Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/sOEJIoe0VkU2XI1-s7oSPWRdA8A.roa
File: sOEJIoe0VkU2XI1-s7oSPWRdA8A.roa (raw, json)
Hash identifier: ODXef2bRxzB9h/d/ooc0Ixi2xs254q15qo2pQ4yaUT4=
Subject key identifier: B0:E1:09:22:87:B4:56:45:36:5C:8D:7E:B3:BA:12:3D:64:5D:03:C0
Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Certificate serial: 018CC64B226E152DB927E583C5DB59EA67E0
Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/sOEJIoe0VkU2XI1-s7oSPWRdA8A.roa
Signing time: Mon 01 Jan 2024 18:31:01 +0000
ROA not before: Mon 01 Jan 2024 18:31:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55256
IP address blocks: 31.186.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:22:6e:15:2d:b9:27:e5:83:c5:db:59:ea:67:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9
Validity
Not Before: Jan 1 18:31:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0e1092287b45645365c8d7eb3ba123d645d03c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d0:fd:7c:35:ca:0c:59:10:28:64:4c:de:96:
ea:1d:16:9d:aa:61:96:46:fd:09:da:f0:8d:97:70:
ae:4b:94:e5:40:ab:83:e2:d1:dd:73:2a:ff:ee:d3:
75:08:45:9b:65:35:42:b6:2a:6a:a3:d8:51:bb:bf:
6b:eb:a7:e7:7e:39:a1:d5:19:ca:f8:dd:b2:69:6d:
7d:e7:91:c4:04:a0:6b:b2:e7:03:de:cb:18:8d:f7:
84:90:ac:5c:8c:11:f7:6d:e8:36:12:3c:f4:46:8d:
97:d5:b0:a2:1b:0d:e5:f4:f2:b1:e3:ca:36:98:d7:
92:1e:c7:53:04:27:29:4c:8c:99:4b:b0:34:9a:29:
e8:2f:d4:1a:53:50:9c:f1:25:6a:76:b0:1c:d4:aa:
19:1e:d2:e7:d2:02:de:3a:ae:4d:9c:49:c5:39:42:
fc:90:99:50:a7:ca:60:08:db:4a:80:cc:55:04:31:
87:16:7f:73:13:5a:5a:d7:6c:62:b6:ea:39:13:5b:
6c:c0:49:82:94:40:c5:78:84:ef:be:08:05:36:51:
eb:d5:cb:6f:ae:5a:1f:2d:b1:c4:b6:cd:0d:f5:55:
c3:84:b7:e7:08:22:a9:8d:ed:59:82:b7:2e:fd:61:
6f:31:80:8e:a4:e2:70:cf:02:33:56:66:eb:94:00:
8e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E1:09:22:87:B4:56:45:36:5C:8D:7E:B3:BA:12:3D:64:5D:03:C0
X509v3 Authority Key Identifier:
keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/sOEJIoe0VkU2XI1-s7oSPWRdA8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.239.0/24
Signature Algorithm: sha256WithRSAEncryption
11:be:87:02:e2:7a:84:e4:d1:9d:1d:7e:f0:8d:21:65:ea:35:
61:ca:93:2c:8a:44:2f:41:0d:b9:55:8c:eb:73:0e:61:b5:c6:
a0:08:40:b7:11:4e:e4:d4:e3:29:3d:29:38:3e:86:89:3a:05:
56:5f:2b:98:81:23:f3:a7:b7:87:71:f8:1f:1b:41:57:bd:88:
1f:c6:f1:48:54:5c:62:a4:74:d2:5c:02:60:a0:04:76:37:7a:
72:ce:6b:3c:40:63:c5:4e:e0:5e:3c:90:4f:9c:48:9c:f9:c0:
b6:6b:b1:9b:57:8f:6b:be:b3:93:36:d4:21:21:2d:fe:08:34:
c1:e5:d8:91:3e:68:21:68:8f:17:36:cc:03:25:31:44:6b:81:
81:e5:0d:85:57:b0:ba:ee:f8:a4:aa:83:6d:bf:68:c5:03:88:
20:58:f3:46:a5:26:1a:a2:21:9d:88:f2:7e:c8:1a:8a:d8:47:
3c:52:40:29:78:14:a0:15:3e:23:92:f7:4e:da:26:1a:02:00:
c7:49:1c:a0:5c:ad:50:83:35:85:ca:d9:ed:76:08:ff:16:e6:
e2:ef:77:b1:fb:34:f2:50:59:72:2d:b7:b2:6e:d1:fb:7f:8a:
61:a3:5a:8f:39:6b:75:3d:3c:c4:cc:fb:96:64:91:5a:7d:bd:
3e:43:e1:7f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSyJuFS25J+WDxdtZ6mfgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZGFlZWE5MTE3YTFkNWNjYzMyMDIyMjk1NWEwOWZhYTA3
OThmZDkwHhcNMjQwMTAxMTgzMTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGUxMDkyMjg3YjQ1NjQ1MzY1YzhkN2ViM2JhMTIzZDY0NWQwM2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdD9fDXKDFkQKGRM3pbqHRadqmGW
Rv0J2vCNl3CuS5TlQKuD4tHdcyr/7tN1CEWbZTVCtipqo9hRu79r66fnfjmh1RnK
+N2yaW1955HEBKBrsucD3ssYjfeEkKxcjBH3beg2Ejz0Ro2X1bCiGw3l9PKx48o2
mNeSHsdTBCcpTIyZS7A0minoL9QaU1Cc8SVqdrAc1KoZHtLn0gLeOq5NnEnFOUL8
kJlQp8pgCNtKgMxVBDGHFn9zE1pa12xituo5E1tswEmClEDFeITvvggFNlHr1ctv
rlofLbHEts0N9VXDhLfnCCKpje1Zgrcu/WFvMYCOpOJwzwIzVmbrlACOcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLDhCSKHtFZFNlyNfrO6Ej1kXQPAMB8GA1UdIwQY
MBaAFK7a7qkReh1czDICIpVaCfqgeY/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEt
OTk4NjhjNTEzMjlhLzEvc09FSklvZTBWa1UyWEkxLXM3b1NQV1JkQThBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEtOTk4NjhjNTEzMjlh
LzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH7rvMA0G
CSqGSIb3DQEBCwUAA4IBAQARvocC4nqE5NGdHX7wjSFl6jVhypMsikQvQQ25VYzr
cw5htcagCEC3EU7k1OMpPSk4PoaJOgVWXyuYgSPzp7eHcfgfG0FXvYgfxvFIVFxi
pHTSXAJgoAR2N3pyzms8QGPFTuBePJBPnEic+cC2a7GbV49rvrOTNtQhIS3+CDTB
5diRPmghaI8XNswDJTFEa4GB5Q2FV7C67vikqoNtv2jFA4ggWPNGpSYaoiGdiPJ+
yBqK2Ec8UkApeBSgFT4jkvdO2iYaAgDHSRygXK1QgzWFytntdgj/Fubi73ex+zTy
UFlyLbeybtH7f4pho1qPOWt1PTzEzPuWZJFafb0+Q+F/
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:01:16 2024 by rpki-client on console-fra.rpki-client.org