Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/MnTQatX3Z5f1YTUexVg6Tp3Jgek.roa
File: MnTQatX3Z5f1YTUexVg6Tp3Jgek.roa (raw, json)
Hash identifier: nUAyt/otSI+mM+CXJtWBSCfPZxXPUw8iK6ivErF6HPU=
Subject key identifier: 32:74:D0:6A:D5:F7:67:97:F5:61:35:1E:C5:58:3A:4E:9D:C9:81:E9
Certificate issuer: /CN=2d43689a7638ff737591ff3b251918862349695c
Certificate serial: 018CC42547D88B200FBC8595FC0F07D29444
Authority key identifier: 2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/MnTQatX3Z5f1YTUexVg6Tp3Jgek.roa
Signing time: Mon 01 Jan 2024 08:30:26 +0000
ROA not before: Mon 01 Jan 2024 08:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 185.152.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:47:d8:8b:20:0f:bc:85:95:fc:0f:07:d2:94:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d43689a7638ff737591ff3b251918862349695c
Validity
Not Before: Jan 1 08:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3274d06ad5f76797f561351ec5583a4e9dc981e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:43:8e:df:3c:00:57:fd:b9:b7:38:b2:d0:d0:
61:b5:37:1e:b0:d2:e9:73:36:d0:af:e6:ff:44:7a:
75:cf:80:67:69:f1:30:ff:7f:13:f8:c6:58:d7:a9:
6a:1f:f4:1c:50:b5:55:e1:ba:fb:3d:17:f2:08:b8:
11:1f:d5:c9:6e:d7:a6:67:b6:51:fb:e2:f3:28:6d:
1c:58:05:26:c5:9f:24:83:9c:af:fa:d8:a1:3f:95:
f3:e2:e1:bc:52:81:ba:66:04:9b:44:d5:b9:18:67:
be:20:d1:07:fd:13:72:ff:28:17:3a:62:c1:09:6b:
10:83:a6:fc:7c:ce:a8:86:1e:88:21:ae:f1:c8:dc:
24:0a:d9:37:7f:76:ff:08:b1:e7:ae:9f:01:4d:95:
6f:96:b9:a7:c7:f0:89:62:09:b4:f7:59:04:50:80:
1b:07:d2:4a:1c:0c:da:0a:d9:de:66:14:67:b8:fa:
0c:4e:d5:91:ad:f6:34:11:4e:2c:85:1e:2f:a0:22:
ef:e3:24:b8:7f:0d:5b:de:b4:0e:2c:52:fe:b9:e7:
95:81:5e:0f:b3:24:3e:f7:96:5f:f3:a3:10:c0:13:
79:77:a1:da:ee:52:f7:93:1a:a2:5a:76:cd:78:cb:
9c:65:f4:d9:ea:1f:4e:7e:55:ca:84:1a:d6:73:08:
5a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:74:D0:6A:D5:F7:67:97:F5:61:35:1E:C5:58:3A:4E:9D:C9:81:E9
X509v3 Authority Key Identifier:
keyid:2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/MnTQatX3Z5f1YTUexVg6Tp3Jgek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.215.0/24
Signature Algorithm: sha256WithRSAEncryption
77:cc:d9:ba:f4:1d:83:49:15:cd:e7:cb:18:88:b3:cb:78:1b:
03:13:89:0c:96:9a:3c:71:67:ae:2f:46:26:5e:a4:81:cb:24:
2b:c4:96:51:2b:27:64:39:98:f1:0e:23:df:41:aa:f8:e9:ea:
