Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/6YE2O79xQeGTUj3VL-Nf93TRsns.roa
File: 6YE2O79xQeGTUj3VL-Nf93TRsns.roa (raw, json)
Hash identifier: lVv7m8401Ksc4tKSRAfj8o4n7JjNU4Hu6XWtBuqAacw=
Subject key identifier: E9:81:36:3B:BF:71:41:E1:93:52:3D:D5:2F:E3:5F:F7:74:D1:B2:7B
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0191487CBDCC6D9013CF4E473295B2003C87
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/6YE2O79xQeGTUj3VL-Nf93TRsns.roa
Signing time: Mon 12 Aug 2024 21:27:00 +0000
ROA not before: Mon 12 Aug 2024 21:27:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44149
IP address blocks: 31.222.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:48:7c:bd:cc:6d:90:13:cf:4e:47:32:95:b2:00:3c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Aug 12 21:27:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e981363bbf7141e193523dd52fe35ff774d1b27b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:58:af:12:00:c3:07:6c:a4:08:e6:51:31:4a:
fb:f2:c4:19:f5:77:9a:0c:35:a3:fb:02:0b:67:00:
59:57:1c:30:32:f6:ef:a6:6c:4e:d9:b6:54:00:51:
cb:6b:13:6e:de:db:31:c0:18:19:c8:80:1c:b5:db:
1e:d3:4f:3f:ea:84:63:e2:4c:d6:3f:2d:92:71:c5:
bf:eb:ad:97:e4:c6:11:3a:e5:38:b9:ef:e4:e0:33:
df:f1:e4:cb:a7:ac:e3:f8:ba:35:a9:fd:b4:6e:82:
b0:3c:ec:e3:fd:4f:02:1f:6d:a6:59:f9:5c:a7:5d:
16:cd:a7:a4:77:87:b9:d2:84:a8:1f:8a:3a:14:87:
21:d8:0e:d7:52:12:49:64:80:26:5e:f1:68:5c:ee:
0c:fe:03:69:46:aa:23:68:52:d1:55:17:6c:52:3e:
fd:34:4e:6f:f1:e3:f5:c1:56:23:5a:34:69:15:cb:
1a:67:b9:cd:5f:ef:e0:68:e3:ea:ed:8f:05:27:fb:
2f:c1:2f:b5:5b:8e:b8:c6:d8:c1:17:44:8f:6b:cb:
f9:0a:a2:7b:2a:c7:21:97:7a:41:e7:85:3c:b1:0f:
98:fa:bd:62:0b:c5:c2:07:30:db:11:cb:04:c3:eb:
79:2c:ae:45:d9:ae:04:92:6c:4f:02:0f:77:cb:e8:
a0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:81:36:3B:BF:71:41:E1:93:52:3D:D5:2F:E3:5F:F7:74:D1:B2:7B
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/6YE2O79xQeGTUj3VL-Nf93TRsns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.224.0/24
Signature Algorithm: sha256WithRSAEncryption
64:d6:3f:8d:82:26:c0:61:60:5b:c5:3c:a8:c7:1c:b9:5a:fe:
35:99:11:b0:02:2a:84:70:8d:07:52:fa:da:d1:3a:5c:6d:80:
df:96:a1:4a:70:2b:5b:bf:4a:fb:69:bd:e1:60:22:de:59:8d:
15:34:d1:55:10:6b:64:ba:49:c8:30:aa:6d:e9:a9:0d:29:94:
1c:b4:77:c0:78:50:bc:26:1a:96:4e:24:6e:6c:84:15:48:64:
b5:f2:19:b6:12:d4:5d:d0:b6:bf:b0:8d:b4:67:1a:62:79:e3:
db:9b:11:3a:7e:07:04:d0:09:c4:4b:9b:07:24:ac:13:21:41:
ec:06:87:b5:42:6c:01:29:59:a2:36:c1:30:c2:c6:65:2a:92:
e8:68:80:8b:a8:d6:b4:c8:b5:b4:73:c8:c1:18:c8:d1:5d:7d:
70:57:64:53:43:95:1f:f6:2e:33:03:e9:26:dd:19:f5:b6:62:
64:55:83:b7:a5:4a:14:24:ad:7f:b2:21:b2:5f:80:04:e3:22:
03:97:e3:d8:b3:8b:da:ac:5d:7b:42:04:c1:4c:b2:9c:51:2f:
60:7c:df:30:1e:04:1f:59:0f:25:85:82:e1:21:3b:cf:5c:85:
c8:38:01:d3:60:74:3f:f1:b8:60:37:55:51:e8:f0:d1:2f:48:
72:20:eb:14
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZFIfL3MbZATz05HMpWyADyHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjQwODEyMjEyNzAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTgxMzYzYmJmNzE0MWUxOTM1MjNkZDUyZmUzNWZmNzc0ZDFiMjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVivEgDDB2ykCOZRMUr78sQZ9Xea
DDWj+wILZwBZVxwwMvbvpmxO2bZUAFHLaxNu3tsxwBgZyIActdse008/6oRj4kzW
Py2SccW/662X5MYROuU4ue/k4DPf8eTLp6zj+Lo1qf20boKwPOzj/U8CH22mWflc
p10Wzaekd4e50oSoH4o6FIch2A7XUhJJZIAmXvFoXO4M/gNpRqojaFLRVRdsUj79
NE5v8eP1wVYjWjRpFcsaZ7nNX+/gaOPq7Y8FJ/svwS+1W464xtjBF0SPa8v5CqJ7
Kschl3pB54U8sQ+Y+r1iC8XCBzDbEcsEw+t5LK5F2a4EkmxPAg93y+ig3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOmBNju/cUHhk1I91S/jX/d00bJ7MB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvNllFMk83OXhRZUdUVWozVkwtTmY5M1RSc25zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH97gMA0G
CSqGSIb3DQEBCwUAA4IBAQBk1j+NgibAYWBbxTyoxxy5Wv41mRGwAiqEcI0HUvra
0TpcbYDflqFKcCtbv0r7ab3hYCLeWY0VNNFVEGtkuknIMKpt6akNKZQctHfAeFC8
JhqWTiRubIQVSGS18hm2EtRd0La/sI20ZxpieePbmxE6fgcE0AnES5sHJKwTIUHs
Boe1QmwBKVmiNsEwwsZlKpLoaICLqNa0yLW0c8jBGMjRXX1wV2RTQ5Uf9i4zA+km
3Rn1tmJkVYO3pUoUJK1/siGyX4AE4yIDl+PYs4varF17QgTBTLKcUS9gfN8wHgQf
WQ8lhYLhITvPXIXIOAHTYHQ/8bhgN1VR6PDRL0hyIOsU
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:26:03 2024 by rpki-client on console-ams.rpki-client.org