Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/1-VVNIufacVzhFbOo-ie3K9Le7Pw.roa
File: 1-VVNIufacVzhFbOo-ie3K9Le7Pw.roa (raw, json)
Hash identifier: WUZ+ShdSWz299XhjSsKaYIUFCV5+dRTfv17rwKFkO70=
Subject key identifier: F9:55:4D:22:E7:DA:71:5C:E1:15:B3:A8:FA:27:B7:2B:D2:DE:EC:FC
Certificate issuer: /CN=47edf8f1bf0c4fbc469e71c99d82489ea1f3da4a
Certificate serial: 018CC87093C091E23BC4946E51342B43A307
Authority key identifier: 47:ED:F8:F1:BF:0C:4F:BC:46:9E:71:C9:9D:82:48:9E:A1:F3:DA:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/1-VVNIufacVzhFbOo-ie3K9Le7Pw.roa
Signing time: Tue 02 Jan 2024 04:31:10 +0000
ROA not before: Tue 02 Jan 2024 04:31:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41627
IP address blocks: 89.251.40.0/21 maxlen: 21
185.167.92.0/22 maxlen: 22
31.171.224.0/20 maxlen: 20
46.251.12.0/22 maxlen: 22
91.147.236.0/22 maxlen: 22
89.251.32.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:93:c0:91:e2:3b:c4:94:6e:51:34:2b:43:a3:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47edf8f1bf0c4fbc469e71c99d82489ea1f3da4a
Validity
Not Before: Jan 2 04:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9554d22e7da715ce115b3a8fa27b72bd2deecfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:44:4b:a9:46:55:a5:9d:05:f5:3c:09:02:0c:
dc:77:c1:35:02:d5:a9:d8:51:37:29:b8:a5:67:52:
b2:a0:43:df:bc:5f:d4:70:a0:b9:28:80:4a:e4:78:
c1:75:a3:29:e5:08:ba:63:3c:11:28:7e:78:8c:88:
74:f2:74:03:da:d5:a9:86:85:eb:2d:9b:ba:7d:a5:
9b:72:e8:47:81:16:13:79:c0:15:a0:26:38:41:3e:
33:26:f7:b3:27:3d:70:0b:ec:da:76:dd:27:92:b1:
ae:f4:aa:14:a9:1f:fb:96:b0:45:0b:7e:26:bc:56:
0d:b8:12:82:10:98:6a:84:df:8e:d1:dd:a1:8c:98:
14:6d:b1:f6:5f:67:1f:0e:e0:88:f5:94:35:c7:e2:
6d:5f:d9:0d:55:51:0e:e4:f8:6b:e6:41:a2:9c:96:
c5:3f:37:7a:52:80:b2:00:1f:02:34:b9:0a:31:8f:
6e:bd:9b:d9:2f:ef:0d:a5:bd:2d:7b:61:c3:fa:70:
81:d0:24:b8:fd:b7:21:19:b7:8a:0e:c3:83:97:54:
d0:19:9d:e4:62:d4:50:c9:a6:b1:96:6a:1e:7c:18:
14:93:3e:f3:3a:75:21:8e:bf:31:b8:2f:db:1a:b1:
63:e3:18:6f:8a:ce:53:d7:88:d5:93:cc:03:ca:a1:
d1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:55:4D:22:E7:DA:71:5C:E1:15:B3:A8:FA:27:B7:2B:D2:DE:EC:FC
X509v3 Authority Key Identifier:
keyid:47:ED:F8:F1:BF:0C:4F:BC:46:9E:71:C9:9D:82:48:9E:A1:F3:DA:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-348b8MT7xGnnHJnYJInqHz2ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/1-VVNIufacVzhFbOo-ie3K9Le7Pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6db34b-8afa-49c5-b73f-9204c197aa65/1/R-348b8MT7xGnnHJnYJInqHz2ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.224.0/20
46.251.12.0/22
89.251.32.0/20
91.147.236.0/22
185.167.92.0/22
