Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/31eRt4M4zevBV44htwJW257Z8nU.roa
File: 31eRt4M4zevBV44htwJW257Z8nU.roa (raw, json)
Hash identifier: zeTS2Bj3D/3Rvnzktiw783h4tQ+dPhe7AYpTUssRlig=
Subject key identifier: DF:57:91:B7:83:38:CD:EB:C1:57:8E:21:B7:02:56:DB:9E:D9:F2:75
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A13F01B07B108DC7EA1AA8BB1CA07
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/31eRt4M4zevBV44htwJW257Z8nU.roa
Signing time: Tue 02 Jan 2024 12:33:24 +0000
ROA not before: Tue 02 Jan 2024 12:33:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56534
IP address blocks: 31.148.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Jun 2024 02:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:13:f0:1b:07:b1:08:dc:7e:a1:aa:8b:b1:ca:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df5791b78338cdebc1578e21b70256db9ed9f275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e1:f4:00:f1:b4:f0:4f:11:4e:4b:5d:47:70:
fc:78:4a:8f:89:29:95:88:47:08:fc:01:45:9e:3a:
1a:8a:fa:83:88:59:3a:3d:73:3e:b4:7f:b1:96:0c:
08:c6:fd:a8:58:5b:c8:88:e3:9a:0b:b9:5f:6b:49:
af:0c:38:1c:7a:2b:ec:ae:a4:b0:7e:bc:81:e1:79:
93:82:04:fb:df:72:42:5b:55:54:7d:73:88:bf:86:
f7:fe:c9:6a:22:24:2b:24:25:b3:ef:38:46:43:f8:
4d:6e:dd:ef:1a:ac:82:16:20:d0:d9:78:33:46:73:
58:17:bf:56:03:a9:53:c1:15:26:b1:ba:fc:f4:4e:
6d:7d:ca:98:20:63:41:ec:a9:3d:78:8c:40:e2:56:
e8:3f:f4:8f:ab:50:cd:52:6a:99:d2:3f:47:d6:ad:
cb:8f:f9:c2:db:ff:66:e3:ca:3f:0e:ca:54:79:33:
2b:a4:8b:21:f0:0e:e2:3b:59:b8:47:b0:39:3f:83:
a4:2f:1f:e5:d3:a6:60:b4:6f:5c:f9:31:1a:7f:46:
08:d1:2d:f7:f9:bc:1a:5c:22:85:dc:2c:d2:7d:86:
7f:dd:be:df:48:52:29:aa:99:12:9c:8a:1f:45:2c:
6d:2f:cb:48:88:28:a3:c8:e4:7b:85:02:8b:56:f9:
34:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:57:91:B7:83:38:CD:EB:C1:57:8E:21:B7:02:56:DB:9E:D9:F2:75
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/31eRt4M4zevBV44htwJW257Z8nU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.0.0/24
Signature Algorithm: sha256WithRSAEncryption
66:fe:af:db:70:00:53:ee:bf:1a:e6:92:02:9f:95:3c:84:7e:
5f:a9:9c:e2:62:4e:c8:c1:c0:ac:b1:bf:64:b1:5c:cc:a9:50:
de:cb:93:9d:d2:58:34:db:88:49:d1:85:02:d1:e5:25:8e:58:
4d:a1:f3:7c:5f:f0:8a:ff:0c:e4:3c:f1:25:46:2c:f3:09:07:
4d:3f:9f:32:3d:c6:fa:bc:aa:83:6e:47:24:60:2e:1c:b0:79:
d4:21:fd:1b:79:f6:2e:83:83:af:ad:89:7e:3d:0d:9c:e8:2b:
9e:88:67:7b:75:d9:46:12:b3:de:f8:c5:2d:84:37:e4:60:99:
07:07:87:b1:1f:eb:c3:ca:07:ff:86:d8:92:52:9a:13:70:8c:
95:12:b2:e1:a8:db:d1:a8:4b:da:f4:ef:e3:8c:f7:9a:35:45:
ab:36:bd:b7:74:eb:95:bc:b5:26:ae:85:72:77:1c:c2:2b:92:
41:77:c7:ea:4d:b2:3e:b7:04:7f:e3:75:a1:23:eb:5b:26:e1:
f7:09:82:1f:24:5b:2f:58:a2:4d:a3:da:2e:a0:ed:d8:cc:49:
b9:5c:a7:8c:3e:88:62:75:24:17:55:02:78:cf:cc:e5:bc:81:
c1:1e:e5:72:c5:06:10:88:19:09:c3:c1:5c:a9:8d:ff:4b:19:
10:eb:42:9e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKhPwGwexCNx+oaqLscoHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjQwMTAyMTIzMzI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjU3OTFiNzgzMzhjZGViYzE1NzhlMjFiNzAyNTZkYjllZDlmMjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOH0APG08E8RTktdR3D8eEqPiSmV
iEcI/AFFnjoaivqDiFk6PXM+tH+xlgwIxv2oWFvIiOOaC7lfa0mvDDgceivsrqSw
fryB4XmTggT733JCW1VUfXOIv4b3/slqIiQrJCWz7zhGQ/hNbt3vGqyCFiDQ2Xgz
RnNYF79WA6lTwRUmsbr89E5tfcqYIGNB7Kk9eIxA4lboP/SPq1DNUmqZ0j9H1q3L
j/nC2/9m48o/DspUeTMrpIsh8A7iO1m4R7A5P4OkLx/l06ZgtG9c+TEaf0YI0S33
+bwaXCKF3CzSfYZ/3b7fSFIpqpkSnIofRSxtL8tIiCijyOR7hQKLVvk03QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN9XkbeDOM3rwVeOIbcCVtue2fJ1MB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvMzFlUnQ0TTR6ZXZCVjQ0aHR3SlcyNTdaOG5VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH5QAMA0G
CSqGSIb3DQEBCwUAA4IBAQBm/q/bcABT7r8a5pICn5U8hH5fqZziYk7IwcCssb9k
sVzMqVDey5Od0lg024hJ0YUC0eUljlhNofN8X/CK/wzkPPElRizzCQdNP58yPcb6
vKqDbkckYC4csHnUIf0befYug4OvrYl+PQ2c6CueiGd7ddlGErPe+MUthDfkYJkH
B4exH+vDygf/htiSUpoTcIyVErLhqNvRqEva9O/jjPeaNUWrNr23dOuVvLUmroVy
dxzCK5JBd8fqTbI+twR/43WhI+tbJuH3CYIfJFsvWKJNo9ouoO3YzEm5XKeMPohi
dSQXVQJ4z8zlvIHBHuVyxQYQiBkJw8FcqY3/SxkQ60Ke
-----END CERTIFICATE-----
Generated at Thu Jun 27 07:16:04 2024 by rpki-client on console-ams.rpki-client.org