Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/oAo1i3SjL8sGDBcKEaMDCmhfjCo.roa
File: oAo1i3SjL8sGDBcKEaMDCmhfjCo.roa (raw, json)
Hash identifier: phfX6oAPyn8QaMEC7gw9Xw3HNSS3NfkkZyoBif9UPBQ=
Subject key identifier: A0:0A:35:8B:74:A3:2F:CB:06:0C:17:0A:11:A3:03:0A:68:5F:8C:2A
Certificate issuer: /CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1
Certificate serial: 01929BF4AEC4299CF8C47FD3881646F5F9C9
Authority key identifier: 5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/oAo1i3SjL8sGDBcKEaMDCmhfjCo.roa
Signing time: Thu 17 Oct 2024 19:29:16 +0000
ROA not before: Thu 17 Oct 2024 19:29:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56971
IP address blocks: 31.15.16.0/24 maxlen: 24
31.15.17.0/24 maxlen: 24
31.15.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9b:f4:ae:c4:29:9c:f8:c4:7f:d3:88:16:46:f5:f9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1
Validity
Not Before: Oct 17 19:29:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a00a358b74a32fcb060c170a11a3030a685f8c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:40:d0:f8:90:d1:3b:f8:a6:89:20:e0:66:78:
01:be:46:53:09:54:33:27:48:e3:66:2d:9c:51:13:
a8:59:89:17:7d:dd:04:d2:ec:a2:bd:b2:20:f9:87:
1e:77:63:39:f8:77:f7:1a:4d:7a:21:ed:57:f6:6f:
70:14:c0:d2:b6:ce:31:cc:ab:2b:26:82:ce:77:94:
34:70:af:4b:ae:77:35:87:1e:6a:2d:0f:eb:45:ef:
4a:52:7d:5d:25:42:cf:4c:9d:1b:84:aa:d3:79:ed:
f1:60:09:5e:24:0c:28:d4:5b:b9:5f:b5:99:e8:44:
20:d6:02:0c:a1:78:69:fa:cc:f4:87:7d:0a:8d:6e:
ff:5c:b9:2e:8c:ed:9a:60:4a:f4:e2:b9:78:fe:41:
ea:76:d3:ea:bb:5c:5f:f0:b5:0e:a9:0e:d7:e0:f9:
df:20:27:fa:53:bc:8d:9b:05:e4:9b:19:d0:6a:e1:
1d:9e:0b:3f:d3:78:da:b4:66:94:93:a8:e2:5e:ed:
6c:c3:6f:3c:cc:5e:eb:0d:78:db:72:82:31:b2:3d:
67:33:63:b1:dd:ec:a2:fa:12:71:7d:dc:1a:53:ea:
cd:4c:a0:cf:58:00:d4:20:06:29:56:e9:80:3c:91:
f0:3f:f9:65:c0:87:60:ee:16:38:12:2a:e5:73:0e:
d0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0A:35:8B:74:A3:2F:CB:06:0C:17:0A:11:A3:03:0A:68:5F:8C:2A
X509v3 Authority Key Identifier:
keyid:5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/oAo1i3SjL8sGDBcKEaMDCmhfjCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.16.0-31.15.18.255
Signature Algorithm: sha256WithRSAEncryption
65:2b:ac:8f:1c:20:2d:84:98:27:e6:b2:e8:3a:30:8f:f9:03:
17:52:d9:6b:b3:5c:6f:58:1f:0c:02:c5:cf:07:e6:56:73:73:
ce:ef:21:07:48:d6:21:b8:61:49:e5:fb:28:2b:99:4b:23:36:
