Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/u-kVZEk-sczKugzSQ4EDyFq-PjQ.roa
File: u-kVZEk-sczKugzSQ4EDyFq-PjQ.roa (raw, json)
Hash identifier: 61gtGulcAxoZaiVu3TrVc3E7DkA3q5L7aLGjDjyN3y8=
Subject key identifier: BB:E9:15:64:49:3E:B1:CC:CA:BA:0C:D2:43:81:03:C8:5A:BE:3E:34
Certificate issuer: /CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Certificate serial: 018ECC5417BB5769061E0C16159E8F482DEC
Authority key identifier: AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/u-kVZEk-sczKugzSQ4EDyFq-PjQ.roa
Signing time: Thu 11 Apr 2024 08:44:06 +0000
ROA not before: Thu 11 Apr 2024 08:44:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44051
IP address blocks: 31.172.81.0/24 maxlen: 24
31.172.82.0/24 maxlen: 24
79.133.42.0/24 maxlen: 24
185.26.96.0/22 maxlen: 24
212.224.112.0/24 maxlen: 24
212.224.113.0/24 maxlen: 24
212.224.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cc:54:17:bb:57:69:06:1e:0c:16:15:9e:8f:48:2d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa1dc50a4b526df18e8b0a6565d7b9d58a75d315
Validity
Not Before: Apr 11 08:44:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bbe91564493eb1cccaba0cd2438103c85abe3e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a0:00:84:1f:38:b2:5e:ce:af:91:84:61:c2:
c3:9a:49:2f:7b:12:8a:ec:98:28:83:a8:20:78:04:
50:14:1b:b6:48:25:bd:6a:72:3c:73:cc:81:68:5a:
a8:fd:9e:6a:48:73:27:52:81:b5:0b:36:dd:75:35:
76:d2:93:4e:4f:d6:0c:c6:4c:17:70:58:69:64:9a:
f3:22:f5:ba:24:2d:dd:71:8f:2e:38:9b:76:22:2a:
0b:4f:58:28:ed:c7:7f:57:fa:eb:98:25:4a:dc:8c:
21:c6:a4:88:c6:99:61:61:6b:b9:d5:26:38:cc:a4:
48:83:62:b7:43:72:a5:ed:2d:87:75:c4:5d:dc:95:
93:76:a1:f7:b3:cf:0b:1a:19:af:cf:09:64:70:51:
0a:6a:91:07:be:5e:f0:a0:05:bf:b6:15:9c:b3:bb:
7c:e1:a1:47:50:82:54:36:e2:e3:c0:5c:da:22:63:
62:ba:9e:70:af:34:9f:55:4b:bb:4b:c7:2c:df:c5:
6e:a4:74:55:a1:07:f0:06:4b:d1:0c:fa:52:65:59:
84:31:68:12:8c:23:9c:c5:b8:ae:a6:47:1e:85:32:
61:e5:93:e8:5a:83:2a:47:82:73:b5:72:fd:20:e6:
d6:63:64:67:b5:d8:dc:3f:71:0d:63:4f:8e:4f:35:
a8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E9:15:64:49:3E:B1:CC:CA:BA:0C:D2:43:81:03:C8:5A:BE:3E:34
X509v3 Authority Key Identifier:
keyid:AA:1D:C5:0A:4B:52:6D:F1:8E:8B:0A:65:65:D7:B9:D5:8A:75:D3:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qh3FCktSbfGOiwplZde51Yp10xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/u-kVZEk-sczKugzSQ4EDyFq-PjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f23929-7375-41c8-9973-33d728433c11/1/qh3FCktSbfGOiwplZde51Yp10xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.81.0-31.172.82.255
79.133.42.0/24
185.26.96.0/22
212.224.112.0/23
