Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/S_pU7FZZ2cc-vnQFxsVyu34Hs-M.roa
File: S_pU7FZZ2cc-vnQFxsVyu34Hs-M.roa (raw, json)
Hash identifier: Z/jC2LeipoigEFSv4U1XCnYMeLFdBiB/weBjQJ+iJ00=
Subject key identifier: 4B:FA:54:EC:56:59:D9:C7:3E:BE:74:05:C6:C5:72:BB:7E:07:B3:E3
Certificate issuer: /CN=79b6ceac5d42a637f36ba1e3fdae90ad5fee2cff
Certificate serial: 018EE7575C2E8AB0583EF4B4FB8C24B29526
Authority key identifier: 79:B6:CE:AC:5D:42:A6:37:F3:6B:A1:E3:FD:AE:90:AD:5F:EE:2C:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/S_pU7FZZ2cc-vnQFxsVyu34Hs-M.roa
Signing time: Tue 16 Apr 2024 14:37:25 +0000
ROA not before: Tue 16 Apr 2024 14:37:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208324
IP address blocks: 31.24.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e7:57:5c:2e:8a:b0:58:3e:f4:b4:fb:8c:24:b2:95:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79b6ceac5d42a637f36ba1e3fdae90ad5fee2cff
Validity
Not Before: Apr 16 14:37:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4bfa54ec5659d9c73ebe7405c6c572bb7e07b3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:41:e4:b4:86:ae:95:a3:86:c6:71:b8:95:88:
49:8f:45:10:ef:33:44:29:51:b2:38:80:61:ba:c1:
58:76:e9:c0:4d:e6:c2:1d:a0:52:3a:49:5b:da:7e:
f6:9b:6d:d1:7d:73:c5:2f:7b:42:ce:c6:e8:6b:c3:
c9:6f:c7:5c:dc:79:ba:4f:75:2f:fe:39:11:5c:36:
8d:45:70:c3:9f:54:45:04:68:ea:47:b6:7f:a1:21:
78:3d:1b:82:62:3e:b2:9d:fa:6b:25:5d:42:b1:ab:
ed:e7:28:9d:a2:f6:96:9b:58:08:f7:ec:25:a7:6a:
a3:1b:17:87:a8:28:e4:f0:17:7c:5a:fa:a1:7c:1d:
b2:f6:a3:16:55:33:1d:db:fc:9f:9f:72:4b:3e:f5:
04:89:b1:d8:62:05:82:5b:ff:f1:56:9b:eb:56:87:
ed:5d:d1:aa:75:1a:44:b1:f5:59:3b:a1:5b:73:b2:
da:e6:e8:2f:e1:85:ad:3a:64:6f:b8:52:7d:24:31:
3e:19:c9:56:79:05:20:c6:52:07:2c:70:05:11:55:
0d:83:2f:c7:cd:f9:ec:54:96:a6:db:bb:a0:70:6c:
ec:fb:7c:6c:65:f6:84:56:d0:8f:c7:d2:f2:4e:db:
65:49:78:e4:52:07:bb:a4:91:ef:9e:25:e1:ff:86:
94:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FA:54:EC:56:59:D9:C7:3E:BE:74:05:C6:C5:72:BB:7E:07:B3:E3
X509v3 Authority Key Identifier:
keyid:79:B6:CE:AC:5D:42:A6:37:F3:6B:A1:E3:FD:AE:90:AD:5F:EE:2C:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/S_pU7FZZ2cc-vnQFxsVyu34Hs-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a7d421-e8cd-4929-aed0-4fe3f61110de/1/ebbOrF1Cpjfza6Hj_a6QrV_uLP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.252.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:a5:4b:12:c5:11:53:77:cd:ae:2a:dc:b0:ae:34:e2:9b:af:
