Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/D3hr63BRzI_bVwohYdyMQduoIyc.roa
File: D3hr63BRzI_bVwohYdyMQduoIyc.roa (raw, json)
Hash identifier: 8yiSRHLx4HfCASCDmqdadQBawFbY/tFW6EX4vrpKtJc=
Subject key identifier: 0F:78:6B:EB:70:51:CC:8F:DB:57:0A:21:61:DC:8C:41:DB:A8:23:27
Certificate issuer: /CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Certificate serial: 018F8061C3391393CEDB4FF3E79E17301DEB
Authority key identifier: 06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/D3hr63BRzI_bVwohYdyMQduoIyc.roa
Signing time: Thu 16 May 2024 07:50:41 +0000
ROA not before: Thu 16 May 2024 07:50:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15497
IP address blocks: 31.28.160.0/22 maxlen: 22
31.28.164.0/22 maxlen: 22
31.28.172.0/22 maxlen: 22
31.28.176.0/22 maxlen: 22
31.28.180.0/22 maxlen: 22
31.28.184.0/22 maxlen: 22
31.28.190.0/24 maxlen: 24
62.149.2.0/24 maxlen: 24
62.149.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:80:61:c3:39:13:93:ce:db:4f:f3:e7:9e:17:30:1d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e4bbdab896e66113f351b4d9c82df50e66a712
Validity
Not Before: May 16 07:50:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f786beb7051cc8fdb570a2161dc8c41dba82327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0c:f3:ce:5d:13:9c:06:1e:64:53:c9:bb:1f:
69:f3:86:6d:dd:37:8b:9c:e9:78:9b:37:68:e6:0a:
8e:4f:c4:8c:ae:7f:fe:74:c3:98:0c:2f:54:32:69:
bf:d1:1e:cc:f0:b7:58:92:90:78:66:7a:cd:03:d2:
f7:e9:00:e1:58:8d:10:de:f0:a5:cc:53:52:21:4a:
c9:69:e4:03:9e:6c:bd:6b:7b:28:96:e4:26:63:c6:
91:fa:90:52:ec:c6:2c:2a:ed:c6:ce:e2:9c:75:6e:
9b:bf:28:96:01:03:68:04:fb:41:e1:fd:d7:77:52:
ad:c8:67:c0:31:0e:d6:9a:9e:1e:e8:43:d4:71:9b:
92:f5:7a:29:ee:5c:95:9b:d2:80:a9:63:4b:49:bf:
b5:83:f2:42:fa:d7:df:75:83:61:7f:40:4d:7c:4c:
04:3b:73:9a:a5:00:b6:5b:0a:f2:e0:fd:a3:37:3f:
76:a3:59:a8:eb:27:ca:54:9f:11:7f:27:c7:b6:b8:
a4:a9:ea:96:9c:70:0c:77:eb:68:70:4d:da:48:68:
4c:58:a6:08:b9:50:88:a8:35:e3:35:05:da:6a:85:
52:f2:a4:ec:e4:e3:c4:04:a8:7b:c0:13:7a:8d:e8:
98:9e:e9:49:dd:e7:fd:a7:f9:28:4b:c1:9d:f6:9f:
43:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:78:6B:EB:70:51:CC:8F:DB:57:0A:21:61:DC:8C:41:DB:A8:23:27
X509v3 Authority Key Identifier:
keyid:06:E4:BB:DA:B8:96:E6:61:13:F3:51:B4:D9:C8:2D:F5:0E:66:A7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuS72riW5mET81G02cgt9Q5mpxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/D3hr63BRzI_bVwohYdyMQduoIyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d99947-2298-422f-9da0-fe0d28b68cd5/1/BuS72riW5mET81G02cgt9Q5mpxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.28.160.0/21
31.28.172.0-31.28.187.255
31.28.190.0/24
