Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/2AjxqXdANhe0nrjnXx-bFUDf_zk.roa
File: 2AjxqXdANhe0nrjnXx-bFUDf_zk.roa (raw, json)
Hash identifier: PZnuZtEOp/IwFZRIZNZyr4SdRwm9rv2fwjo1rVjHe0Y=
Subject key identifier: D8:08:F1:A9:77:40:36:17:B4:9E:B8:E7:5F:1F:9B:15:40:DF:FF:39
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 018DF4A19C0BE9F2C5C08B35B391C290B7FE
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/2AjxqXdANhe0nrjnXx-bFUDf_zk.roa
Signing time: Thu 29 Feb 2024 11:30:48 +0000
ROA not before: Thu 29 Feb 2024 11:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59823
IP address blocks: 31.40.128.0/24 maxlen: 24
31.40.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f4:a1:9c:0b:e9:f2:c5:c0:8b:35:b3:91:c2:90:b7:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Feb 29 11:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d808f1a977403617b49eb8e75f1f9b1540dfff39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7b:d4:48:85:61:4e:08:e5:30:3b:48:9a:8d:
e3:a4:f4:9b:a4:69:a9:ad:96:34:f5:ef:2f:62:67:
a1:fd:78:78:c4:ea:d4:28:b2:ec:81:3f:09:66:6b:
3f:2a:09:9f:eb:40:5d:e5:92:d4:b8:36:13:4f:28:
b0:30:2b:b6:e5:75:51:74:67:d8:86:82:8e:f9:3f:
61:0b:31:ae:00:d6:8f:52:3d:83:ba:ad:d5:63:2c:
34:d7:28:28:85:a4:58:51:5b:67:18:b8:15:f2:63:
76:d2:27:3b:6b:ee:97:40:53:c3:d3:b3:f5:19:38:
6d:27:83:a6:49:ea:d4:94:e3:39:c8:30:75:0c:80:
cf:f2:9d:26:f3:30:eb:56:97:75:92:7e:b4:17:29:
fe:23:7a:d3:02:d2:cd:35:b1:cc:0f:15:ec:a7:2a:
c8:bd:68:2f:34:be:a3:77:5d:57:2d:2e:ae:28:9f:
40:db:77:92:6d:80:25:06:ff:22:04:68:44:41:32:
fc:c9:20:c9:fe:70:40:68:55:45:4d:ac:fc:ac:9f:
12:46:56:8f:16:c0:35:97:c0:38:26:4a:fc:24:24:
3e:92:a5:ce:c3:65:eb:0d:aa:07:03:86:3c:6f:9e:
f4:8b:7f:82:78:c0:83:79:82:4e:55:85:20:85:a3:
58:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:08:F1:A9:77:40:36:17:B4:9E:B8:E7:5F:1F:9B:15:40:DF:FF:39
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/2AjxqXdANhe0nrjnXx-bFUDf_zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.128.0/23
Signature Algorithm: sha256WithRSAEncryption
01:cf:6e:78:93:49:93:b6:e8:30:0d:c7:cb:eb:35:87:11:69:
0f:fc:6a:dc:9b:ba:d9:41:7d:ac:6d:c3:dd:9d:cc:88:6f:29:
66:10:34:8c:5d:d4:73:7c:62:e3:79:3e:0e:12:92:5d:de:ba:
b2:18:4c:20:a8:17:02:b9:6c:88:53:ae:8b:4b:df:12:eb:03:
8c:f5:c4:e6:2f:46:97:1a:7d:f9:68:19:18:fc:ce:fe:78:a0:
1d:8d:5b:21:8b:b6:fc:45:08:f9:fa:f3:93:52:89:9d:a2:68:
74:07:16:8c:1e:91:7f:5e:b8:44:82:06:95:c2:ab:c7:d7:34:
da:c1:fe:ae:5f:d8:70:a9:54:94:f3:dc:21:b3:a4:4a:cf:80:
a4:f5:44:26:69:7a:c6:f0:6b:8d:21:74:db:27:fa:fe:f6:3e:
29:99:e6:09:73:16:0c:33:f6:77:ad:44:ac:1f:7b:8a:8a:8c:
05:e8:b2:f9:f9:b4:49:12:18:05:93:18:8b:74:93:eb:73:cf:
07:4d:45:a4:b3:b4:b2:12:9f:43:33:f1:12:78:a6:c7:4e:25:
73:b2:4f:50:31:4e:ba:4c:21:fd:eb:0d:cc:be:c8:c8:73:0e:
34:37:3c:44:0d:bb:3e:2f:5c:a1:2c:eb:62:18:0a:0c:db:8e:
49:01:f2:4a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY30oZwL6fLFwIs1s5HCkLf+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYWY1YzJlNWVkYzE5NzgzNGQwN2YzNDU5NjJiMDc0NWJl
ZTY2ZDcwHhcNMjQwMjI5MTEzMDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODA4ZjFhOTc3NDAzNjE3YjQ5ZWI4ZTc1ZjFmOWIxNTQwZGZmZjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3vUSIVhTgjlMDtImo3jpPSbpGmp
rZY09e8vYmeh/Xh4xOrUKLLsgT8JZms/Kgmf60Bd5ZLUuDYTTyiwMCu25XVRdGfY
hoKO+T9hCzGuANaPUj2Duq3VYyw01ygohaRYUVtnGLgV8mN20ic7a+6XQFPD07P1
GThtJ4OmSerUlOM5yDB1DIDP8p0m8zDrVpd1kn60Fyn+I3rTAtLNNbHMDxXspyrI
vWgvNL6jd11XLS6uKJ9A23eSbYAlBv8iBGhEQTL8ySDJ/nBAaFVFTaz8rJ8SRlaP
FsA1l8A4Jkr8JCQ+kqXOw2XrDaoHA4Y8b570i3+CeMCDeYJOVYUghaNY4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNgI8al3QDYXtJ64518fmxVA3/85MB8GA1UdIwQY
MBaAFB6vXC5e3Bl4NNB/NFlisHRb7mbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODIt
NGEzNGMxYmJhYjJiLzEvMkFqeHFYZEFOaGUwbnJqblh4LWJGVURmX3prLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODItNGEzNGMxYmJhYjJi
LzEvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBHyiAMA0G
CSqGSIb3DQEBCwUAA4IBAQABz254k0mTtugwDcfL6zWHEWkP/Grcm7rZQX2sbcPd
ncyIbylmEDSMXdRzfGLjeT4OEpJd3rqyGEwgqBcCuWyIU66LS98S6wOM9cTmL0aX
Gn35aBkY/M7+eKAdjVshi7b8RQj5+vOTUomdomh0BxaMHpF/XrhEggaVwqvH1zTa
wf6uX9hwqVSU89whs6RKz4Ck9UQmaXrG8GuNIXTbJ/r+9j4pmeYJcxYMM/Z3rUSs
H3uKiowF6LL5+bRJEhgFkxiLdJPrc88HTUWks7SyEp9DM/ESeKbHTiVzsk9QMU66
TCH96w3MvsjIcw40NzxEDbs+L1yhLOtiGAoM245JAfJK
-----END CERTIFICATE-----
Generated at Wed May 22 03:36:55 2024 by rpki-client on console-ams.rpki-client.org