Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/k-38qXASFxynMVJFARV5Bx40jzs.roa
File: k-38qXASFxynMVJFARV5Bx40jzs.roa (raw, json)
Hash identifier: P6kMXe+6BVpNFG5pH8KSwk4ElRhapaK/p1KU7yizrvg=
Subject key identifier: 93:ED:FC:A9:70:12:17:1C:A7:31:52:45:01:15:79:07:1E:34:8F:3B
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01923D45AB206C3F64D2B2C88418D995E1E5
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/k-38qXASFxynMVJFARV5Bx40jzs.roa
Signing time: Sun 29 Sep 2024 10:13:48 +0000
ROA not before: Sun 29 Sep 2024 10:13:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48678
IP address blocks: 31.210.48.0/24 maxlen: 24
31.210.50.0/24 maxlen: 24
77.92.143.0/24 maxlen: 24
77.92.145.0/24 maxlen: 24
77.92.146.0/24 maxlen: 24
78.135.66.0/24 maxlen: 24
78.135.92.0/24 maxlen: 24
78.135.93.0/24 maxlen: 24
185.17.139.0/24 maxlen: 24
188.132.129.0/24 maxlen: 24
188.132.130.0/24 maxlen: 24
188.132.153.0/24 maxlen: 24
188.132.165.0/24 maxlen: 24
188.132.168.0/24 maxlen: 24
188.132.183.0/24 maxlen: 24
188.132.184.0/24 maxlen: 24
188.132.185.0/24 maxlen: 24
188.132.186.0/24 maxlen: 24
188.132.199.0/24 maxlen: 24
188.132.201.0/24 maxlen: 24
188.132.202.0/24 maxlen: 24
188.132.206.0/24 maxlen: 24
188.132.207.0/24 maxlen: 24
188.132.234.0/24 maxlen: 24
188.132.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:3d:45:ab:20:6c:3f:64:d2:b2:c8:84:18:d9:95:e1:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Sep 29 10:13:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93edfca97012171ca7315245011579071e348f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ad:b6:a2:8d:d7:8e:70:72:c8:0c:7e:db:f6:
af:4f:53:23:91:b4:3a:65:a7:c8:2a:9e:91:16:57:
6f:54:7b:1a:70:18:4f:ef:84:33:3f:ef:13:59:5b:
f5:bc:c5:63:6a:20:33:4f:ef:59:66:69:ba:b0:72:
67:a8:5c:1d:c7:1e:3a:e5:2d:37:22:fb:37:76:fc:
f9:3c:33:d5:86:18:dd:e3:fc:e1:44:2a:92:45:84:
dd:7d:52:6f:cb:5f:79:ba:5b:24:d0:c1:61:71:c4:
28:e6:10:9e:b8:81:c7:ba:1f:dc:98:dd:e1:e1:6c:
8b:f6:1d:e4:b0:ed:00:88:57:e9:28:5e:8c:1e:e8:
4a:b7:d1:01:4a:19:65:43:33:5d:e9:6c:64:fb:65:
c0:2e:c7:21:e7:97:b9:89:ce:d4:cf:17:75:cf:f5:
7f:a9:03:ea:35:5b:4a:ae:e2:8e:65:2b:68:0f:5f:
b3:99:62:c9:b7:9d:fd:c9:a2:e5:cb:bd:54:59:4a:
5f:c3:e8:82:42:19:72:d1:88:71:8d:1f:e3:57:7d:
a2:02:73:50:8d:fd:e4:bb:f4:2c:f3:9c:bc:87:16:
ca:85:07:ab:55:ce:bc:12:89:aa:a0:92:1b:d4:e0:
8a:11:1f:7c:f7:7a:08:bd:4e:6b:1e:d8:e6:84:42:
8e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:ED:FC:A9:70:12:17:1C:A7:31:52:45:01:15:79:07:1E:34:8F:3B
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/k-38qXASFxynMVJFARV5Bx40jzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.48.0/24
31.210.50.0/24
77.92.143.0/24