212.224.118.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:22:2c:15:fd:bf:44:37:dc:4d:cd:18:02:77:f0:86:aa:32:
d9:ad:b8:68:14:5d:95:e3:07:97:72:13:81:38:d9:56:af:a1:
b7:30:ef:f9:f6:bf:46:2a:83:a5:02:f1:a9:31:f5:c6:5a:fd:
12:1a:37:61:ca:ed:76:e8:95:0b:99:29:d6:3f:19:d1:a9:92:
47:38:c3:2a:ed:ed:85:42:b3:f5:93:bb:1e:70:d5:b1:98:05:
ca:ef:e3:9d:58:51:5c:15:3e:5c:07:ac:4e:4f:05:3d:8a:5e:
7b:94:dd:a6:eb:ff:d7:85:ac:b9:12:ef:a7:fa:98:6b:7f:3b:
d1:e9:d2:85:04:04:4e:b7:99:15:96:a8:76:db:4d:0b:80:d6:
9f:d8:67:d4:54:e6:03:a4:8f:07:04:6e:c1:b8:0d:b5:88:c4:
b4:1b:87:5e:f1:cd:1e:d6:dc:b4:34:fa:ec:6d:84:bc:c2:48:
ae:13:29:43:38:cb:5a:84:3f:ee:e3:be:72:74:3b:d0:a5:55:
0f:5f:3e:63:1a:db:0b:6c:ad:e9:09:d1:83:e7:5a:f3:d7:b6:
95:fe:0c:b7:4c:7f:a1:0d:3f:25:ac:bc:31:53:53:d9:0c:66:
7d:da:a3:c6:48:07:fb:4f:60:e1:0f:72:09:82:7d:15:b6:00:
d3:69:bb:ba
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAY7MVBe7V2kGHgwWFZ6PSC3sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMWRjNTBhNGI1MjZkZjE4ZThiMGE2NTY1ZDdiOWQ1OGE3
NWQzMTUwHhcNMjQwNDExMDg0NDA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYmU5MTU2NDQ5M2ViMWNjY2FiYTBjZDI0MzgxMDNjODVhYmUzZTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKAAhB84sl7Or5GEYcLDmkkvexKK
7Jgog6ggeARQFBu2SCW9anI8c8yBaFqo/Z5qSHMnUoG1CzbddTV20pNOT9YMxkwX
cFhpZJrzIvW6JC3dcY8uOJt2IioLT1go7cd/V/rrmCVK3IwhxqSIxplhYWu51SY4
zKRIg2K3Q3Kl7S2HdcRd3JWTdqH3s88LGhmvzwlkcFEKapEHvl7woAW/thWcs7t8
4aFHUIJUNuLjwFzaImNiup5wrzSfVUu7S8cs38VupHRVoQfwBkvRDPpSZVmEMWgS
jCOcxbiupkcehTJh5ZPoWoMqR4JztXL9IObWY2RntdjcP3ENY0+OTzWouQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFLvpFWRJPrHMyroM0kOBA8havj40MB8GA1UdIwQY
MBaAFKodxQpLUm3xjosKZWXXudWKddMVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWgzRkNrdFNiZkdPaXdwbFpkZTUxWXAxMHhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mMjM5MjktNzM3NS00MWM4LTk5NzMt
MzNkNzI4NDMzYzExLzEvdS1rVlpFay1zY3pLdWd6U1E0RUR5RnEtUGpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9mMjM5MjktNzM3NS00MWM4LTk5NzMtMzNkNzI4NDMzYzEx
LzEvcWgzRkNrdFNiZkdPaXdwbFpkZTUxWXAxMHhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBAAfrFED
BAAfrFIDBABPhSoDBAK5GmADBAHU4HADBADU4HYwDQYJKoZIhvcNAQELBQADggEB
ABoiLBX9v0Q33E3NGAJ38IaqMtmtuGgUXZXjB5dyE4E42Vavobcw7/n2v0Yqg6UC
8akx9cZa/RIaN2HK7XbolQuZKdY/GdGpkkc4wyrt7YVCs/WTux5w1bGYBcrv451Y
UVwVPlwHrE5PBT2KXnuU3abr/9eFrLkS76f6mGt/O9Hp0oUEBE63mRWWqHbbTQuA
1p/YZ9RU5gOkjwcEbsG4DbWIxLQbh17xzR7W3LQ0+uxthLzCSK4TKUM4y1qEP+7j
vnJ0O9ClVQ9fPmMa2wtsrekJ0YPnWvPXtpX+DLdMf6ENPyWsvDFTU9kMZn3ao8ZI
B/tPYOEPcgmCfRW2ANNpu7o=
-----END CERTIFICATE-----
Generated at Fri Jun 7 14:08:42 2024 by rpki-client on console-ams.rpki-client.org