Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/3AX88zdMlbMqULgfoE7Hzq6K8D4.roa
File: 3AX88zdMlbMqULgfoE7Hzq6K8D4.roa (raw, json)
Hash identifier: w1Cyvzk7YFgxXjvfQzDhZ+hdBQeZxd4Z5yEu0eC/UL0=
Subject key identifier: DC:05:FC:F3:37:4C:95:B3:2A:50:B8:1F:A0:4E:C7:CE:AE:8A:F0:3E
Certificate issuer: /CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616
Certificate serial: 018CC94BE628CDA5673D64B652D6171F82BA
Authority key identifier: B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/3AX88zdMlbMqULgfoE7Hzq6K8D4.roa
Signing time: Tue 02 Jan 2024 08:30:43 +0000
ROA not before: Tue 02 Jan 2024 08:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203008
IP address blocks: 31.42.58.0/23 maxlen: 23
31.128.246.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4b:e6:28:cd:a5:67:3d:64:b6:52:d6:17:1f:82:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85eadc2ec70b30fa4225ed7fcd5730f0c7bc616
Validity
Not Before: Jan 2 08:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc05fcf3374c95b32a50b81fa04ec7ceae8af03e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f5:b7:30:59:31:6a:9a:35:de:90:36:31:80:
3f:13:60:9f:68:24:83:b5:6e:67:25:a1:62:68:09:
be:be:c7:44:85:be:b4:b0:99:62:46:8c:0b:45:ca:
d8:36:3c:4b:48:90:b5:fe:be:28:74:87:8e:7c:e8:
94:31:2f:bf:21:b8:ca:f7:9a:5f:98:9a:d3:26:70:
b0:e0:0a:a9:ce:2c:2e:af:bd:45:03:5c:53:b4:66:
a0:29:a8:c3:15:87:c0:92:44:b4:93:29:0d:9d:d4:
8a:76:43:55:bd:22:3d:2c:49:0f:e0:2a:74:20:b9:
52:79:59:e1:ed:39:93:79:02:97:f9:1f:57:ab:de:
92:67:75:e6:5a:87:e6:ec:25:6c:d5:e8:32:2e:28:
dc:3f:14:43:f4:f7:54:c6:c9:34:6a:51:66:35:f9:
f9:77:e9:5a:0d:9a:84:80:26:ab:9e:7c:a3:65:3c:
a5:77:6d:4a:91:65:0c:fd:f4:b8:14:89:cf:7e:af:
f6:05:5d:9a:ed:4b:1d:6f:93:c3:ef:48:dc:b0:1f:
57:95:5c:5e:9d:80:e9:ae:f7:f3:61:23:ef:f5:a5:
e2:03:6f:79:40:76:c7:f5:ac:1b:86:61:80:9b:ba:
af:42:dd:54:65:a9:a4:66:f3:fa:af:87:92:1e:c3:
b3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:05:FC:F3:37:4C:95:B3:2A:50:B8:1F:A0:4E:C7:CE:AE:8A:F0:3E
X509v3 Authority Key Identifier:
keyid:B8:5E:AD:C2:EC:70:B3:0F:A4:22:5E:D7:FC:D5:73:0F:0C:7B:C6:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uF6twuxwsw-kIl7X_NVzDwx7xhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/3AX88zdMlbMqULgfoE7Hzq6K8D4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f07b18-19d7-41f2-af6b-bc7a208a5e2e/1/uF6twuxwsw-kIl7X_NVzDwx7xhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.58.0/23
31.128.246.0/23
Signature Algorithm: sha256WithRSAEncryption
