Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/CrMTnBfTdRINWG16LBWPKRN0qFo.roa
File: CrMTnBfTdRINWG16LBWPKRN0qFo.roa (raw, json)
Hash identifier: 0KBGsXwMDunxwYhr8VNOxzqm7Tb7AvyDWAswPdLW2TI=
Subject key identifier: 0A:B3:13:9C:17:D3:75:12:0D:58:6D:7A:2C:15:8F:29:13:74:A8:5A
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 018CC87149E6C7AA34EF5981623B7C90BCBD
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/CrMTnBfTdRINWG16LBWPKRN0qFo.roa
Signing time: Tue 02 Jan 2024 04:31:56 +0000
ROA not before: Tue 02 Jan 2024 04:31:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399641
IP address blocks: 31.41.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:49:e6:c7:aa:34:ef:59:81:62:3b:7c:90:bc:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jan 2 04:31:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ab3139c17d375120d586d7a2c158f291374a85a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ac:ad:b9:7f:25:e1:5a:86:01:52:78:84:b3:
88:d9:d3:67:e0:be:92:cd:f1:3e:80:f7:0b:a1:98:
fb:bc:e4:c2:e6:a6:9f:6b:e0:71:b8:d0:98:da:16:
e4:2a:f3:1b:2b:c8:18:f2:01:3f:ac:70:bc:fa:74:
75:bb:27:88:96:56:5d:16:d3:8f:64:af:f7:73:74:
58:67:a3:fd:99:2d:88:e7:af:6b:b0:99:e7:5c:e6:
31:e8:26:cc:d0:c9:6e:e1:e9:95:d8:00:d2:9d:f8:
54:ce:c1:3b:d3:37:9e:1f:29:2a:6b:b0:6d:a2:0a:
eb:3d:1f:82:f4:5c:b9:79:77:9e:6d:b8:2b:21:01:
4d:bb:e5:ac:16:dd:86:6d:d7:9a:b4:74:0f:33:35:
5d:4a:17:45:df:4d:ab:f5:40:42:b5:12:8a:d6:c2:
ed:2e:03:eb:d4:54:15:0e:2a:0d:5d:f8:d4:12:62:
a3:cf:33:a2:2d:b1:68:49:6e:28:63:50:43:08:5b:
d1:c3:5e:58:30:4b:a0:82:c6:94:83:5c:99:88:52:
37:15:45:19:75:de:2f:57:e0:71:8b:90:4e:1e:0a:
ac:61:35:9f:05:08:3e:50:15:b4:f1:6b:0b:8e:6c:
a0:54:66:4f:ae:dc:1e:e7:d3:38:5a:0f:21:7b:7d:
0f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B3:13:9C:17:D3:75:12:0D:58:6D:7A:2C:15:8F:29:13:74:A8:5A
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/CrMTnBfTdRINWG16LBWPKRN0qFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.248.0/24
Signature Algorithm: sha256WithRSAEncryption
59:18:2e:9c:18:2d:5d:07:49:10:9a:9a:64:ca:b4:5a:35:58:
eb:33:ab:88:dd:fc:87:74:ef:37:ee:8c:a6:0f:dc:db:29:d0:
d5:53:c9:e7:a8:29:7b:aa:ba:71:83:f1:d1:dc:2f:21:be:a0:
c5:77:58:13:72:fb:79:45:5a:f9:36:f3:1a:e4:87:fb:cd:0c:
81:e2:2f:cb:a7:d2:8e:00:f7:a7:41:0f:e2:1e:ac:51:47:b9:
dd:4c:bc:8a:b6:e2:e7:54:8b:40:f1:01:40:cd:03:a5:d3:b3:
1d:87:38:6a:6e:93:93:2b:76:c1:34:1d:95:dd:54:76:27:c6:
68:a7:62:04:a4:88:01:e9:a3:69:e0:42:4d:6a:f8:8e:86:ca:
4f:37:0f:d1:ca:49:62:3c:bd:9d:08:86:08:0e:38:10:94:13:
63:84:c9:69:e3:6b:eb:02:43:49:77:49:f5:e2:55:37:da:27:
4c:c0:99:42:f8:72:ed:59:cc:4d:e6:c0:8c:3b:86:78:8f:94:
76:d4:ea:03:24:bf:9f:fc:06:41:78:2a:8d:e1:7c:5f:13:d4:
55:03:e0:14:65:c3:e1:95:48:c9:97:7d:1d:3e:6d:94:c4:f3:
5b:5c:82:66:b5:4b:0f:46:11:10:53:ea:a9:ec:61:71:75:96:
4e:8c:a5:ec
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIcUnmx6o071mBYjt8kLy9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy
NjhmNTQwHhcNMjQwMTAyMDQzMTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYWIzMTM5YzE3ZDM3NTEyMGQ1ODZkN2EyYzE1OGYyOTEzNzRhODVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6ytuX8l4VqGAVJ4hLOI2dNn4L6S
zfE+gPcLoZj7vOTC5qafa+BxuNCY2hbkKvMbK8gY8gE/rHC8+nR1uyeIllZdFtOP
ZK/3c3RYZ6P9mS2I569rsJnnXOYx6CbM0Mlu4emV2ADSnfhUzsE70zeeHykqa7Bt
ogrrPR+C9Fy5eXeebbgrIQFNu+WsFt2GbdeatHQPMzVdShdF302r9UBCtRKK1sLt
LgPr1FQVDioNXfjUEmKjzzOiLbFoSW4oY1BDCFvRw15YMEuggsaUg1yZiFI3FUUZ
dd4vV+Bxi5BOHgqsYTWfBQg+UBW08WsLjmygVGZPrtwe59M4Wg8he30P9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAqzE5wX03USDVhteiwVjykTdKhaMB8GA1UdIwQY
MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt
N2FhN2ZjMzU5NjU1LzEvQ3JNVG5CZlRkUklOV0cxNkxCV1BLUk4wcUZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1
LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHyn4MA0G
CSqGSIb3DQEBCwUAA4IBAQBZGC6cGC1dB0kQmppkyrRaNVjrM6uI3fyHdO837oym
D9zbKdDVU8nnqCl7qrpxg/HR3C8hvqDFd1gTcvt5RVr5NvMa5If7zQyB4i/Lp9KO
APenQQ/iHqxRR7ndTLyKtuLnVItA8QFAzQOl07MdhzhqbpOTK3bBNB2V3VR2J8Zo
p2IEpIgB6aNp4EJNaviOhspPNw/RykliPL2dCIYIDjgQlBNjhMlp42vrAkNJd0n1
4lU32idMwJlC+HLtWcxN5sCMO4Z4j5R21OoDJL+f/AZBeCqN4XxfE9RVA+AUZcPh
lUjJl30dPm2UxPNbXIJmtUsPRhEQU+qp7GFxdZZOjKXs
-----END CERTIFICATE-----
Generated at Sun May 5 22:44:05 2024 by rpki-client on console-ams.rpki-client.org