Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/M1NDKZPCA_9kgSMp1xlFBFmMNIQ.roa
File: M1NDKZPCA_9kgSMp1xlFBFmMNIQ.roa (raw, json)
Hash identifier: T1PbKXRza7kw4A1YUsiFLsM/2R92vJBuRKBQPTJaiIs=
Subject key identifier: 33:53:43:29:93:C2:03:FF:64:81:23:29:D7:19:45:04:59:8C:34:84
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018CC64AE48BE7DC48B787902D3AA62C26DB
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/M1NDKZPCA_9kgSMp1xlFBFmMNIQ.roa
Signing time: Mon 01 Jan 2024 18:30:46 +0000
ROA not before: Mon 01 Jan 2024 18:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39737
IP address blocks: 81.181.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:e4:8b:e7:dc:48:b7:87:90:2d:3a:a6:2c:26:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 18:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3353432993c203ff64812329d7194504598c3484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b8:62:d7:1c:17:74:10:c7:a7:f2:d7:bd:d3:
29:2c:ea:ed:9b:46:17:6d:b5:25:1a:03:45:e3:7e:
80:45:32:a6:51:b7:9e:db:c0:d8:57:3f:ab:5a:56:
10:39:e1:31:d2:fc:7e:11:a7:05:2b:85:a6:f8:70:
a0:95:96:24:7d:df:12:49:d3:1e:29:3f:38:28:dc:
80:79:8c:db:64:4e:e6:f2:e7:6a:5c:a4:c4:4f:10:
03:00:b4:c7:19:be:08:92:fa:59:ba:e5:28:c2:94:
45:6f:cb:bc:0c:ec:fc:5b:af:37:ca:aa:a1:d1:9d:
a4:76:5b:42:ef:e9:82:dd:31:a8:7b:f2:5f:36:ac:
ac:b3:2e:1f:7a:47:dc:1f:de:bf:53:e2:28:5c:51:
90:12:bf:43:84:e7:29:b6:83:b4:7d:b1:6f:df:ea:
b9:93:9a:5c:5f:65:59:82:94:07:9f:f4:3b:5f:4e:
63:55:da:f7:92:b7:2b:64:18:0d:94:3d:4f:d5:02:
9a:45:75:cf:99:a2:65:58:2f:f1:1c:dc:27:1d:90:
e3:4d:4b:d0:2e:30:58:e7:9e:6a:69:9a:57:9a:4f:
6c:f4:95:c7:81:78:47:50:6c:29:5b:3e:e4:7f:c1:
26:f5:96:21:03:88:86:d0:11:3e:c8:7a:ee:64:33:
e0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:53:43:29:93:C2:03:FF:64:81:23:29:D7:19:45:04:59:8C:34:84
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/M1NDKZPCA_9kgSMp1xlFBFmMNIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.247.0/24
Signature Algorithm: sha256WithRSAEncryption
64:18:8a:01:13:fa:0f:48:0a:43:4a:9d:3f:aa:1e:59:f7:7c:
4d:04:c2:83:1d:8a:c8:e5:25:ff:f8:3e:4e:d6:af:71:cf:e2:
14:4b:ef:a1:b3:6c:a0:9a:91:34:43:60:d7:23:06:66:12:99:
d2:d0:d6:ea:78:8e:2b:bf:47:93:0b:a3:ee:6f:db:6a:9d:f5:
95:b2:62:23:46:23:fb:9b:29:c0:00:cb:1e:63:b5:c2:23:31:
f4:22:9e:27:a0:09:42:dc:07:fc:ae:3c:e2:1c:54:a8:20:b2:
f4:0a:c1:7b:a8:a4:0d:28:2c:50:82:f8:78:f6:0b:51:84:21:
04:cc:c2:74:29:27:f3:45:d2:8b:82:fb:10:41:e8:ac:0d:c9:
2d:1a:7d:de:1d:d9:d5:50:42:95:e8:58:7f:60:2b:c5:48:dc:
72:80:92:48:5c:cd:1b:d8:74:e3:5c:40:a9:9d:fb:f0:13:ce:
43:98:49:95:11:f8:25:05:ff:d7:42:36:b6:c6:9b:ad:56:e3:
7f:7f:6a:35:b5:5b:dd:60:53:f3:6b:25:5c:fd:86:0c:a4:34:
df:d8:e5:0b:62:60:26:d1:db:eb:b5:7d:ca:c7:0e:7b:73:5b:
c6:69:db:33:23:52:c8:7c:a7:d6:ee:ee:cb:b5:68:fb:6a:6d:
d3:4f:b1:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSuSL59xIt4eQLTqmLCbbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjQwMTAxMTgzMDQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzUzNDMyOTkzYzIwM2ZmNjQ4MTIzMjlkNzE5NDUwNDU5OGMzNDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLhi1xwXdBDHp/LXvdMpLOrtm0YX
bbUlGgNF436ARTKmUbee28DYVz+rWlYQOeEx0vx+EacFK4Wm+HCglZYkfd8SSdMe
KT84KNyAeYzbZE7m8udqXKTETxADALTHGb4IkvpZuuUowpRFb8u8DOz8W683yqqh
0Z2kdltC7+mC3TGoe/JfNqyssy4fekfcH96/U+IoXFGQEr9DhOcptoO0fbFv3+q5
k5pcX2VZgpQHn/Q7X05jVdr3krcrZBgNlD1P1QKaRXXPmaJlWC/xHNwnHZDjTUvQ
LjBY555qaZpXmk9s9JXHgXhHUGwpWz7kf8Em9ZYhA4iG0BE+yHruZDPgCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDNTQymTwgP/ZIEjKdcZRQRZjDSEMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvTTFOREtaUENBXzlrZ1NNcDF4bEZCRm1NTklRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUbX3MA0G
CSqGSIb3DQEBCwUAA4IBAQBkGIoBE/oPSApDSp0/qh5Z93xNBMKDHYrI5SX/+D5O
1q9xz+IUS++hs2ygmpE0Q2DXIwZmEpnS0NbqeI4rv0eTC6Pub9tqnfWVsmIjRiP7
mynAAMseY7XCIzH0Ip4noAlC3Af8rjziHFSoILL0CsF7qKQNKCxQgvh49gtRhCEE
zMJ0KSfzRdKLgvsQQeisDcktGn3eHdnVUEKV6Fh/YCvFSNxygJJIXM0b2HTjXECp
nfvwE85DmEmVEfglBf/XQja2xputVuN/f2o1tVvdYFPzayVc/YYMpDTf2OULYmAm
0dvrtX3Kxw57c1vGadszI1LIfKfW7u7LtWj7am3TT7Ex
-----END CERTIFICATE-----
Generated at Mon Jun 3 04:19:02 2024 by rpki-client on console-ams.rpki-client.org