Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/MQNDXSkmfHjWnt9Xhqf64X1coFA.roa
File: MQNDXSkmfHjWnt9Xhqf64X1coFA.roa (raw, json)
Hash identifier: 29qxf7xnlXTo02+/a99aV8ixGv86sDOI0oUmPYsT0k0=
Subject key identifier: 31:03:43:5D:29:26:7C:78:D6:9E:DF:57:86:A7:FA:E1:7D:5C:A0:50
Certificate issuer: /CN=c50c97eb9baf5428f50f45d330357678b73e061c
Certificate serial: 018CC801E08679A038FC2472AFC7E48C76A0
Authority key identifier: C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/MQNDXSkmfHjWnt9Xhqf64X1coFA.roa
Signing time: Tue 02 Jan 2024 02:30:15 +0000
ROA not before: Tue 02 Jan 2024 02:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207203
IP address blocks: 185.190.48.0/24 maxlen: 24
185.190.49.0/24 maxlen: 24
185.190.50.0/24 maxlen: 24
2a0a:440::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:e0:86:79:a0:38:fc:24:72:af:c7:e4:8c:76:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50c97eb9baf5428f50f45d330357678b73e061c
Validity
Not Before: Jan 2 02:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3103435d29267c78d69edf5786a7fae17d5ca050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8d:eb:86:99:07:b8:e4:b9:9a:c5:71:95:ea:
71:d5:15:a2:07:c5:32:88:0d:78:b8:92:8e:8f:cf:
5e:5a:b9:cd:26:53:8a:92:86:84:c1:9d:23:cd:19:
8f:e8:f0:5e:8d:b5:05:8a:d4:80:93:a9:4b:6c:27:
75:d7:51:37:f6:07:b9:bb:5c:9b:fd:f2:b5:18:ad:
b7:cc:60:b2:6c:b1:e4:22:ee:50:ff:3a:2c:a2:29:
ec:0c:dd:79:34:fc:57:d1:d7:12:9a:17:91:cf:bf:
94:24:88:1a:b2:72:70:c4:e7:60:f2:75:5d:d0:6c:
e6:34:bc:16:ad:93:ab:6a:69:61:26:7e:a0:cb:7a:
8f:32:b1:a3:70:ff:34:6a:78:b3:ab:b6:ce:e2:8c:
41:f0:0d:f2:1e:f2:b1:e2:1a:34:ab:a3:25:e1:4a:
33:e9:eb:00:bc:13:27:0c:2b:f7:96:fb:a0:aa:e3:
4d:8a:1f:58:50:07:f0:22:58:ef:b0:b6:82:7c:50:
e2:17:1e:dc:44:a6:c3:4d:3f:10:a8:d2:4d:c5:3c:
08:12:7c:e3:05:6e:39:9c:ca:fb:9f:75:36:53:15:
a8:5d:65:5b:c2:1b:16:42:6b:16:9e:ac:09:67:a0:
dc:27:0e:89:e1:bc:67:19:3d:70:4b:21:e7:78:83:
b5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:03:43:5D:29:26:7C:78:D6:9E:DF:57:86:A7:FA:E1:7D:5C:A0:50
X509v3 Authority Key Identifier:
keyid:C5:0C:97:EB:9B:AF:54:28:F5:0F:45:D3:30:35:76:78:B7:3E:06:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQyX65uvVCj1D0XTMDV2eLc-Bhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/MQNDXSkmfHjWnt9Xhqf64X1coFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/07fed6-00b3-4cea-a74e-beeebedffc95/1/xQyX65uvVCj1D0XTMDV2eLc-Bhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.48.0-185.190.50.255
IPv6:
2a0a:440::/29
Signature Algorithm: sha256WithRSAEncryption
