Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/6cXMtqlHDTfpmDRGf9CkDrpwP8o.roa
File: 6cXMtqlHDTfpmDRGf9CkDrpwP8o.roa (raw, json)
Hash identifier: fKcOjhrVx7+rJxniLNTJO9Sn/rNL1s5sBnUg/GOftEA=
Subject key identifier: E9:C5:CC:B6:A9:47:0D:37:E9:98:34:46:7F:D0:A4:0E:BA:70:3F:CA
Certificate issuer: /CN=317b8147503ea19f581ca00d28dbee5e58cb8f48
Certificate serial: 018CC4930E078F0E0AEE3FEA7D77B2D06776
Authority key identifier: 31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/6cXMtqlHDTfpmDRGf9CkDrpwP8o.roa
Signing time: Mon 01 Jan 2024 10:30:20 +0000
ROA not before: Mon 01 Jan 2024 10:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58160
IP address blocks: 185.93.212.0/23 maxlen: 23
2a00:d900::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:0e:07:8f:0e:0a:ee:3f:ea:7d:77:b2:d0:67:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317b8147503ea19f581ca00d28dbee5e58cb8f48
Validity
Not Before: Jan 1 10:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9c5ccb6a9470d37e99834467fd0a40eba703fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:05:74:d0:ae:6b:09:47:1f:ee:06:71:0d:90:
8f:1e:6e:0b:3d:50:04:7b:7b:ba:5a:9c:93:85:bf:
72:f5:d5:2c:0f:a6:88:f3:42:f9:d7:de:ff:76:00:
99:49:ba:fd:e5:03:40:ce:7c:92:25:6a:e1:9d:9e:
7b:3c:9a:7d:3d:31:5e:fa:05:93:39:5a:31:0c:cf:
4a:25:d3:87:a6:03:54:fe:1a:38:e6:f4:fd:a0:ab:
43:5b:06:36:73:c1:a7:b8:9e:49:4b:03:84:d1:5c:
b4:f9:ac:e8:c4:07:6c:a8:57:7b:0a:06:41:96:d6:
30:37:1c:eb:bd:73:4e:fa:0e:92:c8:8e:af:bf:f4:
f5:b1:28:d1:75:1d:c6:92:3a:94:7c:c4:cb:ca:65:
e5:59:54:ef:75:7d:7f:fd:56:73:b7:04:07:d5:f1:
fc:33:93:38:0e:01:af:8b:13:f4:4b:07:7e:5e:01:
39:5e:2c:43:fc:72:b2:9d:cc:9c:a3:b6:ec:ae:6f:
b8:60:94:3a:5c:71:05:d9:d2:71:5e:4e:d8:6c:a5:
b0:b3:2d:78:3c:61:e7:4a:dd:df:1e:5f:84:c4:96:
c3:11:c7:7f:7b:d0:44:49:44:15:d9:b0:c7:e6:1c:
9b:13:6c:5e:f6:e4:75:16:49:17:8f:2a:7d:a1:05:
15:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C5:CC:B6:A9:47:0D:37:E9:98:34:46:7F:D0:A4:0E:BA:70:3F:CA
X509v3 Authority Key Identifier:
keyid:31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/6cXMtqlHDTfpmDRGf9CkDrpwP8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.212.0/23
IPv6:
2a00:d900::/32
Signature Algorithm: sha256WithRSAEncryption
bb:1d:c7:7e:2f:8c:3e:35:5e:03:b9:1e:5a:79:95:4d:fe:0b:
3c:57:dd:a5:d8:63:ff:09:7c:ef:40:88:60:48:d9:20:a7:5c:
3a:87:24:98:b7:c4:86:03:3f:6c:07:ab:c1:16:1f:cc:38:fa:
