:00:
02:ec:a1:8d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzHlTcwunIkpopaQ0mcH9WfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZTRjOTkxYjUyYzMwNmZmNDUxMDYwMTFhNGU5NTJkODY4
MGQyYjYwHhcNMjQwMTAyMDAzMTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjQ0YmM0OTQyMjc5MzM4MmNhOTJjZGYyNzVmMzU2YzVkNDY2NGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUdThpqn8ld/dAJvfKN8gXHhPsdD
GJRWoQ2ookAKAGXms0erM6ZMApyHWXj3wkwj0RbdcfEIuG88cIHKsYfsOXAINDxG
GuzZK+kIs9c4oa+PMjoRwtd7/T6TVQxqx5nCZ0cgXijDLf+490ZKKRdwdcgCIb8J
JBqfJlVAz9UU+UBhirpeUKg4HL2M6e9EWrrULgMJVlO7cRfq1gMNNaAS8fEVK5Yi
6q7PnGolCGiOVXXR6EGOM/rHb5mvnsRUm5TVmnMtpkmcdPHaaOTsnD600FGivsVU
fqp2nqbOkMH1jYy8eWO5vTuBiKWFHZ6oYUNRlljM5XNy+jxOdZ+oOAjS3QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFFJEvElCJ5M4LKks3ydfNWxdRmTBMB8GA1UdIwQY
MBaAFPTkyZG1LDBv9FEGARpOlS2GgNK2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU9USmtiVXNNR18wVVFZQkdrNlZMWWFBMHJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny82Y2UxNTQtYzNjNi00NDYzLWE2YmQt
MDIxMDhjZWJiM2ZmLzEvVWtTOFNVSW5remdzcVN6ZkoxODFiRjFHWk1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny82Y2UxNTQtYzNjNi00NDYzLWE2YmQtMDIxMDhjZWJiM2Zm
LzEvOU9USmtiVXNNR18wVVFZQkdrNlZMWWFBMHJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAHxj4MA0E
AgACMAcDBQMqEkjAMA0GCSqGSIb3DQEBCwUAA4IBAQBnL4n5DIstBC8QthyggBxJ
c63TPVjKPvWe8MHAY7Eb4suM1F6LKSpTj8uLwNoLwsJoGR4n/hYj8FwPfauPDvoD
CdhAFacDPtrUDOc1qD3xWDFWNMfu5BM7++AezL5Km0sDQBnKLErKQ/NeSM2/npZz
GmXPn0L5zvXCmLPad0HhKKlUYeX1i/6psFn1HE78ZmzsdQ5QVNQaTWT37s/1zubx
U7hRk2b8n99+cZUDP1DuNRGfHL/1Dn4KHKoFXIKFdLkIaQGiLVUyqqR6zcJR9KTp
agxgewpMoVOCgvUrXISM6PGoc0sZ3B5XsnltjVHn3l4+fCQQ3+zaXTzE6AAC7KGN
-----END CERTIFICATE-----
Generated at Thu May 16 01:08:21 2024 by rpki-client on console-ams.rpki-client.org