Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/sdlCS1G90XzSRvEBwCD70Tz8j3A.roa
File: sdlCS1G90XzSRvEBwCD70Tz8j3A.roa (raw, json)
Hash identifier: SschIVvwJghM6fCioOY40pK8KZp7mWr2zkO2f6JjnUg=
Subject key identifier: B1:D9:42:4B:51:BD:D1:7C:D2:46:F1:01:C0:20:FB:D1:3C:FC:8F:70
Certificate issuer: /CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Certificate serial: 018CC34930BA111F95F14D28630883E8DB8D
Authority key identifier: BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/sdlCS1G90XzSRvEBwCD70Tz8j3A.roa
Signing time: Mon 01 Jan 2024 04:30:02 +0000
ROA not before: Mon 01 Jan 2024 04:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64267
IP address blocks: 193.31.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:30:ba:11:1f:95:f1:4d:28:63:08:83:e8:db:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Validity
Not Before: Jan 1 04:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1d9424b51bdd17cd246f101c020fbd13cfc8f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:57:ce:c4:00:ed:28:05:1e:da:5b:f0:19:7c:
ef:e4:9c:35:da:10:b0:2a:88:80:92:34:7d:66:4b:
91:62:8c:4c:2c:25:08:8e:7a:8b:d4:77:e2:57:dd:
4b:a5:d5:82:04:a8:d8:61:3d:31:f6:91:60:b6:01:
ba:83:bd:f1:56:52:a3:ff:1a:5a:de:58:1e:ab:3d:
9b:79:c6:e1:a2:8e:43:9a:4c:8d:5d:66:a5:7e:e9:
4b:42:a5:02:45:45:e5:72:7d:e5:22:5b:6e:2a:38:
f5:0b:27:f6:4f:49:04:a4:4d:51:fb:dd:1e:9d:c5:
26:71:6e:16:18:96:ca:09:f0:e2:c6:6d:63:36:6c:
f5:17:e4:dd:4a:52:a3:d8:3b:cb:17:f7:82:f9:2a:
57:5d:11:b5:a1:e1:18:da:67:2f:4e:7e:e0:46:93:
db:2e:48:44:5a:92:15:25:06:1f:1b:3e:24:ec:33:
7d:28:b6:cc:bc:a2:18:e3:54:eb:74:20:30:0f:b8:
aa:b2:a5:a5:59:8d:d2:43:51:de:50:62:f2:fd:c9:
39:bc:13:72:a4:fc:ee:3b:c3:19:e4:4f:b6:3b:50:
5c:de:dc:08:9f:e0:d6:3f:8d:0b:e9:a6:ae:df:a6:
a4:24:7c:db:fe:f1:5a:17:34:97:98:34:92:5a:8c:
27:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D9:42:4B:51:BD:D1:7C:D2:46:F1:01:C0:20:FB:D1:3C:FC:8F:70
X509v3 Authority Key Identifier:
keyid:BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/sdlCS1G90XzSRvEBwCD70Tz8j3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.62.0/24
Signature Algorithm: sha256WithRSAEncryption
87:57:fd:65:04:48:4c:1d:fc:99:c8:08:89:49:18:97:ac:e5:
f0:b3:e6:f6:89:f4:96:e7:e2:8f:1c:65:54:07:60:62:4c:9b:
96:0f:06:73:af:ab:1d:a1:49:a5:a1:16:d4:69:4d:0a:a4:e7:
85:17:6c:77:01:a3:68:2f:62:75:45:31:e4:88:fa:ce:dd:c3:
25:15:1d:bd:80:d3:fe:b7:94:e2:51:83:6f:9a:35:bd:1f:24:
38:7a:0c:59:12:ff:aa:37:2e:61:77:10:57:c5:ac:0a:c6:85:
03:9f:e9:07:bd:09:fe:23:69:e7:44:3a:94:ac:7a:00:2c:5f:
d3:2e:13:94:40:48:69:5d:5b:4e:46:cf:5f:0e:cb:e2:87:88:
bc:db:42:b2:d8:be:b9:91:6d:d5:08:4f:ce:30:3d:25:ab:a4:
28:af:3b:80:a7:50:b6:b4:79:86:52:43:13:98:c0:38:86:d8:
ac:e4:62:37:c8:fe:00:c6:95:d5:62:50:50:cb:10:bf:76:ec:
cb:d1:01:fd:33:50:d2:d1:b0:af:4d:75:a6:0c:5a:91:72:b4:
a4:fb:f6:6c:c3:48:36:32:21:2a:89:1d:18:10:fc:f8:6f:bd:
be:fe:3e:9d:73:64:61:a0:8a:05:9a:fd:6f:94:0a:6b:37:88:
d1:10:9f:8d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSTC6ER+V8U0oYwiD6NuNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMWQ1ZmVhZmQzOTE3NDcyNWJmZTRiZWY5MWJkMjdjN2Iy
ZjZmOTEwHhcNMjQwMTAxMDQzMDAyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMWQ5NDI0YjUxYmRkMTdjZDI0NmYxMDFjMDIwZmJkMTNjZmM4ZjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1fOxADtKAUe2lvwGXzv5Jw12hCw
KoiAkjR9ZkuRYoxMLCUIjnqL1HfiV91LpdWCBKjYYT0x9pFgtgG6g73xVlKj/xpa
3lgeqz2becbhoo5DmkyNXWalfulLQqUCRUXlcn3lIltuKjj1Cyf2T0kEpE1R+90e
ncUmcW4WGJbKCfDixm1jNmz1F+TdSlKj2DvLF/eC+SpXXRG1oeEY2mcvTn7gRpPb
LkhEWpIVJQYfGz4k7DN9KLbMvKIY41TrdCAwD7iqsqWlWY3SQ1HeUGLy/ck5vBNy
pPzuO8MZ5E+2O1Bc3twIn+DWP40L6aau36akJHzb/vFaFzSXmDSSWownTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLHZQktRvdF80kbxAcAg+9E8/I9wMB8GA1UdIwQY
MBaAFL8dX+r9ORdHJb/kvvkb0nx7L2+RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdngxZjZ2MDVGMGNsdi1TLS1SdlNmSHN2YjVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82MDY1ZDItMTAzZS00YWI3LWJmYjMt
MWE4Yzg0MmFmZTJhLzEvc2RsQ1MxRzkwWHpTUnZFQndDRDcwVHo4ajNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy82MDY1ZDItMTAzZS00YWI3LWJmYjMtMWE4Yzg0MmFmZTJh
LzEvdngxZjZ2MDVGMGNsdi1TLS1SdlNmSHN2YjVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwR8+MA0G
CSqGSIb3DQEBCwUAA4IBAQCHV/1lBEhMHfyZyAiJSRiXrOXws+b2ifSW5+KPHGVU
B2BiTJuWDwZzr6sdoUmloRbUaU0KpOeFF2x3AaNoL2J1RTHkiPrO3cMlFR29gNP+
t5TiUYNvmjW9HyQ4egxZEv+qNy5hdxBXxawKxoUDn+kHvQn+I2nnRDqUrHoALF/T
LhOUQEhpXVtORs9fDsvih4i820Ky2L65kW3VCE/OMD0lq6QorzuAp1C2tHmGUkMT
mMA4htis5GI3yP4AxpXVYlBQyxC/duzL0QH9M1DS0bCvTXWmDFqRcrSk+/Zsw0g2
MiEqiR0YEPz4b72+/j6dc2RhoIoFmv1vlAprN4jREJ+N
-----END CERTIFICATE-----
Generated at Fri May 17 17:09:21 2024 by rpki-client on console-fra.rpki-client.org