77.92.145.0-77.92.146.255
78.135.66.0/24
78.135.92.0/23
185.17.139.0/24
188.132.129.0-188.132.130.255
188.132.153.0/24
188.132.165.0/24
188.132.168.0/24
188.132.183.0-188.132.186.255
188.132.199.0/24
188.132.201.0-188.132.202.255
188.132.206.0/23
188.132.234.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:b9:9b:95:ae:bb:a1:75:be:82:e3:4b:5d:7a:ee:09:3d:23:
ac:7e:a6:55:d5:1b:6c:a4:5b:a0:e7:05:90:59:ef:ec:d1:ce:
01:06:c0:9f:6d:02:3a:67:61:36:d3:e8:3e:bd:3f:cb:d9:84:
9b:bf:38:86:64:5e:5f:ff:e7:e8:95:fd:94:00:ef:3d:95:b3:
0f:44:e4:5d:99:04:c5:fe:3c:d5:49:07:8c:73:6e:f2:76:52:
f6:3e:6e:e8:bc:72:ce:df:aa:dd:68:98:4e:f7:eb:ad:73:48:
2d:4e:86:4a:7a:72:60:1d:c8:76:2b:8c:db:2f:9d:7e:6d:17:
48:48:92:7d:6b:72:b5:54:e0:c8:12:6a:e5:a5:26:13:47:5e:
c7:af:ae:9c:94:03:01:a8:ec:fa:f2:f2:57:ba:ca:fe:94:7e:
60:c6:18:23:48:f6:ea:a1:ae:81:40:53:be:31:c5:d6:81:b8:
66:01:5c:5b:c6:dd:a3:d5:27:8a:15:d2:40:b5:25:4f:d1:0c:
5d:b0:81:7e:ba:94:32:d3:39:89:a5:71:8e:cd:f1:b8:bb:35:
e7:49:3f:a1:f9:5a:4b:b9:d7:47:6f:17:06:e8:0c:e2:35:6e:
b1:b7:73:3a:e5:32:ce:34:11:2d:41:37:28:c0:a9:2b:3b:e2:
af:ec:ff:d6
-----BEGIN CERTIFICATE-----
MIIFfDCCBGSgAwIBAgISAZI9RasgbD9k0rLIhBjZleHlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjQwOTI5MTAxMzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5M2VkZmNhOTcwMTIxNzFjYTczMTUyNDUwMTE1NzkwNzFlMzQ4ZjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArq22oo3XjnByyAx+2/avT1MjkbQ6
ZafIKp6RFldvVHsacBhP74QzP+8TWVv1vMVjaiAzT+9ZZmm6sHJnqFwdxx465S03
Ivs3dvz5PDPVhhjd4/zhRCqSRYTdfVJvy195ulsk0MFhccQo5hCeuIHHuh/cmN3h
4WyL9h3ksO0AiFfpKF6MHuhKt9EBShllQzNd6Wxk+2XALsch55e5ic7Uzxd1z/V/
qQPqNVtKruKOZStoD1+zmWLJt539yaLly71UWUpfw+iCQhly0YhxjR/jV32iAnNQ
jf3ku/Qs85y8hxbKhQerVc68EomqoJIb1OCKER9893oIvU5rHtjmhEKOzQIDAQAB
o4ICiDCCAoQwHQYDVR0OBBYEFJPt/KlwEhccpzFSRQEVeQceNI87MB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvay0zOHFYQVNGeHluTVZKRkFSVjVCeDQwanpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGdBggrBgEFBQcBBwEB/wSBjTCBijCBhwQCAAEwgYADBAAf
0jADBAAf0jIDBABNXI8wDAMEAE1ckQMEAE1ckgMEAE6HQgMEAU6HXAMEALkRizAM
AwQAvISBAwQAvISCAwQAvISZAwQAvISlAwQAvISoMAwDBAC8hLcDBAC8hLoDBAC8
hMcwDAMEALyEyQMEALyEygMEAbyEzgMEAbyE6jANBgkqhkiG9w0BAQsFAAOCAQEA
Prmbla67oXW+guNLXXruCT0jrH6mVdUbbKRboOcFkFnv7NHOAQbAn20COmdhNtPo
Pr0/y9mEm784hmReX//n6JX9lADvPZWzD0TkXZkExf481UkHjHNu8nZS9j5u6Lxy
zt+q3WiYTvfrrXNILU6GSnpyYB3IdiuM2y+dfm0XSEiSfWtytVTgyBJq5aUmE0de
x6+unJQDAajs+vLyV7rK/pR+YMYYI0j26qGugUBTvjHF1oG4ZgFcW8bdo9UnihXS
QLUlT9EMXbCBfrqUMtM5iaVxjs3xuLs150k/oflaS7nXR28XBugM4jVusbdzOuUy
zjQRLUE3KMCpKzvir+z/1g==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:54:09 2024 by rpki-client on console-ams.rpki-client.org