Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/mYcpzNPDBX_MC14MZpRFwBuQFW0.roa
File: mYcpzNPDBX_MC14MZpRFwBuQFW0.roa (raw, json)
Hash identifier: 1IRYr7sXLXl6b6ffdA9wcVI9nCBPOO3s6yuWRC+ZNaI=
Subject key identifier: 99:87:29:CC:D3:C3:05:7F:CC:0B:5E:0C:66:94:45:C0:1B:90:15:6D
Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Certificate serial: 018CC870B30FB449825E597234CA8166EE5F
Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/mYcpzNPDBX_MC14MZpRFwBuQFW0.roa
Signing time: Tue 02 Jan 2024 04:31:18 +0000
ROA not before: Tue 02 Jan 2024 04:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198651
IP address blocks: 185.220.176.0/24 maxlen: 24
185.220.179.0/24 maxlen: 24
185.220.177.0/24 maxlen: 24
185.220.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 10:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:b3:0f:b4:49:82:5e:59:72:34:ca:81:66:ee:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Validity
Not Before: Jan 2 04:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=998729ccd3c3057fcc0b5e0c669445c01b90156d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:12:a7:78:fe:ac:28:90:25:c4:98:24:20:35:
79:40:76:0b:ec:42:1f:5f:64:a8:1c:3c:cc:af:38:
e6:12:e1:43:a4:b0:9b:5b:02:9e:da:fe:42:80:26:
5f:6b:ad:aa:84:52:a4:f8:d0:6e:af:18:6e:19:e5:
5b:c2:ef:a7:a5:4f:9d:1e:9b:7a:f1:28:7d:35:87:
a7:79:7d:c9:28:31:e2:7b:3c:09:b1:76:dc:6b:48:
e1:22:ab:9f:f9:87:b6:da:e2:79:65:11:e7:be:80:
e0:42:9e:c2:35:d4:c2:9a:1c:06:e8:fa:d4:91:ed:
5a:e5:76:ee:15:b1:93:84:c3:c8:0e:a6:39:8d:40:
16:8f:ca:b1:97:60:ee:ff:80:d7:40:84:36:2c:37:
1b:77:20:c4:91:61:14:e4:bd:de:3c:ba:04:89:1e:
83:1e:cb:10:7b:8f:51:c3:34:e5:95:aa:a5:de:0b:
41:ec:7a:42:7b:11:94:f2:be:b6:fb:50:b0:9d:55:
81:4d:e7:73:a7:d6:70:a2:7f:d0:4f:fc:df:f0:13:
eb:ac:7f:10:ff:30:d0:e9:37:b8:13:c8:33:74:dc:
10:d0:ef:5e:2f:be:95:91:d3:b2:a9:3e:e4:6c:df:
45:94:69:fa:77:37:7c:c7:d3:a5:e8:97:5f:cb:db:
f3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:87:29:CC:D3:C3:05:7F:CC:0B:5E:0C:66:94:45:C0:1B:90:15:6D
X509v3 Authority Key Identifier:
keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/mYcpzNPDBX_MC14MZpRFwBuQFW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.176.0/22
Signature Algorithm: sha256WithRSAEncryption
94:73:7a:4b:77:c6:7e:bb:1a:75:cb:e3:49:6a:77:13:9b:95:
02:79:d8:2c:1a:40:61:52:d0:b1:fb:d2:d3:81:2b:a6:9c:a9:
b9:9a:db:f4:e9:6b:d9:b9:d5:c1:f6:03:13:65:27:d0:2d:47:
4e:4f:2f:07:12:50:e9:00:53:27:2d:e2:20:7c:80:55:f6:38:
6f:b2:34:33:cd:51:27:53:e4:41:7d:41:bf:f3:33:0a:d8:27:
5f:17:d7:70:84:ab:24:42:cd:f7:e0:57:d3:8b:85:43:b7:07:
94:1f:f0:3a:f4:be:49:f4:54:c8:68:0b:e8:0a:5d:27:ad:a4:
e1:e7:57:ad:1a:50:5d:b5:8d:60:14:f0:36:e8:03:d4:a2:73:
44:13:4e:ce:83:3b:cd:e6:d7:b8:5f:ac:05:19:2f:e6:80:02:
f7:2e:9f:49:09:38:57:17:01:c0:d9:d0:98:21:8e:53:6b:32:
c7:8d:2d:5a:4a:65:ca:a1:97:6e:f2:92:c9:9f:d0:42:b3:a5:
d5:f6:57:41:6d:69:2a:8f:96:96:6c:37:d9:8f:1e:79:50:96:
65:ec:dc:72:e5:01:0f:de:6e:2a:8c:39:7b:3a:a5:7a:2e:58:
c0:97:bd:b9:54:16:7b:d7:fb:47:c0:dc:0c:f5:f6:28:7b:36:
65:41:6e:50
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIcLMPtEmCXllyNMqBZu5fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjYzQ3OGRkOWNjZDYxNjJmODI0ODhhYzZmYzUwYzIxZDM2
OWYyYTAwHhcNMjQwMTAyMDQzMTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTg3MjljY2QzYzMwNTdmY2MwYjVlMGM2Njk0NDVjMDFiOTAxNTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhKneP6sKJAlxJgkIDV5QHYL7EIf
X2SoHDzMrzjmEuFDpLCbWwKe2v5CgCZfa62qhFKk+NBurxhuGeVbwu+npU+dHpt6
8Sh9NYeneX3JKDHiezwJsXbca0jhIquf+Ye22uJ5ZRHnvoDgQp7CNdTCmhwG6PrU
ke1a5XbuFbGThMPIDqY5jUAWj8qxl2Du/4DXQIQ2LDcbdyDEkWEU5L3ePLoEiR6D
HssQe49RwzTllaql3gtB7HpCexGU8r62+1CwnVWBTedzp9Zwon/QT/zf8BPrrH8Q
/zDQ6Te4E8gzdNwQ0O9eL76VkdOyqT7kbN9FlGn6dzd8x9Ol6Jdfy9vz9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJmHKczTwwV/zAteDGaURcAbkBVtMB8GA1UdIwQY
MBaAFMzEeN2czWFi+CSIrG/FDCHTafKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUt
NDI4NTk5ODM5MmQzLzEvbVljcHpOUERCWF9NQzE0TVpwUkZ3QnVRRlcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUtNDI4NTk5ODM5MmQz
LzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudywMA0G
CSqGSIb3DQEBCwUAA4IBAQCUc3pLd8Z+uxp1y+NJancTm5UCedgsGkBhUtCx+9LT
gSumnKm5mtv06WvZudXB9gMTZSfQLUdOTy8HElDpAFMnLeIgfIBV9jhvsjQzzVEn
U+RBfUG/8zMK2CdfF9dwhKskQs334FfTi4VDtweUH/A69L5J9FTIaAvoCl0nraTh
51etGlBdtY1gFPA26APUonNEE07OgzvN5te4X6wFGS/mgAL3Lp9JCThXFwHA2dCY
IY5TazLHjS1aSmXKoZdu8pLJn9BCs6XV9ldBbWkqj5aWbDfZjx55UJZl7Nxy5QEP
3m4qjDl7OqV6LljAl725VBZ71/tHwNwM9fYoezZlQW5Q
-----END CERTIFICATE-----
Generated at Sat Apr 27 15:56:36 2024 by rpki-client on console-ams.rpki-client.org