ff:80:13:16:81:83:bd:25:42:cf:e6:47:4b:14:ba:0b:e8:72:
dd:b9:78:cd:2b:f1:26:9e:6f:d4:b9:53:87:cb:88:af:bb:cd:
60:91:32:0b:eb:b3:ef:cf:f4:a1:6e:06:d5:2a:e8:1c:2f:8a:
44:e3:57:03:ca:09:ac:93:d2:cb:f1:1a:1d:9f:52:e5:f2:61:
4b:05:52:d6:1e:10:49:27:b2:a6:c8:48:4a:fa:40:33:7a:c0:
1a:21:15:f7:29:a2:4a:19:51:63:00:e6:77:f4:d9:0a:4a:9d:
83:ac:34:46:12:90:09:5c:08:7d:09:cf:b7:e6:bc:7d:7b:e4:
09:b0:34:89:12:59:2e:8d:27:da:ca:ec:fd:5e:f9:3d:01:90:
58:37:ea:af:be:67:06:f5:7d:5a:d6:ec:34:cd:29:a3:db:ca:
a0:7f:25:47:1c:db:2d:1b:2b:74:ad:b0:98:0b:84:49:4e:4e:
91:ab:fb:e8:ef:da:bb:00:66:f3:3b:9b:3a:3f:d4:fd:2f:92:
b2:04:64:5f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzEkw4Hjw4K7j/qfXey0Gd2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxN2I4MTQ3NTAzZWExOWY1ODFjYTAwZDI4ZGJlZTVlNThj
YjhmNDgwHhcNMjQwMTAxMTAzMDIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWM1Y2NiNmE5NDcwZDM3ZTk5ODM0NDY3ZmQwYTQwZWJhNzAzZmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogV00K5rCUcf7gZxDZCPHm4LPVAE
e3u6WpyThb9y9dUsD6aI80L5197/dgCZSbr95QNAznySJWrhnZ57PJp9PTFe+gWT
OVoxDM9KJdOHpgNU/ho45vT9oKtDWwY2c8GnuJ5JSwOE0Vy0+azoxAdsqFd7CgZB
ltYwNxzrvXNO+g6SyI6vv/T1sSjRdR3GkjqUfMTLymXlWVTvdX1//VZztwQH1fH8
M5M4DgGvixP0Swd+XgE5XixD/HKyncyco7bsrm+4YJQ6XHEF2dJxXk7YbKWwsy14
PGHnSt3fHl+ExJbDEcd/e9BESUQV2bDH5hybE2xe9uR1FkkXjyp9oQUVfwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOnFzLapRw036Zg0Rn/QpA66cD/KMB8GA1UdIwQY
MBaAFDF7gUdQPqGfWBygDSjb7l5Yy49IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVh1QlIxQS1vWjlZSEtBTktOdnVYbGpMajBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8yZTRlNTQtMDU0OC00ZDBjLTkzZjEt
NzU0NjFhYmJiNWE0LzEvNmNYTXRxbEhEVGZwbURSR2Y5Q2tEcnB3UDhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8yZTRlNTQtMDU0OC00ZDBjLTkzZjEtNzU0NjFhYmJiNWE0
LzEvTVh1QlIxQS1vWjlZSEtBTktOdnVYbGpMajBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuV3UMA0E
AgACMAcDBQAqANkAMA0GCSqGSIb3DQEBCwUAA4IBAQC7Hcd+L4w+NV4DuR5aeZVN
/gs8V92l2GP/CXzvQIhgSNkgp1w6hySYt8SGAz9sB6vBFh/MOPr/gBMWgYO9JULP
5kdLFLoL6HLduXjNK/Emnm/UuVOHy4ivu81gkTIL67Pvz/ShbgbVKugcL4pE41cD
ygmsk9LL8Rodn1Ll8mFLBVLWHhBJJ7KmyEhK+kAzesAaIRX3KaJKGVFjAOZ39NkK
Sp2DrDRGEpAJXAh9Cc+35rx9e+QJsDSJElkujSfayuz9Xvk9AZBYN+qvvmcG9X1a
1uw0zSmj28qgfyVHHNstGyt0rbCYC4RJTk6Rq/vo79q7AGbzO5s6P9T9L5KyBGRf
-----END CERTIFICATE-----
Generated at Sat Jun 8 02:55:31 2024 by rpki-client on console-ams.rpki-client.org