62.149.2.0/24
62.149.10.0/24
Signature Algorithm: sha256WithRSAEncryption
42:e2:93:91:b0:55:d2:c4:f5:c2:1b:2d:da:d9:a6:31:08:33:
3c:6e:6b:ea:62:e9:69:32:da:ea:d3:cc:6c:16:6c:e7:a9:9e:
37:e0:3a:5c:5b:4d:a5:0f:0e:c1:56:9d:b5:62:d9:89:cb:9e:
1a:48:70:4b:81:da:99:fa:7a:30:22:1c:b1:81:95:9f:fd:6c:
00:7e:d6:02:cb:b1:97:bb:d2:19:ee:b4:c4:6f:e9:5b:9a:ff:
e4:35:11:a1:0c:29:49:3e:f7:86:81:42:60:74:94:14:4c:78:
6e:aa:ea:83:1a:72:5a:6c:38:a0:d0:d5:d5:02:99:b0:5b:2d:
16:d0:4f:c5:0d:8e:8f:5d:f8:7c:1f:d5:cb:7b:db:1c:c3:ce:
ab:85:df:02:c3:8f:ec:33:5b:22:d6:3f:cb:77:dd:22:38:83:
e5:b6:29:ff:37:cd:d7:e5:71:88:fa:54:10:d5:6c:ec:4f:e5:
59:c2:70:64:c6:38:4b:f4:49:ee:b7:a0:36:b5:7e:c0:60:6c:
00:2b:c6:f3:98:30:5a:22:2e:00:05:26:54:89:b1:55:c7:d0:
03:4e:64:cf:ce:f4:69:48:1d:08:95:b5:94:7e:a7:1b:0f:e7:
cd:1b:72:f0:29:28:af:64:cd:62:36:22:d9:52:73:df:cb:ab:
48:5b:2a:23
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAY+AYcM5E5PO20/z554XMB3rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2ZTRiYmRhYjg5NmU2NjExM2YzNTFiNGQ5YzgyZGY1MGU2
NmE3MTIwHhcNMjQwNTE2MDc1MDQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjc4NmJlYjcwNTFjYzhmZGI1NzBhMjE2MWRjOGM0MWRiYTgyMzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAzzzl0TnAYeZFPJux9p84Zt3TeL
nOl4mzdo5gqOT8SMrn/+dMOYDC9UMmm/0R7M8LdYkpB4ZnrNA9L36QDhWI0Q3vCl
zFNSIUrJaeQDnmy9a3soluQmY8aR+pBS7MYsKu3GzuKcdW6bvyiWAQNoBPtB4f3X
d1KtyGfAMQ7Wmp4e6EPUcZuS9Xop7lyVm9KAqWNLSb+1g/JC+tffdYNhf0BNfEwE
O3OapQC2Wwry4P2jNz92o1mo6yfKVJ8RfyfHtrikqeqWnHAMd+tocE3aSGhMWKYI
uVCIqDXjNQXaaoVS8qTs5OPEBKh7wBN6jeiYnulJ3ef9p/koS8Gd9p9DJQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFA94a+twUcyP21cKIWHcjEHbqCMnMB8GA1UdIwQY
MBaAFAbku9q4luZhE/NRtNnILfUOZqcSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnVTNzJyaVc1bUVUODFHMDJjZ3Q5UTVtcHhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9kOTk5NDctMjI5OC00MjJmLTlkYTAt
ZmUwZDI4YjY4Y2Q1LzEvRDNocjYzQlJ6SV9iVndvaFlkeU1RZHVvSXljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9kOTk5NDctMjI5OC00MjJmLTlkYTAtZmUwZDI4YjY4Y2Q1
LzEvQnVTNzJyaVc1bUVUODFHMDJjZ3Q5UTVtcHhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQDHxygMAwD
BAIfHKwDBAIfHLgDBAAfHL4DBAA+lQIDBAA+lQowDQYJKoZIhvcNAQELBQADggEB
AELik5GwVdLE9cIbLdrZpjEIMzxua+pi6Wky2urTzGwWbOepnjfgOlxbTaUPDsFW
nbVi2YnLnhpIcEuB2pn6ejAiHLGBlZ/9bAB+1gLLsZe70hnutMRv6Vua/+Q1EaEM
KUk+94aBQmB0lBRMeG6q6oMaclpsOKDQ1dUCmbBbLRbQT8UNjo9d+Hwf1ct72xzD
zquF3wLDj+wzWyLWP8t33SI4g+W2Kf83zdflcYj6VBDVbOxP5VnCcGTGOEv0Se63
oDa1fsBgbAArxvOYMFoiLgAFJlSJsVXH0ANOZM/O9GlIHQiVtZR+pxsP580bcvAp
KK9kzWI2ItlSc9/Lq0hbKiM=
-----END CERTIFICATE-----
Generated at Sat Jun 1 11:58:13 2024 by rpki-client on console-fra.rpki-client.org