Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/Mh6iRhOOzPLBEHKvTg2WIigrrAo.roa
File: Mh6iRhOOzPLBEHKvTg2WIigrrAo.roa (raw, json)
Hash identifier: FlYsQy3FJRkh7+3H12hBdljAcej+kwZPcIjQjnX8cRE=
Subject key identifier: 32:1E:A2:46:13:8E:CC:F2:C1:10:72:AF:4E:0D:96:22:28:2B:AC:0A
Certificate issuer: /CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Certificate serial: 01927C6B20584573ECF3D311C87ABE87B7B4
Authority key identifier: 2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/Mh6iRhOOzPLBEHKvTg2WIigrrAo.roa
Signing time: Fri 11 Oct 2024 16:30:48 +0000
ROA not before: Fri 11 Oct 2024 16:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14080
IP address blocks: 185.107.198.0/24 maxlen: 24
2a06:45c1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7c:6b:20:58:45:73:ec:f3:d3:11:c8:7a:be:87:b7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Validity
Not Before: Oct 11 16:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=321ea246138eccf2c11072af4e0d9622282bac0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fc:fd:e5:43:d2:bf:3b:27:0a:15:3e:de:29:
3f:fe:91:0b:47:cc:35:16:31:38:0d:47:f6:1c:ba:
0d:48:de:40:3f:96:40:3a:aa:84:f0:7c:1d:72:44:
8a:ce:d6:24:23:8b:06:bd:a8:5a:19:49:f6:b8:4a:
25:df:4b:bd:b5:49:53:73:ba:4f:ef:e0:bd:99:9f:
d2:99:bb:aa:20:4b:03:76:32:7c:0d:5a:1e:ea:17:
e0:06:c6:fc:25:ce:be:b3:89:f5:f8:2f:83:e0:29:
7a:eb:a9:87:79:e8:e3:26:53:dc:1f:5b:4b:95:de:
6c:1e:30:cf:01:0b:a9:b0:8a:20:ed:38:df:cb:4a:
f8:27:14:93:b2:6e:c7:07:7d:a0:91:fb:e9:a2:76:
d5:2a:49:c4:65:6e:3d:d4:ac:1b:1b:94:50:37:08:
4b:3c:2d:f3:db:56:3a:76:cd:d3:4e:3c:3c:b8:2e:
bb:9b:da:96:cb:9d:58:dd:f6:73:b9:ba:9f:77:ce:
df:4e:e2:20:24:37:de:6f:96:83:31:14:87:be:21:
64:c6:97:74:63:28:b8:e5:56:de:de:c7:59:f6:9c:
e9:68:09:45:60:d0:0a:94:3c:11:33:0a:5b:e3:ed:
f6:f7:8e:cd:dd:b1:4f:14:56:6f:24:7f:63:77:f3:
d0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1E:A2:46:13:8E:CC:F2:C1:10:72:AF:4E:0D:96:22:28:2B:AC:0A
X509v3 Authority Key Identifier:
keyid:2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/Mh6iRhOOzPLBEHKvTg2WIigrrAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.198.0/24
IPv6:
2a06:45c1::/32
Signature Algorithm: sha256WithRSAEncryption
5c:21:09:0b:04:b5:e4:09:90:e5:61:8d:e4:c3:d3:10:f5:68:
3a:82:ff:fd:4a:7d:4e:5f:94:29:ea:83:a9:d0:fa:5b:ec:f0:
e4:b7:a1:f0:0a:50:61:95:53:de:09:81:ae:66:e5:43:12:51:
