Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/MnVEpKYMu71h9uayNXUfWfpb76Q.roa
File: MnVEpKYMu71h9uayNXUfWfpb76Q.roa (raw, json)
Hash identifier: lE3IvmjM6nX1Tnm0DtJKTXMv5Eyw0LXlZLWdnj8wvhM=
Subject key identifier: 32:75:44:A4:A6:0C:BB:BD:61:F6:E6:B2:35:75:1F:59:FA:5B:EF:A4
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018CC5011A76A414BA810D6EFFE172504228
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/MnVEpKYMu71h9uayNXUfWfpb76Q.roa
Signing time: Mon 01 Jan 2024 12:30:32 +0000
ROA not before: Mon 01 Jan 2024 12:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198513
IP address blocks: 185.227.81.0/24 maxlen: 24
194.146.45.0/24 maxlen: 24
2a0b:3c40:13::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:1a:76:a4:14:ba:81:0d:6e:ff:e1:72:50:42:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 1 12:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=327544a4a60cbbbd61f6e6b235751f59fa5befa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c6:a2:a8:e5:eb:20:ff:8e:3e:4f:09:6a:87:
5b:a5:91:1e:99:90:8d:ac:4e:b1:b6:ea:4d:18:78:
31:97:5d:c7:c6:8d:16:dd:77:af:b4:61:1b:35:74:
50:73:ea:44:ed:4e:af:86:85:6b:a5:30:a9:22:00:
5d:8d:f5:4d:30:78:56:5b:a4:8e:f4:43:d4:1b:4f:
33:ec:b1:6f:09:a8:ec:dc:0f:1d:a9:3a:22:0a:06:
ff:45:6c:e4:cb:bb:58:33:19:a4:bd:a2:fd:6f:d7:
a3:ad:d9:c3:28:be:3b:2c:5c:52:2e:a8:24:d1:a0:
17:c0:c7:e0:10:51:77:5d:6e:7b:3c:27:ae:13:10:
42:82:62:41:21:59:10:aa:ba:63:4f:e0:7f:25:5e:
e5:da:35:9a:d4:ea:d8:e8:8b:d7:7d:d0:75:7e:e8:
2e:68:7c:bb:31:f4:a5:79:77:04:be:ef:f3:19:74:
c0:a4:b1:b8:bc:82:23:c0:2d:a5:a0:7e:5d:fc:9a:
d2:c4:e2:4f:94:e6:f8:f4:96:79:02:c7:c4:44:a0:
38:6d:b3:a2:52:f0:24:b4:e2:06:fd:95:dc:97:9d:
09:85:6a:d6:31:e0:c8:e2:12:1e:a8:a0:83:3b:00:
39:b3:49:a9:a7:86:70:5b:c6:74:8a:fa:e1:67:31:
41:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:75:44:A4:A6:0C:BB:BD:61:F6:E6:B2:35:75:1F:59:FA:5B:EF:A4
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/MnVEpKYMu71h9uayNXUfWfpb76Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.81.0/24
194.146.45.0/24
IPv6:
2a0b:3c40:13::/48
Signature Algorithm: sha256WithRSAEncryption
94:29:17:e8:17:30:c6:aa:60:29:be:29:85:7a:d6:33:76:ef:
b0:60:37:a5:83:fa:ef:bd:30:31:37:14:f3:b4:dc:2f:0a:46:
ee:54:22:d3:62:62:03:82:48:a1:f4:1d:85:f1:6a:0c:4b:85:
23:6d:61:28:e6:88:5d:67:25:66:76:8e:35:47:c8:d6:68:85:
3c:fb:78:02:88:db:de:65:44:f3:bc:1a:bd:ae:51:97:59:4b:
8f:81:98:2f:11:26:63:b0:ed:88:f2:be:d0:9c:3c:b0:a1:4b:
16:50:8c:60:4b:54:c1:53:18:06:19:4e:86:d3:8a:3d:8f:d6:
1d:8f:89:b8:1c:bb:76:76:c5:04:74:3a:e0:88:4e:b9:89:0d:
12:6f:42:c2:25:10:e0:20:cf:31:80:89:5e:6d:15:47:eb:0d:
20:ad:7e:e3:16:e7:a5:20:50:a8:aa:f3:1c:1e:69:37:a5:09:
07:05:a5:ca:07:4c:71:ef:17:01:ea:9c:8e:1f:f1:12:ad:ba:
aa:f0:b5:54:1b:45:bf:d2:25:84:2e:47:47:81:bf:0b:4e:6b:
04:59:f3:ce:21:f8:74:7a:24:99:0d:b4:cc:f1:2f:0c:88:de:
e5:35:4c:04:a1:2b:82:0d:c7:42:9f:ab:c4:d6:38:bd:17:01:
bd:08:cd:fc
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYzFARp2pBS6gQ1u/+FyUEIoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw
MTRiOGQwHhcNMjQwMTAxMTIzMDMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjc1NDRhNGE2MGNiYmJkNjFmNmU2YjIzNTc1MWY1OWZhNWJlZmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8aiqOXrIP+OPk8JaodbpZEemZCN
rE6xtupNGHgxl13Hxo0W3XevtGEbNXRQc+pE7U6vhoVrpTCpIgBdjfVNMHhWW6SO
9EPUG08z7LFvCajs3A8dqToiCgb/RWzky7tYMxmkvaL9b9ejrdnDKL47LFxSLqgk
0aAXwMfgEFF3XW57PCeuExBCgmJBIVkQqrpjT+B/JV7l2jWa1OrY6IvXfdB1fugu
aHy7MfSleXcEvu/zGXTApLG4vIIjwC2loH5d/JrSxOJPlOb49JZ5AsfERKA4bbOi
UvAktOIG/ZXcl50JhWrWMeDI4hIeqKCDOwA5s0mpp4ZwW8Z0ivrhZzFBUwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFDJ1RKSmDLu9YfbmsjV1H1n6W++kMB8GA1UdIwQY
MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt
NmJjNzU1NzhiNGMzLzEvTW5WRXBLWU11NzFoOXVheU5YVWZXZnBiNzZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz
LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAueNRAwQA
wpItMA8EAgACMAkDBwAqCzxAABMwDQYJKoZIhvcNAQELBQADggEBAJQpF+gXMMaq
YCm+KYV61jN277BgN6WD+u+9MDE3FPO03C8KRu5UItNiYgOCSKH0HYXxagxLhSNt
YSjmiF1nJWZ2jjVHyNZohTz7eAKI295lRPO8Gr2uUZdZS4+BmC8RJmOw7YjyvtCc
PLChSxZQjGBLVMFTGAYZTobTij2P1h2Pibgcu3Z2xQR0OuCITrmJDRJvQsIlEOAg
zzGAiV5tFUfrDSCtfuMW56UgUKiq8xweaTelCQcFpcoHTHHvFwHqnI4f8RKtuqrw
tVQbRb/SJYQuR0eBvwtOawRZ884h+HR6JJkNtMzxLwyI3uU1TAShK4INx0Kfq8TW
OL0XAb0Izfw=
-----END CERTIFICATE-----
Generated at Fri May 3 01:05:35 2024 by rpki-client on console-ams.rpki-client.org