Signature Algorithm: sha256WithRSAEncryption
e2:ca:78:62:11:7a:41:07:0d:50:7d:e5:01:df:f5:60:2a:21:
3e:ed:32:8c:18:3e:05:f9:43:aa:7b:fd:c2:26:12:1c:17:c7:
66:67:59:5f:bd:f7:91:5e:b7:99:20:b4:18:d9:5d:33:b7:3e:
52:a0:fc:db:98:6a:f2:26:3b:cf:27:a6:8e:86:e3:c9:b7:30:
1c:ca:e1:a0:d5:f8:e2:1c:54:18:90:0b:6d:47:2a:22:c0:4e:
48:67:de:d7:ee:dc:76:ba:43:17:07:7e:e8:1a:69:1d:f3:f6:
8e:83:3e:63:08:66:3f:e4:2d:da:16:21:69:77:ec:c3:d4:f4:
ce:2d:e8:ca:67:52:4c:fc:49:fc:3a:5d:ab:9d:26:a7:5f:5e:
1d:44:4b:77:30:50:c4:ec:cf:ac:46:3d:4d:32:d8:3f:42:a9:
19:4d:9f:64:95:1f:d0:39:c9:44:66:e9:3d:13:8a:25:96:95:
dc:0a:e2:b4:ea:92:65:27:fc:35:a7:bf:31:82:13:6b:9f:fa:
ad:53:1b:dd:e3:d7:7e:7c:bb:51:0c:dc:de:c1:a5:3d:1d:c7:
33:12:39:f7:75:45:df:b2:c2:fa:27:ca:90:cc:57:65:21:04:
a2:04:24:b5:fc:bc:b6:d0:de:ee:23:63:83:27:1d:8a:7b:7e:
23:15:4b:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYzIcJPAkeI7xJRuUTQrQ6MHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3ZWRmOGYxYmYwYzRmYmM0NjllNzFjOTlkODI0ODllYTFm
M2RhNGEwHhcNMjQwMTAyMDQzMTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTU1NGQyMmU3ZGE3MTVjZTExNWIzYThmYTI3YjcyYmQyZGVlY2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkRLqUZVpZ0F9TwJAgzcd8E1AtWp
2FE3KbilZ1KyoEPfvF/UcKC5KIBK5HjBdaMp5Qi6YzwRKH54jIh08nQD2tWphoXr
LZu6faWbcuhHgRYTecAVoCY4QT4zJvezJz1wC+zadt0nkrGu9KoUqR/7lrBFC34m
vFYNuBKCEJhqhN+O0d2hjJgUbbH2X2cfDuCI9ZQ1x+JtX9kNVVEO5Phr5kGinJbF
Pzd6UoCyAB8CNLkKMY9uvZvZL+8Npb0te2HD+nCB0CS4/bchGbeKDsODl1TQGZ3k
YtRQyaaxlmoefBgUkz7zOnUhjr8xuC/bGrFj4xhvis5T14jVk8wDyqHReQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPlVTSLn2nFc4RWzqPontyvS3uz8MB8GA1UdIwQY
MBaAFEft+PG/DE+8Rp5xyZ2CSJ6h89pKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUi0zNDhiOE1UN3hHbm5ISm5ZSklucUh6MmtvLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82ZGIzNGItOGFmYS00OWM1LWI3M2Yt
OTIwNGMxOTdhYTY1LzEvMS1WVk5JdWZhY1Z6aEZiT28taWUzSzlMZTdQdy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvY2QvNmRiMzRiLThhZmEtNDljNS1iNzNmLTkyMDRjMTk3YWE2
NS8xL1ItMzQ4YjhNVDd4R25uSEpuWUpJbnFIejJrby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjA3BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEBB+r4AME
Ai77DAMEBFn7IAMEAluT7AMEArmnXDANBgkqhkiG9w0BAQsFAAOCAQEA4sp4YhF6
QQcNUH3lAd/1YCohPu0yjBg+BflDqnv9wiYSHBfHZmdZX733kV63mSC0GNldM7c+
UqD825hq8iY7zyemjobjybcwHMrhoNX44hxUGJALbUcqIsBOSGfe1+7cdrpDFwd+
6BppHfP2joM+YwhmP+Qt2hYhaXfsw9T0zi3oymdSTPxJ/Dpdq50mp19eHURLdzBQ
xOzPrEY9TTLYP0KpGU2fZJUf0DnJRGbpPROKJZaV3AritOqSZSf8Nae/MYITa5/6
rVMb3ePXfny7UQzc3sGlPR3HMxI593VF37LC+ifKkMxXZSEEogQktfy8ttDe7iNj
gycdint+IxVLJA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 08:10:30 2024 by rpki-client on console-ams.rpki-client.org