Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/mhoGBAh_vp3bLleS0yUoEDwBxtQ.roa
File: mhoGBAh_vp3bLleS0yUoEDwBxtQ.roa (raw, json)
Hash identifier: dzaTv+46jF+8NfV4OnmdVqmMz7rKpL0qgsQyX+YYJQQ=
Subject key identifier: 9A:1A:06:04:08:7F:BE:9D:DB:2E:57:92:D3:25:28:10:3C:01:C6:D4
Certificate issuer: /CN=85db83a8365a604476f282d24d327ad1ef0fde52
Certificate serial: 018CC7935A26EE76D24F510F1E55CEDEDA3A
Authority key identifier: 85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/mhoGBAh_vp3bLleS0yUoEDwBxtQ.roa
Signing time: Tue 02 Jan 2024 00:29:32 +0000
ROA not before: Tue 02 Jan 2024 00:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44187
IP address blocks: 46.226.232.0/22 maxlen: 24
87.237.24.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:5a:26:ee:76:d2:4f:51:0f:1e:55:ce:de:da:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85db83a8365a604476f282d24d327ad1ef0fde52
Validity
Not Before: Jan 2 00:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a1a0604087fbe9ddb2e5792d32528103c01c6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fb:27:4d:8f:1a:0f:52:12:c1:98:76:05:20:
81:2a:c4:1c:b4:06:46:05:3f:fe:df:d4:ce:78:4e:
74:02:29:3c:e7:56:f1:b9:47:0c:af:d7:c0:66:b1:
c4:7b:e6:b0:de:f3:13:57:0c:a5:bc:cb:87:37:25:
8e:91:6c:3f:2b:d7:90:2b:5d:44:44:02:3a:ed:8a:
d6:70:7a:fb:ac:08:70:99:84:11:cd:7b:de:5d:4d:
f6:59:93:a9:b1:2b:09:ab:90:65:bd:9a:a6:8b:64:
53:e2:50:f3:d3:ab:ec:f7:49:19:df:eb:76:94:bb:
70:6d:fa:71:b1:a2:4e:23:cd:b4:2c:1b:31:8b:ef:
4b:29:db:25:27:59:54:9f:c9:e5:ea:a5:74:c0:77:
04:f3:0a:33:1e:90:f9:10:b9:21:f1:d0:3c:85:d6:
5e:4e:59:71:bb:67:03:66:64:3c:90:25:16:c5:b9:
b0:97:c4:e0:1b:68:27:17:d0:98:cb:2a:42:89:7d:
7f:7d:68:df:8e:68:3b:54:f2:f8:a7:7d:ec:11:73:
27:79:3c:9f:ab:52:9b:90:7c:25:61:fe:8b:c7:60:
fe:6f:3c:61:b6:89:41:00:30:36:9c:5e:88:18:a6:
6a:b3:b7:d8:e8:99:98:a6:0b:60:d8:3c:70:df:17:
3e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1A:06:04:08:7F:BE:9D:DB:2E:57:92:D3:25:28:10:3C:01:C6:D4
X509v3 Authority Key Identifier:
keyid:85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/mhoGBAh_vp3bLleS0yUoEDwBxtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.232.0/22
87.237.24.0/21
Signature Algorithm: sha256WithRSAEncryption
66:30:4c:f4:5c:e4:4f:d0:11:e7:6c:77:e7:c1:a6:ae:e9:7e:
25:2c:56:42:26:43:e7:6a:dc:1d:99:1c:e0:74:8a:e5:1b:ef:
b8:27:54:6f:bb:8b:b1:44:02:88:35:cb:fa:1a:7f:f1:32:7a:
