Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/Mn2xhKE-2Pb-73H7TTZXNgyrysA.roa
File: Mn2xhKE-2Pb-73H7TTZXNgyrysA.roa (raw, json)
Hash identifier: IYPvGvOP3Hl7DOEW3p83WuNgIyIRVBF5o7PxYk1KZ6Q=
Subject key identifier: 32:7D:B1:84:A1:3E:D8:F6:FE:EF:71:FB:4D:36:57:36:0C:AB:CA:C0
Certificate issuer: /CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4
Certificate serial: 018CCA9A0399D53BB379E14A6083AEDF9A4F
Authority key identifier: B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/Mn2xhKE-2Pb-73H7TTZXNgyrysA.roa
Signing time: Tue 02 Jan 2024 14:35:40 +0000
ROA not before: Tue 02 Jan 2024 14:35:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62216
IP address blocks: 95.174.80.0/21 maxlen: 21
185.144.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 19:03:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:9a:03:99:d5:3b:b3:79:e1:4a:60:83:ae:df:9a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4
Validity
Not Before: Jan 2 14:35:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=327db184a13ed8f6feef71fb4d3657360cabcac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cb:fc:65:9d:1b:74:f4:8e:ec:6c:59:30:84:
3f:39:fc:93:b6:bd:58:7f:22:f3:47:6a:9c:f0:3a:
6a:56:88:4a:8f:cc:c2:7a:48:2e:a5:33:e0:25:05:
03:d3:bd:aa:cb:99:c0:03:17:a8:e9:cf:06:b9:a6:
0a:f2:15:19:3f:76:ee:b6:58:75:1c:29:1c:c4:ba:
6a:5a:bb:90:a5:1d:a6:c7:7b:e3:be:34:67:88:3f:
db:0c:a9:df:9a:70:ec:fb:6f:cd:85:19:22:ee:85:
1a:80:85:ef:86:52:5a:6c:2b:ab:df:85:19:20:9a:
0b:32:8c:8c:04:3e:27:05:91:c2:81:c4:ee:eb:fd:
d6:cd:2b:76:c1:13:9b:ef:67:20:6f:c6:ad:97:f7:
41:1a:47:6f:b9:d8:80:b3:ff:31:3d:5d:b6:6e:fd:
9e:ca:69:ec:92:e0:a6:48:c6:74:05:a3:78:14:44:
d4:2e:7c:fa:94:d6:9d:e4:bd:9e:3b:cb:68:8e:40:
7a:06:d4:fb:f2:4f:e6:fa:61:ed:59:29:51:1b:c5:
71:b8:36:10:bd:27:62:73:63:18:9d:78:51:4d:e1:
a7:b2:b1:8b:c1:1e:e7:3d:ec:6f:f0:42:7a:8b:1e:
c2:93:00:10:2d:37:f4:e2:4d:d5:88:06:38:d7:eb:
2c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7D:B1:84:A1:3E:D8:F6:FE:EF:71:FB:4D:36:57:36:0C:AB:CA:C0
X509v3 Authority Key Identifier:
keyid:B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/Mn2xhKE-2Pb-73H7TTZXNgyrysA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.174.80.0/21
185.144.16.0/22
Signature Algorithm: sha256WithRSAEncryption
67:c4:ee:05:f0:b8:f5:2e:a8:37:c3:bb:84:02:cd:ec:e2:0e:
cd:be:b5:8f:e9:f8:24:59:36:2e:51:5b:18:76:c6:4e:f1:e0:
23:d6:5b:b1:86:78:d7:ed:17:d0:e3:82:43:7b:9d:3d:59:c9:
c5:e2:10:4c:34:e7:9f:a0:14:c6:13:73:f8:70:ab:ea:2d:aa:
cc:4e:0c:c1:6f:0e:65:ab:9e:96:b6:5c:74:17:ce:b0:f9:75:
7a:a0:b5:6a:13:81:70:f2:40:51:00:ae:cd:d0:c6:dd:b9:a9:
6f:57:36:78:31:f1:e4:60:da:e1:06:e5:34:2c:de:39:d7:86:
fb:bd:c5:99:b9:8d:ad:e6:5a:19:89:3b:07:23:ed:cb:08:6e:
6a:3e:18:eb:57:c4:1a:0e:ba:46:95:eb:73:0b:64:34:04:b9:
36:a5:f3:4a:a6:18:33:c3:18:3e:3e:ea:d2:35:1a:61:83:6b:
af:c4:d0:0b:2a:98:e3:41:6c:55:15:1f:5f:bb:aa:1c:09:06:
9b:ad:f2:a1:34:ec:f7:b7:4b:a3:20:52:25:78:80:f5:1e:01:
04:24:c5:2a:0d:3a:6f:d2:19:80:10:e7:52:2f:04:22:bd:91:
1b:06:82:e6:7c:81:2f:b5:f4:4a:63:53:13:d9:19:a4:23:1a:
11:7a:77:3f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzKmgOZ1TuzeeFKYIOu35pPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxZmZlZTdkYmY3ZjQ1NjZlYTllMzA1NDZiMmMyYTJlNzMz
NmYyZjQwHhcNMjQwMTAyMTQzNTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjdkYjE4NGExM2VkOGY2ZmVlZjcxZmI0ZDM2NTczNjBjYWJjYWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsv8ZZ0bdPSO7GxZMIQ/OfyTtr1Y
fyLzR2qc8DpqVohKj8zCekgupTPgJQUD072qy5nAAxeo6c8GuaYK8hUZP3butlh1
HCkcxLpqWruQpR2mx3vjvjRniD/bDKnfmnDs+2/NhRki7oUagIXvhlJabCur34UZ
IJoLMoyMBD4nBZHCgcTu6/3WzSt2wROb72cgb8atl/dBGkdvudiAs/8xPV22bv2e
ymnskuCmSMZ0BaN4FETULnz6lNad5L2eO8tojkB6BtT78k/m+mHtWSlRG8VxuDYQ
vSdic2MYnXhRTeGnsrGLwR7nPexv8EJ6ix7CkwAQLTf04k3ViAY41+ss3QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDJ9sYShPtj2/u9x+002VzYMq8rAMB8GA1UdIwQY
MBaAFLH/7n2/f0Vm6p4wVGssKi5zNvL0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2ZfdWZiOV9SV2JxbmpCVWF5d3FMbk0yOHZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yZmNiYjItYzNjMC00YjFlLThhZDUt
N2Y1Zjc4MzQ2ZDZmLzEvTW4yeGhLRS0yUGItNzNIN1RUWlhOZ3lyeXNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8yZmNiYjItYzNjMC00YjFlLThhZDUtN2Y1Zjc4MzQ2ZDZm
LzEvc2ZfdWZiOV9SV2JxbmpCVWF5d3FMbk0yOHZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDX65QAwQC
uZAQMA0GCSqGSIb3DQEBCwUAA4IBAQBnxO4F8Lj1Lqg3w7uEAs3s4g7NvrWP6fgk
WTYuUVsYdsZO8eAj1luxhnjX7RfQ44JDe509WcnF4hBMNOefoBTGE3P4cKvqLarM
TgzBbw5lq56Wtlx0F86w+XV6oLVqE4Fw8kBRAK7N0MbdualvVzZ4MfHkYNrhBuU0
LN4514b7vcWZuY2t5loZiTsHI+3LCG5qPhjrV8QaDrpGletzC2Q0BLk2pfNKphgz
wxg+PurSNRphg2uvxNALKpjjQWxVFR9fu6ocCQabrfKhNOz3t0ujIFIleID1HgEE
JMUqDTpv0hmAEOdSLwQivZEbBoLmfIEvtfRKY1MT2RmkIxoRenc/
-----END CERTIFICATE-----
Generated at Fri Jun 21 03:10:57 2024 by rpki-client on console-ams.rpki-client.org