78:ea:ee:ec:a0:88:2c:3c:ef:d4:5f:57:0e:ab:ab:bf:f8:ab:
dc:56:85:9a:ea:8d:f0:5c:53:7c:3d:43:4a:36:66:0c:32:82:
61:8e:50:86:d0:11:30:9d:82:bb:d3:62:d5:45:15:59:3f:97:
d1:c2:34:4a:5a:fa:c4:25:b4:fd:4e:b7:05:ad:f1:a6:83:8d:
8a:3c:02:c6:77:1f:87:a7:40:4f:8e:ab:be:52:0b:1f:e2:0c:
14:02:f5:09:11:93:22:b3:ae:80:02:71:58:29:be:9b:12:1d:
16:a4:05:4d:df:52:41:64:68:8f:85:01:a4:93:45:0f:90:84:
65:30:5f:e1:b7:23:fc:17:63:54:cf:58:f1:39:b6:3a:14:7a:
1c:d1:89:3c:44:a8:0b:cb:c3:9c:d2:92:6f:c8:ae:8d:a2:06:
ea:68:29:28:c7:9d:52:48:33:04:c4:b1:38:0c:15:a6:94:04:
91:9a:d4:a0:04:8b:4e:40:9c:d9:e0:70:f5:85:6f:a4:68:19:
b5:fb:40:f2
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZJ8ayBYRXPs89MRyHq+h7e0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMjM3YzVhZmZlOTM1NDNhZTJmZTZlMWZmZWQxODIzOTZl
YjliYjMwHhcNMjQxMDExMTYzMDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjFlYTI0NjEzOGVjY2YyYzExMDcyYWY0ZTBkOTYyMjI4MmJhYzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvz95UPSvzsnChU+3ik//pELR8w1
FjE4DUf2HLoNSN5AP5ZAOqqE8HwdckSKztYkI4sGvahaGUn2uEol30u9tUlTc7pP
7+C9mZ/SmbuqIEsDdjJ8DVoe6hfgBsb8Jc6+s4n1+C+D4Cl666mHeejjJlPcH1tL
ld5sHjDPAQupsIog7Tjfy0r4JxSTsm7HB32gkfvponbVKknEZW491KwbG5RQNwhL
PC3z21Y6ds3TTjw8uC67m9qWy51Y3fZzubqfd87fTuIgJDfeb5aDMRSHviFkxpd0
Yyi45Vbe3sdZ9pzpaAlFYNAKlDwRMwpb4+32947N3bFPFFZvJH9jd/PQeQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFDIeokYTjszywRByr04NliIoK6wKMB8GA1UdIwQY
MBaAFCsjfFr/6TVDri/m4f/tGCOW65uzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3lOOFd2X3BOVU91TC1iaF8tMFlJNWJybTdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi82NGEwNTMtMjZmZi00OGE2LWFlZGEt
MTQ3MDJhNGQyNjYwLzEvTWg2aVJoT096UExCRUhLdlRnMldJaWdyckFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi82NGEwNTMtMjZmZi00OGE2LWFlZGEtMTQ3MDJhNGQyNjYw
LzEvS3lOOFd2X3BOVU91TC1iaF8tMFlJNWJybTdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuWvGMA0E
AgACMAcDBQAqBkXBMA0GCSqGSIb3DQEBCwUAA4IBAQBcIQkLBLXkCZDlYY3kw9MQ
9Wg6gv/9Sn1OX5Qp6oOp0Ppb7PDkt6HwClBhlVPeCYGuZuVDElF46u7soIgsPO/U
X1cOq6u/+KvcVoWa6o3wXFN8PUNKNmYMMoJhjlCG0BEwnYK702LVRRVZP5fRwjRK
WvrEJbT9TrcFrfGmg42KPALGdx+Hp0BPjqu+Ugsf4gwUAvUJEZMis66AAnFYKb6b
Eh0WpAVN31JBZGiPhQGkk0UPkIRlMF/htyP8F2NUz1jxObY6FHoc0Yk8RKgLy8Oc
0pJvyK6NogbqaCkox51SSDMExLE4DBWmlASRmtSgBItOQJzZ4HD1hW+kaBm1+0Dy
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:26:06 2024 by rpki-client on console-fra.rpki-client.org