a0:49:5d:d5:1b:0e:71:d0:80:b8:70:ac:45:23:09:73:e7:28:
d4:fd:81:fa:ee:1b:8a:c4:95:a7:36:f6:84:4c:b4:90:6f:50:
e6:41:64:d7:8f:80:7a:44:40:85:81:31:e2:8b:75:98:9b:72:
81:77:2d:82:7b:3b:8e:33:b1:08:2d:07:cb:4e:48:30:35:db:
fe:9b:19:f0:7b:ce:88:4e:f9:b5:44:96:e3:7d:b1:25:d3:70:
b5:8d:ea:40:59:cd:be:0f:f8:72:e0:81:b0:ed:d6:ab:d8:d3:
7c:01:19:dc:c6:40:d6:22:fb:22:4d:7b:98:f4:8a:3c:f4:a7:
cd:47:80:77:c0:26:3d:c5:29:9e:92:19:77:74:5b:b2:2a:2f:
20:80:d0:82:8d:0e:88:18:b8:1e:06:53:b5:8a:9b:bb:41:71:
a5:00:67:6f:49:99:fb:a0:32:60:ec:3b:bb:24:7b:69:f5:b9:
bf:fa:3c:43:f1:ba:a7:71:5b:aa:00:b3:0f:ce:80:74:50:d4:
e5:d0:4a:49
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZKb9K7EKZz4xH/TiBZG9fnJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZWUwNTFhOTM5MDFlY2MwMTc0NDA3OWFhNGFjMmZiMDc3
YjlmYzEwHhcNMjQxMDE3MTkyOTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDBhMzU4Yjc0YTMyZmNiMDYwYzE3MGExMWEzMDMwYTY4NWY4YzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUDQ+JDRO/imiSDgZngBvkZTCVQz
J0jjZi2cUROoWYkXfd0E0uyivbIg+Yced2M5+Hf3Gk16Ie1X9m9wFMDSts4xzKsr
JoLOd5Q0cK9Lrnc1hx5qLQ/rRe9KUn1dJULPTJ0bhKrTee3xYAleJAwo1Fu5X7WZ
6EQg1gIMoXhp+sz0h30KjW7/XLkujO2aYEr04rl4/kHqdtPqu1xf8LUOqQ7X4Pnf
ICf6U7yNmwXkmxnQauEdngs/03jatGaUk6jiXu1sw288zF7rDXjbcoIxsj1nM2Ox
3eyi+hJxfdwaU+rNTKDPWADUIAYpVumAPJHwP/llwIdg7hY4Eirlcw7QEQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFKAKNYt0oy/LBgwXChGjAwpoX4wqMB8GA1UdIwQY
MBaAFFvuBRqTkB7MAXRAeapKwvsHe5/BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVy00RkdwT1FIc3dCZEVCNXFrckMtd2Q3bjhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84ZWZmNDItNWI1NS00ZTZmLTgyMjIt
YTUyYTg3OTVkOTU2LzEvb0FvMWkzU2pMOHNHREJjS0VhTURDbWhmakNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni84ZWZmNDItNWI1NS00ZTZmLTgyMjItYTUyYTg3OTVkOTU2
LzEvVy00RkdwT1FIc3dCZEVCNXFrckMtd2Q3bjhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAQfDxAD
BAAfDxIwDQYJKoZIhvcNAQELBQADggEBAGUrrI8cIC2EmCfmsug6MI/5AxdS2Wuz
XG9YHwwCxc8H5lZzc87vIQdI1iG4YUnl+ygrmUsjNqBJXdUbDnHQgLhwrEUjCXPn
KNT9gfruG4rElac29oRMtJBvUOZBZNePgHpEQIWBMeKLdZibcoF3LYJ7O44zsQgt
B8tOSDA12/6bGfB7zohO+bVEluN9sSXTcLWN6kBZzb4P+HLggbDt1qvY03wBGdzG
QNYi+yJNe5j0ijz0p81HgHfAJj3FKZ6SGXd0W7IqLyCA0IKNDogYuB4GU7WKm7tB
caUAZ29JmfugMmDsO7ske2n1ub/6PEPxuqdxW6oAsw/OgHRQ1OXQSkk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:15:07 2024 by rpki-client on console-fra.rpki-client.org