Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mWBwVn2JiaWGULFYrYbywI57mCw.roa
File: mWBwVn2JiaWGULFYrYbywI57mCw.roa (raw, json)
Hash identifier: DKm0Le4E2p/L5h/LlowYtLjMoH5VuXgEiRBM8pme1a0=
Subject key identifier: 99:60:70:56:7D:89:89:A5:86:50:B1:58:AD:86:F2:C0:8E:7B:98:2C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019178BE4EA7956B917055C775E3BD2D6F75
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mWBwVn2JiaWGULFYrYbywI57mCw.roa
Signing time: Thu 22 Aug 2024 06:20:23 +0000
ROA not before: Thu 22 Aug 2024 06:20:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213035
IP address blocks: 87.121.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:78:be:4e:a7:95:6b:91:70:55:c7:75:e3:bd:2d:6f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 22 06:20:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=996070567d8989a58650b158ad86f2c08e7b982c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fb:2e:48:53:72:61:89:7b:11:7b:f7:81:76:
d4:e7:d9:1b:ab:41:16:30:c1:1c:98:67:92:00:d5:
ac:dc:16:af:28:4c:bf:e6:9c:8e:40:fd:20:d7:c2:
fc:29:e2:b6:7b:6f:05:2d:8a:0c:79:14:94:77:76:
9f:19:71:48:da:92:99:74:cc:02:86:7f:4b:8c:c2:
97:10:e0:89:31:31:d6:e8:d0:9e:93:dd:8a:3b:d7:
74:f1:66:df:42:b4:e2:03:d2:79:5d:6a:15:85:51:
7e:54:ca:ad:86:14:d2:bf:6f:e9:09:a8:fd:01:25:
65:4c:ff:e4:be:fa:5e:9c:18:89:84:49:b7:ee:a4:
96:95:51:4b:15:ee:4d:1a:e4:58:c8:cc:10:5a:7a:
29:29:4c:04:69:3f:1f:88:5a:bf:98:35:08:0f:2c:
5d:ab:aa:ad:da:7e:a3:47:b6:55:3f:e0:4d:7e:a0:
dd:44:a5:01:15:60:20:91:7d:f6:38:62:fd:51:74:
a5:8b:ef:dc:ac:54:7e:11:51:27:97:88:37:b9:6e:
cb:e3:48:75:e7:2c:ac:0b:0c:39:c6:4f:9c:5c:58:
ff:d9:67:4e:74:25:1a:f6:9e:31:6b:49:00:7d:a1:
65:e4:c7:b2:da:d4:c1:0e:c3:be:a1:57:5f:0e:2f:
da:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:60:70:56:7D:89:89:A5:86:50:B1:58:AD:86:F2:C0:8E:7B:98:2C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mWBwVn2JiaWGULFYrYbywI57mCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.69.0/24
Signature Algorithm: sha256WithRSAEncryption
66:10:93:36:7e:13:a7:e1:59:d3:f9:26:6d:7d:35:f0:86:79:
44:30:2e:31:b8:df:43:a2:26:56:f1:4c:58:60:27:d2:fe:5f:
65:2a:50:2f:f0:a6:ac:fc:56:fa:dc:34:d7:c3:36:17:89:45:
ce:a4:2d:6c:99:e7:dd:88:9c:f4:bb:45:71:cc:53:c9:96:a2:
f8:dc:45:2c:b0:f8:33:30:23:c5:55:04:c0:41:aa:1d:e8:7d:
ad:08:db:7a:8a:b7:06:8c:d2:b6:03:c3:c1:38:ee:86:e6:be:
57:5a:6c:40:9d:99:6d:7a:0a:8b:c2:00:27:de:b8:b6:c8:77:
54:2e:4b:36:af:9d:1b:a8:8b:51:8f:13:ff:3a:f8:a6:b4:b0:
e6:68:a9:fe:1a:96:bd:bc:ce:4e:53:17:82:78:6c:54:03:72:
72:ed:01:6a:91:24:90:f3:f8:ce:cf:bc:d1:70:e3:6b:b8:32:
73:9c:f1:b9:92:60:5c:29:7a:7e:c1:34:4a:53:9f:62:71:76:
4b:c1:b3:c4:9e:1d:49:64:cd:b8:d8:22:8c:13:e2:7d:39:ca:
e4:08:b1:fa:72:dd:e4:25:f5:c2:f8:37:d4:bb:ef:7d:de:78:
f4:3c:a8:0e:97:63:86:c3:c9:1c:6d:2e:63:04:47:a3:73:91:
f9:9f:a3:1d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZF4vk6nlWuRcFXHdeO9LW91MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwODIyMDYyMDIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTYwNzA1NjdkODk4OWE1ODY1MGIxNThhZDg2ZjJjMDhlN2I5ODJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPsuSFNyYYl7EXv3gXbU59kbq0EW
MMEcmGeSANWs3BavKEy/5pyOQP0g18L8KeK2e28FLYoMeRSUd3afGXFI2pKZdMwC
hn9LjMKXEOCJMTHW6NCek92KO9d08WbfQrTiA9J5XWoVhVF+VMqthhTSv2/pCaj9
ASVlTP/kvvpenBiJhEm37qSWlVFLFe5NGuRYyMwQWnopKUwEaT8fiFq/mDUIDyxd
q6qt2n6jR7ZVP+BNfqDdRKUBFWAgkX32OGL9UXSli+/crFR+EVEnl4g3uW7L40h1
5yysCww5xk+cXFj/2WdOdCUa9p4xa0kAfaFl5Mey2tTBDsO+oVdfDi/aJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJlgcFZ9iYmlhlCxWK2G8sCOe5gsMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvbVdCd1ZuMkppYVdHVUxGWXJZYnl3STU3bUN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3lFMA0G
CSqGSIb3DQEBCwUAA4IBAQBmEJM2fhOn4VnT+SZtfTXwhnlEMC4xuN9DoiZW8UxY
YCfS/l9lKlAv8Kas/Fb63DTXwzYXiUXOpC1smefdiJz0u0VxzFPJlqL43EUssPgz
MCPFVQTAQaod6H2tCNt6ircGjNK2A8PBOO6G5r5XWmxAnZltegqLwgAn3ri2yHdU
Lks2r50bqItRjxP/OvimtLDmaKn+Gpa9vM5OUxeCeGxUA3Jy7QFqkSSQ8/jOz7zR
cONruDJznPG5kmBcKXp+wTRKU59icXZLwbPEnh1JZM242CKME+J9OcrkCLH6ct3k
JfXC+DfUu+993nj0PKgOl2OGw8kcbS5jBEejc5H5n6Md
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:38:24 2024 by rpki-client on console-fra.rpki-client.org