Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/b10Pd6sriydu5J5J5t_M_vmWbj0.roa
File: b10Pd6sriydu5J5J5t_M_vmWbj0.roa (raw, json)
Hash identifier: mvtdt+2Zy4WYAb7frCl/jZQJ6KWv8NaW8j1zIUuxRXw=
Subject key identifier: 6F:5D:0F:77:AB:2B:8B:27:6E:E4:9E:49:E6:DF:CC:FE:F9:96:6E:3D
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 018CC94DFA6D8668AF5351395E61B38202C1
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/b10Pd6sriydu5J5J5t_M_vmWbj0.roa
Signing time: Tue 02 Jan 2024 08:32:59 +0000
ROA not before: Tue 02 Jan 2024 08:32:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21324
IP address blocks: 195.187.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:fa:6d:86:68:af:53:51:39:5e:61:b3:82:02:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 2 08:32:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f5d0f77ab2b8b276ee49e49e6dfccfef9966e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:89:09:73:37:8d:1b:9c:2a:40:4b:57:14:04:
06:9d:fe:70:d3:4b:ac:71:39:91:2a:0f:e7:1f:a2:
56:96:40:6a:36:f2:06:63:9f:70:2b:be:83:ec:52:
cc:37:99:1a:32:7d:a1:82:03:f3:79:75:47:5f:7a:
18:1f:cb:04:e9:6d:93:6e:c9:8a:69:ab:b7:c6:d9:
76:5b:15:11:db:f6:21:6e:a0:38:39:dc:ee:bd:6f:
42:9e:e6:e3:5a:7e:92:7c:6a:70:62:59:7e:5b:9a:
8b:12:d5:14:62:c1:35:78:82:9c:27:b1:f9:02:f3:
36:69:e8:71:73:6d:dc:f5:68:14:29:2c:99:f7:a2:
74:72:8d:c1:4e:a9:54:86:b6:d0:8e:3a:fb:72:89:
d8:4f:51:c1:ef:ca:d0:73:bb:25:9c:99:bf:99:df:
b5:d2:16:67:65:6f:a1:b7:04:8b:ac:9f:fe:71:08:
22:d0:37:f6:6f:05:ea:c5:cb:e4:1a:e6:be:24:58:
9f:fc:53:27:b7:ba:65:e1:6f:1c:ae:3a:28:7f:7f:
8b:06:ce:0c:ad:f4:8a:39:e5:b2:07:7c:72:b4:b0:
11:5a:b0:7d:fe:e8:2f:32:11:b3:90:8a:e6:5b:38:
4e:06:c8:7e:b2:9d:ae:79:09:90:d5:47:5f:de:b0:
3c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5D:0F:77:AB:2B:8B:27:6E:E4:9E:49:E6:DF:CC:FE:F9:96:6E:3D
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/b10Pd6sriydu5J5J5t_M_vmWbj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.187.133.0/24
Signature Algorithm: sha256WithRSAEncryption
67:8c:20:55:ae:83:db:84:4f:12:52:82:4f:65:ab:42:dc:71:
ef:b3:4e:f7:0a:de:47:d5:d8:39:8a:92:08:38:d4:62:ae:cb:
57:d7:3e:77:74:c7:44:87:61:9d:e2:87:ee:bc:58:4a:ac:bd:
cd:89:93:43:88:09:92:be:1a:42:5d:89:19:af:d4:d7:58:5a:
d5:5b:27:98:63:e1:5d:8b:56:cf:9c:e5:73:07:c6:12:b8:70:
df:44:ea:72:81:4a:09:a6:33:10:b6:5b:98:92:10:02:a8:33:
5f:2f:ac:c3:2c:bc:03:62:a5:11:43:97:53:f3:5f:df:ec:a0:
7a:49:8d:27:60:99:59:50:66:76:17:21:68:f7:38:9e:12:71:
81:5c:ec:cf:e0:c8:49:57:0e:f1:11:63:e8:ba:15:3e:bf:cb:
c8:1e:1a:1c:db:ab:31:74:2f:02:91:25:22:e8:79:6f:12:84:
a5:26:fb:a2:b9:08:8c:33:cf:43:71:88:38:82:7f:bf:5d:94:
13:9c:d0:e4:24:a8:45:8f:ff:3d:32:96:a6:95:e3:fb:d1:02:
d1:be:78:b7:6b:42:a1:eb:84:d1:09:5e:87:14:e0:21:b8:ce:
d8:6e:5c:5a:25:34:c1:28:fb:bb:6c:09:63:9e:49:e4:34:89:
58:fa:a7:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJTfpthmivU1E5XmGzggLBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYzQwOTYxM2ZlYTBhMmI0NDJjZTExMmU5Y2JkYjQ4NWUw
MTE4OGYwHhcNMjQwMTAyMDgzMjU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjVkMGY3N2FiMmI4YjI3NmVlNDllNDllNmRmY2NmZWY5OTY2ZTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4kJczeNG5wqQEtXFAQGnf5w00us
cTmRKg/nH6JWlkBqNvIGY59wK76D7FLMN5kaMn2hggPzeXVHX3oYH8sE6W2TbsmK
aau3xtl2WxUR2/YhbqA4OdzuvW9CnubjWn6SfGpwYll+W5qLEtUUYsE1eIKcJ7H5
AvM2aehxc23c9WgUKSyZ96J0co3BTqlUhrbQjjr7conYT1HB78rQc7slnJm/md+1
0hZnZW+htwSLrJ/+cQgi0Df2bwXqxcvkGua+JFif/FMnt7pl4W8crjoof3+LBs4M
rfSKOeWyB3xytLARWrB9/ugvMhGzkIrmWzhOBsh+sp2ueQmQ1Udf3rA8kwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG9dD3erK4snbuSeSebfzP75lm49MB8GA1UdIwQY
MBaAFDDECWE/6gorRCzhEunL20heARiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYt
YzA2NzFiZjRjZjNlLzEvYjEwUGQ2c3JpeWR1NUo1SjV0X01fdm1XYmowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYtYzA2NzFiZjRjZjNl
LzEvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7uFMA0G
CSqGSIb3DQEBCwUAA4IBAQBnjCBVroPbhE8SUoJPZatC3HHvs073Ct5H1dg5ipII
ONRirstX1z53dMdEh2Gd4ofuvFhKrL3NiZNDiAmSvhpCXYkZr9TXWFrVWyeYY+Fd
i1bPnOVzB8YSuHDfROpygUoJpjMQtluYkhACqDNfL6zDLLwDYqURQ5dT81/f7KB6
SY0nYJlZUGZ2FyFo9zieEnGBXOzP4MhJVw7xEWPouhU+v8vIHhoc26sxdC8CkSUi
6HlvEoSlJvuiuQiMM89DcYg4gn+/XZQTnNDkJKhFj/89MpamleP70QLRvni3a0Kh
64TRCV6HFOAhuM7YblxaJTTBKPu7bAljnknkNIlY+qeE
-----END CERTIFICATE-----
Generated at Sat Nov 23 18:56:09 2024 by rpki-client on console-fra.rpki-client.org