a7:bc:b7:72:aa:0d:71:0a:62:3b:c7:1e:62:8c:0d:bb:a8:cf:
ad:a4:97:c4:47:1c:d3:99:a0:77:8c:da:f2:86:6d:a1:82:32:
7f:eb:67:0a:b6:9a:0f:1f:d0:93:00:c8:b6:01:e7:10:be:12:
c9:af:f8:1b:34:ce:9e:35:94:b7:49:89:74:78:74:8d:28:fd:
81:c8:68:7f:92:00:c6:20:e7:2d:ec:4b:74:5f:36:61:ea:11:
65:80:65:f2:76:a3:e4:36:fb:a1:70:5f:4f:83:4d:34:38:af:
67:a8:9d:b4:ab:08:a0:ff:6e:02:d5:1f:8b:56:7e:62:3a:76:
43:7d:db:f7:89:d9:15:fe:e0:c9:a1:83:10:8b:cc:6d:ef:0a:
57:64:3f:95:4f:fb:ee:c6:11:c7:61:77:42:0c:03:7c:6a:ff:
6b:7d:a1:20:85:83:3d:aa:e4:a9:20:9d:a3:7a:5d:5c:32:9c:
2f:44:38:e0:a2:35:e5:23:ca:14:23:5a:da:6b:18:37:8d:da:
bf:b7:96:db
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzHk1om7nbST1EPHlXO3to6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1ZGI4M2E4MzY1YTYwNDQ3NmYyODJkMjRkMzI3YWQxZWYw
ZmRlNTIwHhcNMjQwMTAyMDAyOTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTFhMDYwNDA4N2ZiZTlkZGIyZTU3OTJkMzI1MjgxMDNjMDFjNmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfsnTY8aD1ISwZh2BSCBKsQctAZG
BT/+39TOeE50Aik851bxuUcMr9fAZrHEe+aw3vMTVwylvMuHNyWOkWw/K9eQK11E
RAI67YrWcHr7rAhwmYQRzXveXU32WZOpsSsJq5BlvZqmi2RT4lDz06vs90kZ3+t2
lLtwbfpxsaJOI820LBsxi+9LKdslJ1lUn8nl6qV0wHcE8wozHpD5ELkh8dA8hdZe
Tllxu2cDZmQ8kCUWxbmwl8TgG2gnF9CYyypCiX1/fWjfjmg7VPL4p33sEXMneTyf
q1KbkHwlYf6Lx2D+bzxhtolBADA2nF6IGKZqs7fY6JmYpgtg2Dxw3xc+IQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJoaBgQIf76d2y5XktMlKBA8AcbUMB8GA1UdIwQY
MBaAFIXbg6g2WmBEdvKC0k0yetHvD95SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGR1RHFEWmFZRVIyOG9MU1RUSjYwZThQM2xJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8yYzhmMDgtZTU5OS00NGYzLWJiYzEt
OGNiZWY5MTNlMzQyLzEvbWhvR0JBaF92cDNiTGxlUzB5VW9FRHdCeHRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8yYzhmMDgtZTU5OS00NGYzLWJiYzEtOGNiZWY5MTNlMzQy
LzEvaGR1RHFEWmFZRVIyOG9MU1RUSjYwZThQM2xJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLuLoAwQD
V+0YMA0GCSqGSIb3DQEBCwUAA4IBAQBmMEz0XORP0BHnbHfnwaau6X4lLFZCJkPn
atwdmRzgdIrlG++4J1Rvu4uxRAKINcv6Gn/xMnqnvLdyqg1xCmI7xx5ijA27qM+t
pJfERxzTmaB3jNryhm2hgjJ/62cKtpoPH9CTAMi2AecQvhLJr/gbNM6eNZS3SYl0
eHSNKP2ByGh/kgDGIOct7Et0XzZh6hFlgGXydqPkNvuhcF9Pg000OK9nqJ20qwig
/24C1R+LVn5iOnZDfdv3idkV/uDJoYMQi8xt7wpXZD+VT/vuxhHHYXdCDAN8av9r
faEghYM9quSpIJ2jel1cMpwvRDjgojXlI8oUI1raaxg3jdq/t5bb
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:44:12 2024 by rpki-client on console-fra.rpki-client.org