Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/rr2tSpga1SsUR9tvASbwO3cEj5A.roa
File: rr2tSpga1SsUR9tvASbwO3cEj5A.roa (raw, json)
Hash identifier: CoP8A8C0XHyyQKd+MN7TKRkA1n0TQaC6b4s982sLtME=
Subject key identifier: AE:BD:AD:4A:98:1A:D5:2B:14:47:DB:6F:01:26:F0:3B:77:04:8F:90
Certificate issuer: /CN=13440366007eb56f10e9f99e95204d330508b9b0
Certificate serial: 018CC500D229F500F1ABD80202D8B4467C1C
Authority key identifier: 13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/rr2tSpga1SsUR9tvASbwO3cEj5A.roa
Signing time: Mon 01 Jan 2024 12:30:14 +0000
ROA not before: Mon 01 Jan 2024 12:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48109
IP address blocks: 89.31.192.0/24 maxlen: 24
89.31.192.0/21 maxlen: 21
89.31.196.0/24 maxlen: 24
89.31.195.0/24 maxlen: 24
89.31.194.0/24 maxlen: 24
89.31.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:d2:29:f5:00:f1:ab:d8:02:02:d8:b4:46:7c:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13440366007eb56f10e9f99e95204d330508b9b0
Validity
Not Before: Jan 1 12:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aebdad4a981ad52b1447db6f0126f03b77048f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ec:92:40:83:90:fc:ef:4a:31:60:3a:2a:b9:
84:77:8f:6c:6e:dd:30:04:05:e1:ad:cb:97:19:6a:
c2:33:26:22:04:c8:8f:3a:82:2d:76:44:ff:cc:d7:
22:f2:c5:a9:20:6a:b4:1f:46:3f:30:67:51:cb:49:
56:80:e6:63:b1:78:f8:d6:30:fd:03:80:41:55:86:
41:ee:98:b0:f4:6c:b8:3b:3a:f2:0b:95:1e:2f:5c:
32:4d:ce:69:1c:65:be:89:2f:7d:23:bf:e6:e9:54:
12:29:06:39:00:66:83:b6:a8:0f:14:f8:b1:75:a1:
20:f7:9e:45:bc:44:4e:92:a6:54:c3:26:3a:e6:22:
21:71:5c:51:6c:26:af:af:6d:95:8a:e3:48:9a:9c:
5c:53:9b:4a:cc:57:6d:c6:f0:05:cf:a4:ad:eb:a5:
5b:8d:69:4c:2e:22:28:e8:73:dd:6d:c9:6c:41:a9:
4c:41:5d:cc:b3:81:ff:37:e8:d3:f9:05:32:a9:06:
b0:0c:28:39:2f:f0:4a:0f:b4:29:92:55:d0:89:9c:
d4:eb:6f:ce:fd:b3:07:b3:28:6e:ba:e9:72:a6:ce:
e0:79:6d:15:6a:05:8d:87:23:f7:12:5b:ae:bc:70:
70:99:a8:17:0a:ac:a3:08:2c:28:9b:02:bd:93:a0:
68:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BD:AD:4A:98:1A:D5:2B:14:47:DB:6F:01:26:F0:3B:77:04:8F:90
X509v3 Authority Key Identifier:
keyid:13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/rr2tSpga1SsUR9tvASbwO3cEj5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.31.192.0/21
Signature Algorithm: sha256WithRSAEncryption
4d:81:91:26:d5:c4:b7:80:22:cc:93:64:40:cd:a7:d5:37:c0:
a0:95:b7:45:dd:8a:9a:b7:2c:a3:74:1d:0b:79:cc:f7:68:73:
