Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/Sqf8dzUut5LjX7mpjvr4aQuvhJs.roa
File: Sqf8dzUut5LjX7mpjvr4aQuvhJs.roa (raw, json)
Hash identifier: 6p0DcOIP/y+el9j/S6aNAkKXgjeh/WpAe7GylljKaR8=
Subject key identifier: 4A:A7:FC:77:35:2E:B7:92:E3:5F:B9:A9:8E:FA:F8:69:0B:AF:84:9B
Certificate issuer: /CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Certificate serial: 018CC56EB36694DEE80B74ECE4C0F055E7FC
Authority key identifier: 99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/Sqf8dzUut5LjX7mpjvr4aQuvhJs.roa
Signing time: Mon 01 Jan 2024 14:30:15 +0000
ROA not before: Mon 01 Jan 2024 14:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21413
IP address blocks: 31.42.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:b3:66:94:de:e8:0b:74:ec:e4:c0:f0:55:e7:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Validity
Not Before: Jan 1 14:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4aa7fc77352eb792e35fb9a98efaf8690baf849b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:49:0f:07:c8:c3:a0:d4:f5:67:cc:49:89:cb:
06:02:76:04:1b:b2:12:89:89:fe:02:88:5c:c5:36:
96:ce:d0:1a:e2:9b:8c:f8:61:24:d6:19:5c:b0:07:
6a:ce:9f:69:de:9e:93:39:c7:ed:fc:d6:5d:b3:ea:
bb:35:d8:43:84:d1:f5:2c:7d:7b:c3:62:b8:ea:c7:
3e:17:c3:f8:eb:45:f6:20:be:48:5d:0e:20:6a:6f:
4f:93:43:a8:a6:0e:ac:71:aa:df:47:7d:b2:04:ae:
38:f4:3c:a8:99:e6:29:f6:f5:88:a1:6a:3b:7e:2a:
b2:4b:6f:f1:6e:93:e9:08:3c:15:4c:99:59:e2:46:
48:19:d4:c2:43:76:1e:52:66:8b:7a:0a:9b:75:30:
95:2e:cf:d0:7c:45:3f:bf:74:12:df:a3:76:27:f1:
3a:e5:04:54:f1:8e:ba:55:35:63:d5:1c:ef:fe:51:
16:e9:0c:5f:25:ef:49:d0:e4:4c:06:78:ae:74:f9:
50:42:3a:ed:a5:2c:1e:1e:9b:6c:9c:1c:e1:0d:94:
03:fb:3f:82:5e:23:6f:0e:bd:e7:37:ad:f9:7a:52:
09:be:c4:ee:83:19:e2:e8:57:f2:a0:55:fb:11:6f:
14:c1:12:fd:a7:4d:8b:18:6c:cf:23:ff:c2:4f:9a:
e6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A7:FC:77:35:2E:B7:92:E3:5F:B9:A9:8E:FA:F8:69:0B:AF:84:9B
X509v3 Authority Key Identifier:
keyid:99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/Sqf8dzUut5LjX7mpjvr4aQuvhJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.180.0/24
Signature Algorithm: sha256WithRSAEncryption
22:eb:48:00:59:f6:0e:a4:63:04:65:7d:8a:95:41:7c:a3:57:
3b:4e:32:64:33:27:db:6c:99:85:af:7b:ee:1e:d0:e1:7e:c2:
1e:aa:8a:b3:62:ff:91:76:6c:6e:17:69:d0:66:92:1b:4e:0e:
