Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/clTSGcOQvP6l31Xv3guZUFalnVM.roa
File: clTSGcOQvP6l31Xv3guZUFalnVM.roa (raw, json)
Hash identifier: WERp0ArET11R/oVnPPY9B0Bm+JdsFSbNp+tHG2dcFbk=
Subject key identifier: 72:54:D2:19:C3:90:BC:FE:A5:DF:55:EF:DE:0B:99:50:56:A5:9D:53
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018EE0FA599FEB1859F9C4614BFD4033DF4B
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/clTSGcOQvP6l31Xv3guZUFalnVM.roa
Signing time: Mon 15 Apr 2024 08:58:07 +0000
ROA not before: Mon 15 Apr 2024 08:58:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12302
IP address blocks: 31.14.34.0/24 maxlen: 24
31.14.49.0/24 maxlen: 24
86.104.193.0/24 maxlen: 24
89.37.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e0:fa:59:9f:eb:18:59:f9:c4:61:4b:fd:40:33:df:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Apr 15 08:58:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7254d219c390bcfea5df55efde0b995056a59d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5f:23:0d:43:6e:48:4c:33:64:eb:fd:1d:cb:
78:bb:a4:32:8d:dc:a9:83:bb:44:f1:f1:97:57:08:
60:05:ea:39:0c:57:ed:aa:a7:cc:93:4d:8c:fe:6d:
61:62:f0:c9:1e:b0:24:97:7b:15:3c:8d:df:83:d6:
63:98:4e:e0:4a:eb:7b:c4:d1:ed:57:90:f3:8d:da:
8f:0c:79:ff:b2:63:73:09:31:20:b0:60:2b:19:da:
ae:65:f8:18:a7:41:d8:20:d5:a2:49:00:57:35:a8:
57:c2:e4:d8:6f:ee:73:47:f6:60:69:28:67:46:89:
5d:38:f5:8e:18:c2:70:71:b9:61:a2:3d:d3:40:17:
a7:95:f1:27:19:16:4a:7b:88:ea:e7:2b:cf:3c:ef:
fd:98:4d:c3:9e:a0:fd:60:18:77:76:4d:a3:f1:38:
2e:d6:d8:c9:dd:17:28:f4:df:6d:e4:c2:a8:2d:85:
db:21:72:a0:2b:43:ee:fd:36:22:06:75:ed:cf:f4:
01:69:0e:42:57:f9:48:c9:21:31:9c:b7:c6:a7:12:
07:a9:5a:1f:31:b9:dc:ce:87:41:2d:0c:f9:ed:29:
a0:c4:24:88:3c:e5:15:3c:e5:1e:4f:f9:56:11:91:
f9:c2:59:f9:af:30:50:94:6e:b7:e6:4f:4f:bc:88:
b7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:54:D2:19:C3:90:BC:FE:A5:DF:55:EF:DE:0B:99:50:56:A5:9D:53
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/clTSGcOQvP6l31Xv3guZUFalnVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.34.0/24
31.14.49.0/24
86.104.193.0/24
89.37.142.0/24
Signature Algorithm: sha256WithRSAEncryption
25:29:23:2f:a9:c2:f7:23:7d:25:e9:d1:f4:b9:1e:d2:06:8f:
0a:42:b1:81:85:73:c7:c1:5a:9f:26:47:ae:b3:9e:44:58:1f:
80:93:ce:96:70:96:00:4d:ce:60:9d:6e:ee:c7:d6:19:c1:6f:
df:62:40:42:93:da:00:98:08:63:75:b2:f6:ac:70:39:51:0b:
ce:7f:d6:75:82:0f:f6:48:1c:11:b1:d7:4e:7c:89:64:13:d3:
32:04:dd:16:ac:9b:ea:a5:61:c8:7a:4b:10:e6:87:f2:54:a8:
4b:4a:86:f9:10:3d:89:47:45:71:ad:98:82:73:c1:ff:cd:f5:
9b:b5:ad:7a:5a:3d:b0:0c:09:8d:c6:2f:4e:07:1b:df:da:b7:
a7:ed:c7:98:f6:1f:e2:b4:48:cf:c8:23:2d:b4:a0:fc:1d:14:
d8:f3:1b:6f:3d:ba:2b:9b:cf:0e:06:de:c0:15:d7:ad:dc:f7:
2f:dc:11:9b:61:19:9a:07:14:be:57:6f:8a:52:21:35:c2:f4:
80:82:a4:ab:d1:b7:fc:b8:4d:c6:72:11:21:bb:b2:fc:36:73:
20:ff:f0:9d:51:76:f8:d4:08:a7:a6:ef:06:fe:7b:94:21:22:
56:f3:6e:7d:df:c7:c5:8f:72:28:6c:70:97:d8:61:e4:d9:31:
77:c3:51:ee
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAY7g+lmf6xhZ+cRhS/1AM99LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjQwNDE1MDg1ODA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjU0ZDIxOWMzOTBiY2ZlYTVkZjU1ZWZkZTBiOTk1MDU2YTU5ZDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV8jDUNuSEwzZOv9Hct4u6Qyjdyp
g7tE8fGXVwhgBeo5DFftqqfMk02M/m1hYvDJHrAkl3sVPI3fg9ZjmE7gSut7xNHt
V5DzjdqPDHn/smNzCTEgsGArGdquZfgYp0HYINWiSQBXNahXwuTYb+5zR/ZgaShn
RoldOPWOGMJwcblhoj3TQBenlfEnGRZKe4jq5yvPPO/9mE3DnqD9YBh3dk2j8Tgu
1tjJ3Rco9N9t5MKoLYXbIXKgK0Pu/TYiBnXtz/QBaQ5CV/lIySExnLfGpxIHqVof
MbnczodBLQz57SmgxCSIPOUVPOUeT/lWEZH5wln5rzBQlG635k9PvIi3sQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFHJU0hnDkLz+pd9V794LmVBWpZ1TMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xL2NsVFNHY09RdlA2bDMxWHYzZ3VaVUZhbG5WTS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBAAfDiID
BAAfDjEDBABWaMEDBABZJY4wDQYJKoZIhvcNAQELBQADggEBACUpIy+pwvcjfSXp
0fS5HtIGjwpCsYGFc8fBWp8mR66znkRYH4CTzpZwlgBNzmCdbu7H1hnBb99iQEKT
2gCYCGN1svascDlRC85/1nWCD/ZIHBGx1058iWQT0zIE3Rasm+qlYch6SxDmh/JU
qEtKhvkQPYlHRXGtmIJzwf/N9Zu1rXpaPbAMCY3GL04HG9/at6ftx5j2H+K0SM/I
Iy20oPwdFNjzG289uiubzw4G3sAV163c9y/cEZthGZoHFL5Xb4pSITXC9ICCpKvR
t/y4TcZyESG7svw2cyD/8J1RdvjUCKem7wb+e5QhIlbzbn3fx8WPcihscJfYYeTZ
MXfDUe4=
-----END CERTIFICATE-----
Generated at Sat May 18 07:45:50 2024 by rpki-client on console-ams.rpki-client.org