7b:7a:9f:a5:d2:8e:03:78:38:ec:a2:48:6e:5b:3e:70:17:57:
bd:01:df:09:c1:d1:5d:11:88:81:e2:96:ff:09:83:f7:e3:09:
44:ae:32:19:56:9b:55:31:40:b8:6f:f3:a4:ef:11:d8:97:e9:
90:35:ba:c2:90:b8:98:7a:37:9e:ab:a8:04:79:0b:46:19:39:
7e:02:75:0c:d6:a4:24:77:ac:f6:f1:31:44:c8:f1:27:7b:68:
5b:e1:e1:7c:db:6a:62:a4:44:1c:82:5d:40:a5:f5:6b:73:2d:
a8:e2:62:06:b8:bf:ae:da:8a:11:63:29:b9:fc:42:7b:af:d2:
7b:5b:3d:d1:d3:89:a8:32:50:65:f0:a0:69:ec:bd:84:00:eb:
59:d6:09:95:d0:ee:2b:e2:99:88:21:7e:ed:b0:7d:f5:99:e1:
8e:a4:2e:3f:09:6a:6a:a7:ca:96:18:9f:d4:3c:c8:79:fd:ab:
ec:20:4c:e5:af:74:82:f2:0b:eb:cc:7a:77:1a:b8:33:c5:02:
7a:b3:44:b5:5a:ac:dc:59:5d:3a:4b:57:0e:6a:42:7c:2b:60:
32:e1:f4:a0:e3:a0:ba:74:73:19:0c:b1:b7:7b:f8:63:ff:b6:
a7:f6:3a:e1:dd:8e:e0:2b:e2:91:c6:d4:5f:4e:a3:84:91:b5:
b9:ae:ca:c8
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYzIAeCGeaA4/CRyr8fkjHagMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1MGM5N2ViOWJhZjU0MjhmNTBmNDVkMzMwMzU3Njc4Yjcz
ZTA2MWMwHhcNMjQwMTAyMDIzMDE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTAzNDM1ZDI5MjY3Yzc4ZDY5ZWRmNTc4NmE3ZmFlMTdkNWNhMDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiI3rhpkHuOS5msVxlepx1RWiB8Uy
iA14uJKOj89eWrnNJlOKkoaEwZ0jzRmP6PBejbUFitSAk6lLbCd111E39ge5u1yb
/fK1GK23zGCybLHkIu5Q/zosoinsDN15NPxX0dcSmheRz7+UJIgasnJwxOdg8nVd
0GzmNLwWrZOramlhJn6gy3qPMrGjcP80anizq7bO4oxB8A3yHvKx4ho0q6Ml4Uoz
6esAvBMnDCv3lvugquNNih9YUAfwIljvsLaCfFDiFx7cRKbDTT8QqNJNxTwIEnzj
BW45nMr7n3U2UxWoXWVbwhsWQmsWnqwJZ6DcJw6J4bxnGT1wSyHneIO1iQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFDEDQ10pJnx41p7fV4an+uF9XKBQMB8GA1UdIwQY
MBaAFMUMl+ubr1Qo9Q9F0zA1dni3PgYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveFF5WDY1dXZWQ2oxRDBYVE1EVjJlTGMtQmh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8wN2ZlZDYtMDBiMy00Y2VhLWE3NGUt
YmVlZWJlZGZmYzk1LzEvTVFORFhTa21mSGpXbnQ5WGhxZjY0WDFjb0ZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8wN2ZlZDYtMDBiMy00Y2VhLWE3NGUtYmVlZWJlZGZmYzk1
LzEveFF5WDY1dXZWQ2oxRDBYVE1EVjJlTGMtQmh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAS5vjAD
BAC5vjIwDQQCAAIwBwMFAyoKBEAwDQYJKoZIhvcNAQELBQADggEBAHt6n6XSjgN4
OOyiSG5bPnAXV70B3wnB0V0RiIHilv8Jg/fjCUSuMhlWm1UxQLhv86TvEdiX6ZA1
usKQuJh6N56rqAR5C0YZOX4CdQzWpCR3rPbxMUTI8Sd7aFvh4XzbamKkRByCXUCl
9WtzLajiYga4v67aihFjKbn8Qnuv0ntbPdHTiagyUGXwoGnsvYQA61nWCZXQ7ivi
mYghfu2wffWZ4Y6kLj8JamqnypYYn9Q8yHn9q+wgTOWvdILyC+vMencauDPFAnqz
RLVarNxZXTpLVw5qQnwrYDLh9KDjoLp0cxkMsbd7+GP/tqf2OuHdjuAr4pHG1F9O
o4SRtbmuysg=
-----END CERTIFICATE-----
Generated at Sat Sep 28 16:17:02 2024 by rpki-client on console-fra.rpki-client.org