Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ioO7ERl2REXw9trMFmGfNfT3A_M.roa
File: ioO7ERl2REXw9trMFmGfNfT3A_M.roa (raw, json)
Hash identifier: wv2DodFtd2kthehJlXU1W1kDEP+4WysPwI1Id1rLTy0=
Subject key identifier: 8A:83:BB:11:19:76:44:45:F0:F6:DA:CC:16:61:9F:35:F4:F7:03:F3
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 0191272FDC4177C7ACD5CD51218CD063EEFB
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ioO7ERl2REXw9trMFmGfNfT3A_M.roa
Signing time: Tue 06 Aug 2024 10:15:33 +0000
ROA not before: Tue 06 Aug 2024 10:15:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31362
IP address blocks: 31.14.43.0/24 maxlen: 24
31.14.53.0/24 maxlen: 24
31.14.54.0/24 maxlen: 24
37.156.245.0/24 maxlen: 24
86.104.124.0/24 maxlen: 24
89.34.5.0/24 maxlen: 24
89.34.93.0/24 maxlen: 24
89.35.55.0/24 maxlen: 24
89.36.19.0/24 maxlen: 24
89.36.92.0/24 maxlen: 24
89.37.41.0/24 maxlen: 24
89.41.63.0/24 maxlen: 24
89.42.14.0/24 maxlen: 24
89.42.35.0/24 maxlen: 24
89.42.214.0/24 maxlen: 24
89.44.104.0/24 maxlen: 24
185.99.91.0/24 maxlen: 24
188.240.12.0/24 maxlen: 24
217.19.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:27:2f:dc:41:77:c7:ac:d5:cd:51:21:8c:d0:63:ee:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Aug 6 10:15:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a83bb1119764445f0f6dacc16619f35f4f703f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0f:2a:a5:ac:a2:30:06:4c:84:b5:84:61:17:
22:82:1d:4a:ae:c4:68:6b:d8:03:99:30:9f:df:b7:
8c:28:0d:89:10:1d:07:14:39:8f:08:35:3c:a1:7c:
3c:3a:ec:cc:a8:54:37:d8:85:48:9d:66:a0:3d:60:
3a:93:1b:f0:ef:34:61:4d:19:79:b8:58:e6:6c:c8:
5a:87:6e:bd:0f:e2:b3:14:31:0f:43:98:0e:32:3b:
17:b6:82:23:ea:06:5e:ee:93:95:a2:dd:c1:be:64:
5d:d9:6d:1b:a6:17:91:7b:2f:b8:e0:b0:da:ce:3c:
a5:eb:a9:b8:78:1e:0f:35:cc:ab:57:0b:ec:c3:18:
f2:5f:0a:79:cf:5a:38:a6:20:85:53:67:28:b8:19:
62:8d:4e:cb:af:55:47:25:ee:7c:7c:30:dc:52:58:
ff:86:de:e3:b1:cb:2c:46:1a:ba:9d:f6:6d:a3:5f:
62:7a:f8:4f:6e:0b:5e:1e:b9:02:30:ab:9d:09:49:
4b:ca:e4:13:7b:d4:81:59:89:22:14:a6:8c:8d:43:
ef:be:92:a0:27:28:28:3d:bb:67:24:cb:ce:2b:21:
d6:11:6a:10:cd:fc:36:52:37:1e:b7:60:63:02:8b:
fa:24:d3:14:02:e2:93:e4:fe:78:4e:a7:3f:71:e9:
d3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:83:BB:11:19:76:44:45:F0:F6:DA:CC:16:61:9F:35:F4:F7:03:F3
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ioO7ERl2REXw9trMFmGfNfT3A_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.43.0/24
31.14.53.0-31.14.54.255
37.156.245.0/24
86.104.124.0/24
89.34.5.0/24
89.34.93.0/24
89.35.55.0/24
89.36.19.0/24
89.36.92.0/24
89.37.41.0/24
89.41.63.0/24
89.42.14.0/24
89.42.35.0/24
89.42.214.0/24
