Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/XUQ2_OVPwkCAKfe74O-10aU-ayk.roa
File: XUQ2_OVPwkCAKfe74O-10aU-ayk.roa (raw, json)
Hash identifier: rIkW3GWX8XeTHuP0qnzEXjklQT4ydTZFhH4aX2g5tTM=
Subject key identifier: 5D:44:36:FC:E5:4F:C2:40:80:29:F7:BB:E0:EF:B5:D1:A5:3E:6B:29
Certificate issuer: /CN=de6640357ae4ae10fc0b3e9d98f2a0cb0118903c
Certificate serial: 01934DA1CDCAD72FD5603D468871BFE17FEF
Authority key identifier: DE:66:40:35:7A:E4:AE:10:FC:0B:3E:9D:98:F2:A0:CB:01:18:90:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/XUQ2_OVPwkCAKfe74O-10aU-ayk.roa
Signing time: Thu 21 Nov 2024 07:31:09 +0000
ROA not before: Thu 21 Nov 2024 07:31:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1813
IP address blocks: 217.31.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4d:a1:cd:ca:d7:2f:d5:60:3d:46:88:71:bf:e1:7f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de6640357ae4ae10fc0b3e9d98f2a0cb0118903c
Validity
Not Before: Nov 21 07:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d4436fce54fc2408029f7bbe0efb5d1a53e6b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a4:29:79:da:2c:5d:99:be:5c:b9:05:6c:d6:
5e:02:c9:06:5f:94:2e:6a:59:16:01:10:92:fa:de:
50:87:5b:1c:da:33:f2:db:2f:12:19:29:10:ca:ff:
b7:09:0d:c6:ed:2b:9b:c1:32:90:7f:7d:0c:43:a2:
ba:b3:1a:48:c8:2f:de:3d:94:09:89:28:24:02:2f:
e7:1d:97:b5:22:5c:96:cc:1e:70:72:33:d5:9d:3a:
6e:86:8d:83:91:3f:e4:b6:1c:8b:d0:80:d9:f9:e0:
9f:dd:06:83:33:85:96:e1:ab:f0:50:22:35:7b:47:
f6:fc:0a:ac:a9:b4:9b:02:a8:12:78:d4:25:5b:2f:
89:a0:62:4c:f4:09:2f:82:26:9e:7f:a4:4c:60:0f:
31:38:60:38:a3:a8:bc:2e:8e:d2:9e:19:cf:a3:97:
71:60:21:79:77:9d:66:b7:ae:a6:2c:a3:76:3d:e8:
a6:b6:ff:19:46:65:43:44:9d:f0:7a:c9:2c:72:60:
8e:1d:0d:1c:fa:9c:91:2c:45:a8:6d:48:72:f8:f0:
93:ae:9f:d2:11:1f:cb:c7:e6:d6:d4:47:71:cc:54:
41:8f:a6:88:36:7b:42:5a:e6:40:64:ef:cb:87:13:
b5:b3:58:1e:9e:03:7d:df:4f:85:b7:10:ec:06:de:
58:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:44:36:FC:E5:4F:C2:40:80:29:F7:BB:E0:EF:B5:D1:A5:3E:6B:29
X509v3 Authority Key Identifier:
keyid:DE:66:40:35:7A:E4:AE:10:FC:0B:3E:9D:98:F2:A0:CB:01:18:90:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/XUQ2_OVPwkCAKfe74O-10aU-ayk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.31.1.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:72:32:5f:9a:5a:96:60:f4:47:c2:98:90:1a:b6:00:2b:c9:
8b:86:52:db:5d:8c:8c:28:77:ca:fd:f6:42:8c:be:97:d8:d2:
