Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/hmPIaWjDLEiOySSArWcaGIXRr8g.roa
File: hmPIaWjDLEiOySSArWcaGIXRr8g.roa (raw, json)
Hash identifier: PKN1yS9A2yzUJex14UURFwzM2ResOSoTSJEaMQgxWGQ=
Subject key identifier: 86:63:C8:69:68:C3:2C:48:8E:C9:24:80:AD:67:1A:18:85:D1:AF:C8
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 018CC94E00CD21B7681913A6D8FD1FA99759
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/hmPIaWjDLEiOySSArWcaGIXRr8g.roa
Signing time: Tue 02 Jan 2024 08:33:01 +0000
ROA not before: Tue 02 Jan 2024 08:33:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196802
IP address blocks: 148.81.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:00:cd:21:b7:68:19:13:a6:d8:fd:1f:a9:97:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 2 08:33:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8663c86968c32c488ec92480ad671a1885d1afc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2a:f3:55:99:fa:5d:95:14:86:07:e3:54:c1:
8b:1b:cc:9b:75:51:53:a9:49:81:01:93:af:82:d7:
f0:51:dd:cd:76:31:03:f4:35:b2:16:06:a9:bf:66:
22:d9:e9:2f:71:d1:b5:e3:ef:11:3a:9c:d8:4e:90:
a5:65:e5:57:d0:46:41:7a:ff:a2:af:5f:0c:7d:2f:
83:2d:78:0c:0a:7f:a6:dc:97:ac:3b:fe:c6:1c:d7:
d6:cf:48:cb:11:81:46:25:00:33:f6:4d:1d:13:20:
0d:ab:a7:5a:90:0d:36:48:96:b9:1b:5e:88:c6:fa:
4d:b0:e8:59:40:b3:4e:6f:48:d1:90:b5:d8:ea:d7:
44:48:6c:ae:c8:b5:a6:64:ee:fb:39:e2:d1:df:87:
00:d2:cf:cd:42:d3:9a:45:a2:42:a8:3b:01:47:fa:
88:35:5f:00:7b:1b:f5:37:a0:96:54:76:64:c5:99:
18:2c:5c:19:ac:0a:ae:88:db:f1:71:81:66:05:f0:
9d:55:9e:7b:8a:2d:bb:9d:5b:1b:17:ff:f8:f2:5a:
e8:db:4f:7d:1f:a7:4a:bb:57:98:74:10:31:11:a6:
e4:8e:c6:c6:dc:dc:6a:3d:3f:04:f1:17:88:a1:8e:
d9:8d:e3:e7:92:3f:af:3b:13:e1:a9:74:52:35:49:
cb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:63:C8:69:68:C3:2C:48:8E:C9:24:80:AD:67:1A:18:85:D1:AF:C8
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/hmPIaWjDLEiOySSArWcaGIXRr8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.81.117.0/24
Signature Algorithm: sha256WithRSAEncryption
24:c1:68:b4:6f:ce:12:29:7f:f5:4d:3f:3f:0a:cd:54:f1:5d:
50:7e:38:8b:6b:5c:74:44:8b:b9:ee:a2:d3:8a:1b:c5:fa:e7:
0c:ce:fa:76:d2:7a:57:3b:ec:a0:b6:6b:49:ba:f8:c2:03:a5:
c1:7a:79:ff:b3:0f:de:df:c3:d1:99:f0:1f:58:cb:06:c5:0d:
21:51:25:76:12:0d:08:c4:0d:31:11:d1:ff:31:2d:80:42:8a:
3d:a2:e8:9f:4a:a0:18:53:fa:ed:ed:b1:55:1a:89:f4:86:dc:
a5:a1:4b:d5:91:14:ff:73:44:4e:aa:c7:a9:4d:18:c7:52:8b:
31:ac:99:b3:79:9c:c0:2c:b1:19:97:df:63:d9:9c:4c:a5:3b:
f5:3d:2e:fc:0e:7a:02:bc:c9:7f:5d:8e:94:09:8b:0d:e7:24:
99:d7:ee:5a:61:54:6e:b8:70:0c:92:9a:6b:74:47:6c:c9:77:
5f:8d:08:53:30:73:a4:d5:53:36:73:23:e0:23:5e:ad:e4:3e:
60:97:f8:df:be:12:35:f7:db:ff:4b:be:68:95:7e:3d:b0:73:
7e:d9:ab:c0:7a:eb:7d:05:61:a8:85:08:a1:65:b5:a1:67:19:
4e:7a:97:e3:a5:79:05:c7:e7:14:a5:a0:b2:f9:98:60:9f:c5:
5f:46:52:8f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJTgDNIbdoGROm2P0fqZdZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYzQwOTYxM2ZlYTBhMmI0NDJjZTExMmU5Y2JkYjQ4NWUw
MTE4OGYwHhcNMjQwMTAyMDgzMzAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjYzYzg2OTY4YzMyYzQ4OGVjOTI0ODBhZDY3MWExODg1ZDFhZmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyrzVZn6XZUUhgfjVMGLG8ybdVFT
qUmBAZOvgtfwUd3NdjED9DWyFgapv2Yi2ekvcdG14+8ROpzYTpClZeVX0EZBev+i
r18MfS+DLXgMCn+m3JesO/7GHNfWz0jLEYFGJQAz9k0dEyANq6dakA02SJa5G16I
xvpNsOhZQLNOb0jRkLXY6tdESGyuyLWmZO77OeLR34cA0s/NQtOaRaJCqDsBR/qI
NV8Aexv1N6CWVHZkxZkYLFwZrAquiNvxcYFmBfCdVZ57ii27nVsbF//48lro2099
H6dKu1eYdBAxEabkjsbG3NxqPT8E8ReIoY7ZjePnkj+vOxPhqXRSNUnLHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIZjyGlowyxIjskkgK1nGhiF0a/IMB8GA1UdIwQY
MBaAFDDECWE/6gorRCzhEunL20heARiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYt
YzA2NzFiZjRjZjNlLzEvaG1QSWFXakRMRWlPeVNTQXJXY2FHSVhScjhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYtYzA2NzFiZjRjZjNl
LzEvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlFF1MA0G
CSqGSIb3DQEBCwUAA4IBAQAkwWi0b84SKX/1TT8/Cs1U8V1QfjiLa1x0RIu57qLT
ihvF+ucMzvp20npXO+ygtmtJuvjCA6XBenn/sw/e38PRmfAfWMsGxQ0hUSV2Eg0I
xA0xEdH/MS2AQoo9ouifSqAYU/rt7bFVGon0htyloUvVkRT/c0ROqsepTRjHUosx
rJmzeZzALLEZl99j2ZxMpTv1PS78DnoCvMl/XY6UCYsN5ySZ1+5aYVRuuHAMkppr
dEdsyXdfjQhTMHOk1VM2cyPgI16t5D5gl/jfvhI199v/S75olX49sHN+2avAeut9
BWGohQihZbWhZxlOepfjpXkFx+cUpaCy+Zhgn8VfRlKP
-----END CERTIFICATE-----
Generated at Sat Nov 23 18:56:09 2024 by rpki-client on console-fra.rpki-client.org