60:8d:0a:23:40:37:6e:20:b1:f3:3d:71:4b:b6:19:26:cc:db:
b4:12:10:10:3d:24:1a:43:e3:05:da:10:58:c1:35:ce:cc:f5:
ce:96:b5:ce:54:26:04:3a:1b:17:06:65:0b:27:1b:35:15:da:
f6:70:b4:91:be:a4:2e:cd:3a:28:2f:75:ea:45:10:75:71:a2:
7e:d0:2f:cf:3d:2b:2a:47:32:04:f6:ef:49:53:d3:09:f8:50:
91:d6:0e:47:d5:99:b2:99:cd:c7:c1:72:5f:5d:fe:76:83:e1:
a1:43:fb:26:8c:c0:ba:a7:68:39:0f:5e:49:c6:af:43:af:ba:
9a:61:56:dc:cb:f5:e9:7c:68:89:e0:2f:58:15:30:34:d7:31:
32:74:70:5d:7d:19:34:d4:52:0a:4d:94:cb:bd:06:a1:4e:b3:
4d:00:bb:c1:4b:ab:fb:a2:26:53:c1:b4:92:af:46:01:49:43:
4a:c1:f7:05:15:52:d6:e0:3e:28:83:0a:6a:d3:92:00:c8:f5:
ff:20:a4:33:62:ae:d6:0c:0c:79:83:58:e8:d1:48:a6:1d:30:
56:17:71:4e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFANIp9QDxq9gCAti0RnwcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNDQwMzY2MDA3ZWI1NmYxMGU5Zjk5ZTk1MjA0ZDMzMDUw
OGI5YjAwHhcNMjQwMTAxMTIzMDE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWJkYWQ0YTk4MWFkNTJiMTQ0N2RiNmYwMTI2ZjAzYjc3MDQ4ZjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuySQIOQ/O9KMWA6KrmEd49sbt0w
BAXhrcuXGWrCMyYiBMiPOoItdkT/zNci8sWpIGq0H0Y/MGdRy0lWgOZjsXj41jD9
A4BBVYZB7piw9Gy4OzryC5UeL1wyTc5pHGW+iS99I7/m6VQSKQY5AGaDtqgPFPix
daEg955FvEROkqZUwyY65iIhcVxRbCavr22ViuNImpxcU5tKzFdtxvAFz6St66Vb
jWlMLiIo6HPdbclsQalMQV3Ms4H/N+jT+QUyqQawDCg5L/BKD7QpklXQiZzU62/O
/bMHsyhuuulyps7geW0VagWNhyP3EluuvHBwmagXCqyjCCwomwK9k6BoTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK69rUqYGtUrFEfbbwEm8Dt3BI+QMB8GA1UdIwQY
MBaAFBNEA2YAfrVvEOn5npUgTTMFCLmwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTBRRFpnQi10VzhRNmZtZWxTQk5Nd1VJdWJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8wYjAyODAtOTYyMy00NGJhLThkZGYt
NDRjMWE0ZWI5NjljLzEvcnIydFNwZ2ExU3NVUjl0dkFTYndPM2NFajVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8wYjAyODAtOTYyMy00NGJhLThkZGYtNDRjMWE0ZWI5Njlj
LzEvRTBRRFpnQi10VzhRNmZtZWxTQk5Nd1VJdWJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDWR/AMA0G
CSqGSIb3DQEBCwUAA4IBAQBNgZEm1cS3gCLMk2RAzafVN8CglbdF3YqatyyjdB0L
ecz3aHNgjQojQDduILHzPXFLthkmzNu0EhAQPSQaQ+MF2hBYwTXOzPXOlrXOVCYE
OhsXBmULJxs1Fdr2cLSRvqQuzTooL3XqRRB1caJ+0C/PPSsqRzIE9u9JU9MJ+FCR
1g5H1Zmymc3HwXJfXf52g+GhQ/smjMC6p2g5D15Jxq9Dr7qaYVbcy/XpfGiJ4C9Y
FTA01zEydHBdfRk01FIKTZTLvQahTrNNALvBS6v7oiZTwbSSr0YBSUNKwfcFFVLW
4D4ogwpq05IAyPX/IKQzYq7WDAx5g1jo0UimHTBWF3FO
-----END CERTIFICATE-----
Generated at Fri May 17 07:11:05 2024 by rpki-client on console-fra.rpki-client.org