fa:cd:83:9f:32:27:7a:27:0b:15:ea:51:a9:f9:e4:4a:2c:4d:
8d:57:cd:a0:d6:cc:fa:14:90:1e:4b:5f:aa:64:12:f4:4f:e5:
f6:ba:25:2a:c8:74:73:0f:25:91:46:5a:d8:f7:01:a6:21:53:
ae:b1:70:98:48:14:55:bd:b3:cb:52:b7:fc:0b:a2:9b:93:0b:
4d:c9:c3:a5:8a:50:d6:83:6d:c4:1f:08:09:99:52:5b:4f:7f:
b9:dc:2c:7a:ae:b1:07:82:60:11:1a:eb:2c:5d:25:95:b5:00:
42:70:ee:fc:12:92:b3:e4:59:03:04:f2:44:42:3e:e8:c0:82:
8a:78:5c:43:6b:c1:ba:3c:f4:2b:47:e0:d5:1e:5c:d6:f3:a8:
69:6a:f0:ed:47:87:76:b9:ad:90:c6:dd:d7:d3:a9:09:bf:81:
29:d5:6b:1e:9b:1a:2f:1e:e9:88:56:7b:b3:dd:a2:a3:ca:dd:
2e:a0:a1:18:f1:f4:e2:fb:09:48:d0:5b:d8:20:a7:09:90:01:
ab:c3:f8:9e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbrNmlN7oC3Ts5MDwVef8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ODRiOWViMTIyMjM3MTExYzFmOGNhNTc3MDdlYzczMDcy
OTFlZTgwHhcNMjQwMTAxMTQzMDE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWE3ZmM3NzM1MmViNzkyZTM1ZmI5YTk4ZWZhZjg2OTBiYWY4NDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0kPB8jDoNT1Z8xJicsGAnYEG7IS
iYn+AohcxTaWztAa4puM+GEk1hlcsAdqzp9p3p6TOcft/NZds+q7NdhDhNH1LH17
w2K46sc+F8P460X2IL5IXQ4gam9Pk0Oopg6scarfR32yBK449DyomeYp9vWIoWo7
fiqyS2/xbpPpCDwVTJlZ4kZIGdTCQ3YeUmaLegqbdTCVLs/QfEU/v3QS36N2J/E6
5QRU8Y66VTVj1Rzv/lEW6QxfJe9J0ORMBniudPlQQjrtpSweHptsnBzhDZQD+z+C
XiNvDr3nN635elIJvsTugxni6FfyoFX7EW8UwRL9p02LGGzPI//CT5rmeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEqn/Hc1LreS41+5qY76+GkLr4SbMB8GA1UdIwQY
MBaAFJmEuesSIjcRHB+MpXcH7HMHKR7oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVlTNTZ4SWlOeEVjSDR5bGR3ZnNjd2NwSHVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9iOWMxZDctMmFlZC00Njk2LTgwYTct
ZDVhYmY1MDMxZDIxLzEvU3FmOGR6VXV0NUxqWDdtcGp2cjRhUXV2aEpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9iOWMxZDctMmFlZC00Njk2LTgwYTctZDVhYmY1MDMxZDIx
LzEvbVlTNTZ4SWlOeEVjSDR5bGR3ZnNjd2NwSHVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHyq0MA0G
CSqGSIb3DQEBCwUAA4IBAQAi60gAWfYOpGMEZX2KlUF8o1c7TjJkMyfbbJmFr3vu
HtDhfsIeqoqzYv+RdmxuF2nQZpIbTg76zYOfMid6JwsV6lGp+eRKLE2NV82g1sz6
FJAeS1+qZBL0T+X2uiUqyHRzDyWRRlrY9wGmIVOusXCYSBRVvbPLUrf8C6KbkwtN
ycOlilDWg23EHwgJmVJbT3+53Cx6rrEHgmARGussXSWVtQBCcO78EpKz5FkDBPJE
Qj7owIKKeFxDa8G6PPQrR+DVHlzW86hpavDtR4d2ua2Qxt3X06kJv4Ep1Wsemxov
HumIVnuz3aKjyt0uoKEY8fTi+wlI0FvYIKcJkAGrw/ie
-----END CERTIFICATE-----
Generated at Sun Jun 16 23:48:33 2024 by rpki-client on console-ams.rpki-client.org