29:41:e4:52:ea:3d:15:ec:8b:36:34:2e:7b:20:6d:cb:24:84:
4b:0d:f1:e6:ba:66:30:8c:16:1a:3c:77:00:54:b2:5d:62:ea:
06:86:6a:34:ea:9d:3a:8c:89:57:9b:44:a7:6a:fa:29:b1:44:
d8:ab:36:94:1b:56:81:fe:bf:5c:57:ac:4f:9e:07:96:f5:a4:
77:86:ce:c2:38:be:5d:95:93:c0:6a:c5:6b:f3:cf:85:44:05:
50:be:fa:89:5c:ad:1f:62:e6:c7:3e:ab:22:43:bf:d7:e9:bb:
77:8e:e2:15:de:6a:43:b1:3d:32:a4:b7:3c:67:e2:bc:19:ef:
fa:7b:a8:1a:76:1a:e0:94:d6:53:c7:6d:1f:a1:d2:7f:9f:5e:
1d:1d:3b:34:de:15:12:ba:ce:d9:f7:e1:54:d0:f3:31:ba:68:
43:3f:77:bf:41:2c:69:9f:a6:cb:bf:c0:d1:e3:8f:53:9c:f1:
5d:20:9c:64:5f:58:2e:0b:00:0e:b5:6d:13:7a:21:24:f9:5b:
9d:da:37:02:3a:f9:52:a2:17:7f:39:38:22:80:f4:be:19:e0:
59:e2:06:e1:16:1d:cc:89:ab:42:a4:23:54:3c:63:9b:78:e4:
ed:20:74:1e:e1:93:16:00:5b:9f:75:42:45:2c:d4:60:f4:eb:
3c:3b:9a:40
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzJS+YozaVnPWS2UtYXH4K6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NWVhZGMyZWM3MGIzMGZhNDIyNWVkN2ZjZDU3MzBmMGM3
YmM2MTYwHhcNMjQwMTAyMDgzMDQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzA1ZmNmMzM3NGM5NWIzMmE1MGI4MWZhMDRlYzdjZWFlOGFmMDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fW3MFkxapo13pA2MYA/E2CfaCSD
tW5nJaFiaAm+vsdEhb60sJliRowLRcrYNjxLSJC1/r4odIeOfOiUMS+/IbjK95pf
mJrTJnCw4Aqpziwur71FA1xTtGagKajDFYfAkkS0kykNndSKdkNVvSI9LEkP4Cp0
ILlSeVnh7TmTeQKX+R9Xq96SZ3XmWofm7CVs1egyLijcPxRD9PdUxsk0alFmNfn5
d+laDZqEgCarnnyjZTyld21KkWUM/fS4FInPfq/2BV2a7Usdb5PD70jcsB9XlVxe
nYDprvfzYSPv9aXiA295QHbH9awbhmGAm7qvQt1UZamkZvP6r4eSHsOzewIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNwF/PM3TJWzKlC4H6BOx86uivA+MB8GA1UdIwQY
MBaAFLhercLscLMPpCJe1/zVcw8Me8YWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUY2dHd1eHdzdy1rSWw3WF9OVnpEd3g3eGhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mMDdiMTgtMTlkNy00MWYyLWFmNmIt
YmM3YTIwOGE1ZTJlLzEvM0FYODh6ZE1sYk1xVUxnZm9FN0h6cTZLOEQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9mMDdiMTgtMTlkNy00MWYyLWFmNmItYmM3YTIwOGE1ZTJl
LzEvdUY2dHd1eHdzdy1rSWw3WF9OVnpEd3g3eGhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBHyo6AwQB
H4D2MA0GCSqGSIb3DQEBCwUAA4IBAQApQeRS6j0V7Is2NC57IG3LJIRLDfHmumYw
jBYaPHcAVLJdYuoGhmo06p06jIlXm0SnavopsUTYqzaUG1aB/r9cV6xPngeW9aR3
hs7COL5dlZPAasVr88+FRAVQvvqJXK0fYubHPqsiQ7/X6bt3juIV3mpDsT0ypLc8
Z+K8Ge/6e6gadhrglNZTx20fodJ/n14dHTs03hUSus7Z9+FU0PMxumhDP3e/QSxp
n6bLv8DR449TnPFdIJxkX1guCwAOtW0TeiEk+Vud2jcCOvlSohd/OTgigPS+GeBZ
4gbhFh3MiatCpCNUPGObeOTtIHQe4ZMWAFufdUJFLNRg9Os8O5pA
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:23:08 2024 by rpki-client on console-fra.rpki-client.org