64:40:c1:bb:96:c0:e0:1d:9c:a0:0e:c3:6c:4f:6a:6e:36:be:
0b:58:3b:ea:0a:55:30:06:24:89:d4:a2:54:f8:bb:ac:83:fa:
09:42:a5:d3:9c:ac:56:bf:e2:5d:92:f3:c2:13:93:8a:5e:fa:
2f:e7:80:ed:e6:fa:f5:78:d3:ad:77:7f:5e:31:bb:ba:7b:dc:
59:ea:79:2d:5c:97:72:74:57:c0:33:fe:83:aa:3d:da:46:49:
b2:79:43:be:de:5d:11:d4:4c:e6:bf:de:1a:af:d5:20:d0:bc:
80:dd:19:7e:df:04:4a:c6:35:91:27:8c:56:b0:b8:f3:ad:fd:
b6:96:06:43:63:4f:5e:c1:db:0a:8e:df:ab:00:ce:3a:a3:57:
3e:e7:10:01:87:1c:98:e1:82:af:be:8d:af:00:72:ad:08:c7:
96:ea:77:50:4d:e7:4c:f8:f7:5e:8b:67:4a:2a:34:32:c3:4c:
eb:51:0a:28:7c:d7:f4:1e:c8:33:57:a5:f5:b4:a0:9b:91:14:
ac:a3:41:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEJUfYiyAPvIWV/A8H0pREMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkNDM2ODlhNzYzOGZmNzM3NTkxZmYzYjI1MTkxODg2MjM0
OTY5NWMwHhcNMjQwMTAxMDgzMDI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjc0ZDA2YWQ1Zjc2Nzk3ZjU2MTM1MWVjNTU4M2E0ZTlkYzk4MWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8UOO3zwAV/25tziy0NBhtTcesNLp
czbQr+b/RHp1z4BnafEw/38T+MZY16lqH/QcULVV4br7PRfyCLgRH9XJbtemZ7ZR
++LzKG0cWAUmxZ8kg5yv+tihP5Xz4uG8UoG6ZgSbRNW5GGe+INEH/RNy/ygXOmLB
CWsQg6b8fM6ohh6IIa7xyNwkCtk3f3b/CLHnrp8BTZVvlrmnx/CJYgm091kEUIAb
B9JKHAzaCtneZhRnuPoMTtWRrfY0EU4shR4voCLv4yS4fw1b3rQOLFL+ueeVgV4P
syQ+95Zf86MQwBN5d6Ha7lL3kxqiWnbNeMucZfTZ6h9OflXKhBrWcwhajQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDJ00GrV92eX9WE1HsVYOk6dyYHpMB8GA1UdIwQY
MBaAFC1DaJp2OP9zdZH/OyUZGIYjSWlcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFVOb21uWTRfM04xa2Y4N0pSa1loaU5KYVZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83ZGIzYjMtMmY4YS00N2M3LWJiOGMt
M2EzMDM0YTM5ZWE1LzEvTW5UUWF0WDNaNWYxWVRVZXhWZzZUcDNKZ2VrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS83ZGIzYjMtMmY4YS00N2M3LWJiOGMtM2EzMDM0YTM5ZWE1
LzEvTFVOb21uWTRfM04xa2Y4N0pSa1loaU5KYVZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZjXMA0G
CSqGSIb3DQEBCwUAA4IBAQB3zNm69B2DSRXN58sYiLPLeBsDE4kMlpo8cWeuL0Ym
XqSByyQrxJZRKydkOZjxDiPfQar46epkQMG7lsDgHZygDsNsT2puNr4LWDvqClUw
BiSJ1KJU+Lusg/oJQqXTnKxWv+JdkvPCE5OKXvov54Dt5vr1eNOtd39eMbu6e9xZ
6nktXJdydFfAM/6Dqj3aRkmyeUO+3l0R1Ezmv94ar9Ug0LyA3Rl+3wRKxjWRJ4xW
sLjzrf22lgZDY09ewdsKjt+rAM46o1c+5xABhxyY4YKvvo2vAHKtCMeW6ndQTedM
+Pdei2dKKjQyw0zrUQoofNf0HsgzV6X1tKCbkRSso0Gk
-----END CERTIFICATE-----
Generated at Sat May 4 13:44:08 2024 by rpki-client on console-fra.rpki-client.org