f2:50:30:53:b3:aa:0d:da:12:04:cf:75:98:dc:29:05:da:c4:
da:2d:75:0e:6f:0e:e2:07:86:a6:cb:7e:0b:b7:dc:03:1a:50:
ac:9b:78:3d:09:73:a3:d9:08:e2:dd:20:50:d8:5c:b4:92:75:
87:84:f1:43:be:f2:3d:71:7a:80:49:7e:1f:e4:a7:24:09:92:
51:62:07:50:56:5b:92:5c:9b:6a:fa:ae:1d:f1:19:ab:25:0a:
bd:e9:f4:de:dd:37:0b:5e:81:6e:98:23:9e:fd:f3:07:8f:14:
3b:c4:00:82:6a:57:b9:0d:bb:7b:55:12:93:b1:63:43:9d:bb:
f5:37:00:ab:79:95:51:ab:d2:4d:49:c8:9c:c9:bc:40:ae:b5:
d4:b2:68:48:ed:94:b0:d2:91:35:3a:6b:ab:fb:eb:21:ae:5a:
bc:9f:82:8f:01:f9:8e:93:0d:09:57:f3:4c:39:22:a1:25:28:
ba:36:6b:15:7a:a3:8f:41:f4:df:7a:b4:35:71:05:30:57:99:
7c:88:13:f5:ae:45:a5:dc:3f:63:fd:61:fc:93:8b:ed:74:02:
36:31:16:14
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZNNoc3K1y/VYD1GiHG/4X/vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNjY0MDM1N2FlNGFlMTBmYzBiM2U5ZDk4ZjJhMGNiMDEx
ODkwM2MwHhcNMjQxMTIxMDczMTA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDQ0MzZmY2U1NGZjMjQwODAyOWY3YmJlMGVmYjVkMWE1M2U2YjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6QpedosXZm+XLkFbNZeAskGX5Qu
alkWARCS+t5Qh1sc2jPy2y8SGSkQyv+3CQ3G7SubwTKQf30MQ6K6sxpIyC/ePZQJ
iSgkAi/nHZe1IlyWzB5wcjPVnTpuho2DkT/kthyL0IDZ+eCf3QaDM4WW4avwUCI1
e0f2/AqsqbSbAqgSeNQlWy+JoGJM9Akvgiaef6RMYA8xOGA4o6i8Lo7SnhnPo5dx
YCF5d51mt66mLKN2Peimtv8ZRmVDRJ3weskscmCOHQ0c+pyRLEWobUhy+PCTrp/S
ER/Lx+bW1EdxzFRBj6aINntCWuZAZO/LhxO1s1gengN930+FtxDsBt5YLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF1ENvzlT8JAgCn3u+DvtdGlPmspMB8GA1UdIwQY
MBaAFN5mQDV65K4Q/As+nZjyoMsBGJA8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM21aQU5YcmtyaEQ4Q3o2ZG1QS2d5d0VZa0R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9hZDE5YzAtMDAyNS00YzQ5LTg0ODAt
ZmY5N2Y2MmEwOTQ1LzEvWFVRMl9PVlB3a0NBS2ZlNzRPLTEwYVUtYXlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9hZDE5YzAtMDAyNS00YzQ5LTg0ODAtZmY5N2Y2MmEwOTQ1
LzEvM21aQU5YcmtyaEQ4Q3o2ZG1QS2d5d0VZa0R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2R8BMA0G
CSqGSIb3DQEBCwUAA4IBAQC3cjJfmlqWYPRHwpiQGrYAK8mLhlLbXYyMKHfK/fZC
jL6X2NLyUDBTs6oN2hIEz3WY3CkF2sTaLXUObw7iB4amy34Lt9wDGlCsm3g9CXOj
2Qji3SBQ2Fy0knWHhPFDvvI9cXqASX4f5KckCZJRYgdQVluSXJtq+q4d8RmrJQq9
6fTe3TcLXoFumCOe/fMHjxQ7xACCale5Dbt7VRKTsWNDnbv1NwCreZVRq9JNScic
ybxArrXUsmhI7ZSw0pE1Omur++shrlq8n4KPAfmOkw0JV/NMOSKhJSi6NmsVeqOP
QfTferQ1cQUwV5l8iBP1rkWl3D9j/WH8k4vtdAI2MRYU
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:17:37 2024 by rpki-client on console-ams.rpki-client.org