2c:07:0a:6c:c3:3d:61:54:61:f2:de:c4:cc:bb:cb:25:d9:84:
15:4e:22:5a:c2:6d:6e:13:05:55:c1:e6:85:06:a7:7e:91:f6:
fa:ed:30:92:7a:f6:53:71:85:e5:e7:b6:4c:19:8d:63:bc:1f:
85:48:cc:30:c0:29:8a:3e:c4:ed:3b:65:7b:f9:14:09:58:7e:
af:2e:d3:50:61:9d:b5:e4:97:c4:fd:e4:d3:73:5a:cc:f9:b3:
75:a1:44:bc:5c:61:79:f3:a4:d7:2f:07:26:0c:e0:3b:ef:f7:
0e:5c:42:48:59:01:e9:61:4d:17:fb:7b:b1:af:10:d3:50:7e:
46:6d:7e:c8:06:a3:60:85:21:2e:ce:6e:99:48:72:ff:83:d6:
a4:b8:ac:2c:9c:a7:e8:62:47:25:2d:b9:79:ba:1d:14:40:cb:
e7:83:35:48:b7:fd:6a:90:a8:c4:c2:28:53:69:18:70:fb:cc:
94:16:3d:7c:4c:7b:c3:d7:76:1e:06:3f:a6:6b:16:c6:14:75:
db:bb:2d:84:68:d4:de:01:34:dd:47:82:48:78:c1:dc:82:be:
5f:b4:99:26:04:32:df:63:81:a3:99:ae:15:70:58:23:71:f1:
3c:8a:c4:ee
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY7nV1wuirBYPvS0+4wkspUmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YjZjZWFjNWQ0MmE2MzdmMzZiYTFlM2ZkYWU5MGFkNWZl
ZTJjZmYwHhcNMjQwNDE2MTQzNzI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmZhNTRlYzU2NTlkOWM3M2ViZTc0MDVjNmM1NzJiYjdlMDdiM2UzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0HktIaulaOGxnG4lYhJj0UQ7zNE
KVGyOIBhusFYdunATebCHaBSOklb2n72m23RfXPFL3tCzsboa8PJb8dc3Hm6T3Uv
/jkRXDaNRXDDn1RFBGjqR7Z/oSF4PRuCYj6ynfprJV1Csavt5yidovaWm1gI9+wl
p2qjGxeHqCjk8Bd8WvqhfB2y9qMWVTMd2/yfn3JLPvUEibHYYgWCW//xVpvrVoft
XdGqdRpEsfVZO6Fbc7La5ugv4YWtOmRvuFJ9JDE+GclWeQUgxlIHLHAFEVUNgy/H
zfnsVJam27ugcGzs+3xsZfaEVtCPx9LyTttlSXjkUge7pJHvniXh/4aUeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEv6VOxWWdnHPr50BcbFcrt+B7PjMB8GA1UdIwQY
MBaAFHm2zqxdQqY382uh4/2ukK1f7iz/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWJiT3JGMUNwamZ6YTZIal9hNlFyVl91TFA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9hN2Q0MjEtZThjZC00OTI5LWFlZDAt
NGZlM2Y2MTExMGRlLzEvU19wVTdGWloyY2Mtdm5RRnhzVnl1MzRIcy1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9hN2Q0MjEtZThjZC00OTI5LWFlZDAtNGZlM2Y2MTExMGRl
LzEvZWJiT3JGMUNwamZ6YTZIal9hNlFyVl91TFA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHxj8MA0G
CSqGSIb3DQEBCwUAA4IBAQAdpUsSxRFTd82uKtywrjTim68sBwpswz1hVGHy3sTM
u8sl2YQVTiJawm1uEwVVweaFBqd+kfb67TCSevZTcYXl57ZMGY1jvB+FSMwwwCmK
PsTtO2V7+RQJWH6vLtNQYZ215JfE/eTTc1rM+bN1oUS8XGF586TXLwcmDOA77/cO
XEJIWQHpYU0X+3uxrxDTUH5GbX7IBqNghSEuzm6ZSHL/g9akuKwsnKfoYkclLbl5
uh0UQMvngzVIt/1qkKjEwihTaRhw+8yUFj18THvD13YeBj+maxbGFHXbuy2EaNTe
ATTdR4JIeMHcgr5ftJkmBDLfY4Gjma4VcFgjcfE8isTu
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:48:35 2024 by rpki-client on console-ams.rpki-client.org