89.44.104.0/24
185.99.91.0/24
188.240.12.0/24
217.19.9.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:f8:41:c4:42:48:ad:e9:d7:33:0b:bd:62:77:fa:87:44:b7:
1d:f3:92:05:b6:f8:5d:db:40:a4:63:1f:f8:29:6b:1f:62:f1:
95:d1:d9:f6:ab:24:e1:6e:a7:4e:b4:ac:4b:23:54:56:d8:3e:
a5:a1:1d:e7:c7:c1:1a:48:c4:64:73:fc:3c:cc:c7:9d:16:a6:
0f:e6:fb:0f:cd:99:53:e5:6f:cb:67:35:af:3b:a2:da:6f:38:
02:04:d9:8d:31:8e:9e:b4:88:ac:2a:25:d1:74:56:e3:96:9d:
ba:23:70:d9:06:1c:0d:ab:66:e9:c8:b0:2c:6c:65:52:b6:bf:
f2:74:c7:88:e2:38:df:6a:fe:6f:bf:6e:60:f2:81:ec:94:2a:
15:73:c0:5b:2f:2d:52:63:20:f6:15:ca:82:62:2d:3c:46:ec:
d1:0c:c4:23:13:51:ea:b6:6f:2f:93:5d:ae:7d:38:8d:df:62:
e1:5e:bd:e4:1c:b6:01:01:28:7c:d9:72:d5:b2:5e:8f:f0:db:
e6:a4:af:cb:36:97:b5:be:f7:58:fc:1b:1b:bb:42:74:bf:9e:
19:eb:78:e7:96:69:8b:c7:73:ff:f9:e2:e4:6c:bc:26:f2:76:
e0:2f:6d:a9:2c:38:d7:ba:6e:73:7a:a4:0d:25:09:2c:73:04:
47:e5:20:73
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgISAZEnL9xBd8es1c1RIYzQY+77MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZjEzMmRmMTNlNGJlNTNkODI1MGM4YzQ4NDIwMjY0ZWVm
NmMxNGMwHhcNMjQwODA2MTAxNTMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTgzYmIxMTE5NzY0NDQ1ZjBmNmRhY2MxNjYxOWYzNWY0ZjcwM2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkw8qpayiMAZMhLWEYRcigh1KrsRo
a9gDmTCf37eMKA2JEB0HFDmPCDU8oXw8OuzMqFQ32IVInWagPWA6kxvw7zRhTRl5
uFjmbMhah269D+KzFDEPQ5gOMjsXtoIj6gZe7pOVot3BvmRd2W0bpheRey+44LDa
zjyl66m4eB4PNcyrVwvswxjyXwp5z1o4piCFU2couBlijU7Lr1VHJe58fDDcUlj/
ht7jscssRhq6nfZto19ievhPbgteHrkCMKudCUlLyuQTe9SBWYkiFKaMjUPvvpKg
JygoPbtnJMvOKyHWEWoQzfw2Ujcet2BjAov6JNMUAuKT5P54Tqc/cenT6wIDAQAB
o4ICeDCCAnQwHQYDVR0OBBYEFIqDuxEZdkRF8PbazBZhnzX09wPzMB8GA1UdIwQY
MBaAFH3xMt8T5L5T2CUMjEhCAmTu9sFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYt
OTc3ODY3NGVkYzk3LzEvaW9PN0VSbDJSRVh3OXRyTUZtR2ZOZlQzQV9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYtOTc3ODY3NGVkYzk3
LzEvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGNBggrBgEFBQcBBwEB/wR+MHwwegQCAAEwdAMEAB8OKzAM
AwQAHw41AwQAHw42AwQAJZz1AwQAVmh8AwQAWSIFAwQAWSJdAwQAWSM3AwQAWSQT
AwQAWSRcAwQAWSUpAwQAWSk/AwQAWSoOAwQAWSojAwQAWSrWAwQAWSxoAwQAuWNb
AwQAvPAMAwQA2RMJMA0GCSqGSIb3DQEBCwUAA4IBAQAv+EHEQkit6dczC71id/qH
RLcd85IFtvhd20CkYx/4KWsfYvGV0dn2qyThbqdOtKxLI1RW2D6loR3nx8EaSMRk
c/w8zMedFqYP5vsPzZlT5W/LZzWvO6LabzgCBNmNMY6etIisKiXRdFbjlp26I3DZ
BhwNq2bpyLAsbGVStr/ydMeI4jjfav5vv25g8oHslCoVc8BbLy1SYyD2FcqCYi08
RuzRDMQjE1Hqtm8vk12ufTiN32LhXr3kHLYBASh82XLVsl6P8NvmpK/LNpe1vvdY
/Bsbu0J0v54Z63jnlmmLx3P/+eLkbLwm8nbgL22pLDjXum5zeqQNJQkscwRH5SBz
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:37:19 2024 by rpki-client on console-fra.rpki-client.org