Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1_jZJ-9riJccJvuhTIEF2uuTNIk.roa
File: 1_jZJ-9riJccJvuhTIEF2uuTNIk.roa (raw, json)
Hash identifier: 4LiWjy/rtsnWJegJK32MLtfl4AxNmUXFjLYoSB6ktfs=
Subject key identifier: D7:F8:D9:27:EF:6B:88:97:1C:26:FB:A1:4C:81:05:DA:EB:93:34:89
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 019132868F2BBFE7EE2A9C80CE09659364BA
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1_jZJ-9riJccJvuhTIEF2uuTNIk.roa
Signing time: Thu 08 Aug 2024 15:06:04 +0000
ROA not before: Thu 08 Aug 2024 15:06:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62425
IP address blocks: 31.210.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:32:86:8f:2b:bf:e7:ee:2a:9c:80:ce:09:65:93:64:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Aug 8 15:06:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7f8d927ef6b88971c26fba14c8105daeb933489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b9:54:ac:29:00:d6:c6:05:cf:0f:ca:80:df:
1d:00:7a:66:63:41:36:a2:19:c0:e4:44:f2:98:96:
d8:ef:e9:a5:d0:3c:cc:5f:db:42:3c:29:66:80:b0:
23:e1:01:bc:ad:46:f3:e0:0a:2c:76:92:db:78:28:
16:3a:10:d2:c8:0d:1b:49:15:2e:b1:bd:f2:e6:3d:
a5:96:f2:87:58:16:b3:62:7e:74:4e:9a:f9:79:b4:
1c:00:fd:f5:6d:02:3a:2d:a2:5a:c5:f5:57:a0:49:
d4:d3:ba:09:bc:19:af:83:3a:ad:5a:b4:34:4c:11:
bb:3f:7e:1a:7b:29:a8:73:da:1c:aa:88:1c:ea:85:
77:26:df:7e:3a:a0:44:9b:83:7d:b1:b5:6c:31:02:
9d:da:eb:24:bc:a4:f4:b4:8e:d1:d0:30:65:06:09:
f3:d7:ce:94:5d:4e:b5:00:17:05:d2:1f:a3:17:0b:
f6:59:93:48:4b:ec:17:53:78:d8:a0:b4:71:28:98:
d6:db:26:35:67:4e:3c:17:df:2b:95:0f:df:12:5a:
94:f2:d9:00:31:3e:7b:e3:f4:12:e2:5c:86:1b:ab:
f8:cf:d7:47:94:7a:e0:0f:f5:28:50:7a:81:61:f4:
cf:d5:e0:d7:2e:a3:3b:17:4b:0b:34:40:63:41:21:
25:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F8:D9:27:EF:6B:88:97:1C:26:FB:A1:4C:81:05:DA:EB:93:34:89
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1_jZJ-9riJccJvuhTIEF2uuTNIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.43.0/24
Signature Algorithm: sha256WithRSAEncryption
85:e7:1a:9e:77:0b:33:91:aa:50:5c:58:33:7c:8e:53:fc:8a:
6e:49:4f:f6:d9:97:e8:98:27:92:e0:a2:bb:51:cb:12:1d:19:
a8:f6:40:8e:1c:d6:6c:5b:d5:fe:f3:1d:e8:90:45:3f:d8:82:
61:37:7b:63:54:25:32:77:7c:f7:ee:87:00:6d:83:ae:ae:42:
b0:77:9c:9f:82:09:2f:ff:99:8b:c8:ef:9e:86:af:8f:76:c8:
1d:99:f0:5e:f1:c9:96:95:91:df:80:45:cc:7b:18:33:45:9e:
a1:fc:d2:b8:2e:50:b2:a1:07:be:52:f6:2d:e3:1b:c4:8f:c2:
6c:4c:7b:b1:a4:8c:08:16:fe:19:6e:c3:b3:65:ad:e7:3e:1f:
0f:8a:4b:65:05:a5:5c:02:f6:70:f3:2e:77:56:5b:4c:4c:85:
4f:ff:35:b9:37:00:56:e8:9e:a4:80:06:75:4b:ff:c0:c5:04:
27:88:98:1f:b6:a9:dd:61:11:68:2a:02:ae:e8:a2:56:5c:99:
02:2c:31:0f:5b:46:9a:72:ee:e3:54:26:dd:7f:45:98:a2:5f:
60:96:e9:74:22:3d:c6:37:b5:e3:f8:59:5e:45:3b:ab:8a:06:
e4:5a:72:eb:ca:f7:f4:7f:1d:bf:83:2c:58:71:51:8c:73:eb:
ab:c1:4c:f6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZEyho8rv+fuKpyAzgllk2S6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjQwODA4MTUwNjA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkN2Y4ZDkyN2VmNmI4ODk3MWMyNmZiYTE0YzgxMDVkYWViOTMzNDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrlUrCkA1sYFzw/KgN8dAHpmY0E2
ohnA5ETymJbY7+ml0DzMX9tCPClmgLAj4QG8rUbz4AosdpLbeCgWOhDSyA0bSRUu
sb3y5j2llvKHWBazYn50Tpr5ebQcAP31bQI6LaJaxfVXoEnU07oJvBmvgzqtWrQ0
TBG7P34aeymoc9ocqogc6oV3Jt9+OqBEm4N9sbVsMQKd2uskvKT0tI7R0DBlBgnz
186UXU61ABcF0h+jFwv2WZNIS+wXU3jYoLRxKJjW2yY1Z048F98rlQ/fElqU8tkA
MT574/QS4lyGG6v4z9dHlHrgD/UoUHqBYfTP1eDXLqM7F0sLNEBjQSEl2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNf42Sfva4iXHCb7oUyBBdrrkzSJMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvMV9qWkotOXJpSmNjSnZ1aFRJRUYydXVUTklrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH9IrMA0G
CSqGSIb3DQEBCwUAA4IBAQCF5xqedwszkapQXFgzfI5T/IpuSU/22ZfomCeS4KK7
UcsSHRmo9kCOHNZsW9X+8x3okEU/2IJhN3tjVCUyd3z37ocAbYOurkKwd5yfggkv
/5mLyO+ehq+PdsgdmfBe8cmWlZHfgEXMexgzRZ6h/NK4LlCyoQe+UvYt4xvEj8Js
THuxpIwIFv4ZbsOzZa3nPh8PiktlBaVcAvZw8y53VltMTIVP/zW5NwBW6J6kgAZ1
S//AxQQniJgftqndYRFoKgKu6KJWXJkCLDEPW0aacu7jVCbdf0WYol9glul0Ij3G
N7Xj+FleRTurigbkWnLryvf0fx2/gyxYcVGMc+urwUz2
-----END CERTIFICATE-----
Generated at Tue Nov 26 00:37:09 2024 by rpki-client on console-fra.rpki-client.org