Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Mr4ygy9-eI6bfVP3HBCQC_oNsJk.roa
File: Mr4ygy9-eI6bfVP3HBCQC_oNsJk.roa (raw, json)
Hash identifier: N+/Nssc/eYBK/s7cvcOe28ZEalalwgAqONxt+IAJwW0=
Subject key identifier: 32:BE:32:83:2F:7E:78:8E:9B:7D:53:F7:1C:10:90:0B:FA:0D:B0:99
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018D7E59DF4A06A49986EB6CF7F81D675D41
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Mr4ygy9-eI6bfVP3HBCQC_oNsJk.roa
Signing time: Tue 06 Feb 2024 12:17:15 +0000
ROA not before: Tue 06 Feb 2024 12:17:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203363
IP address blocks: 2.58.201.0/24 maxlen: 24
2.58.203.0/24 maxlen: 24
45.11.230.0/24 maxlen: 24
45.11.231.0/24 maxlen: 24
45.67.84.0/24 maxlen: 24
45.67.85.0/24 maxlen: 24
45.80.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 16:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7e:59:df:4a:06:a4:99:86:eb:6c:f7:f8:1d:67:5d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Feb 6 12:17:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32be32832f7e788e9b7d53f71c10900bfa0db099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:33:9a:c5:13:95:9a:7f:71:32:10:2f:f0:5b:
3c:d4:c0:9e:4e:a5:79:21:eb:0f:c3:91:5a:64:85:
bc:b2:a4:79:5d:fb:f4:97:f5:18:d5:92:7c:a8:e9:
4e:62:ea:8f:8e:1c:5c:b1:08:71:7f:1d:61:86:66:
5e:12:d5:af:33:6c:5f:23:d5:7f:79:ed:3f:96:be:
cc:de:84:0f:f8:6c:9a:21:84:d4:0b:19:7f:c9:7d:
fe:d8:f9:2b:ce:c0:93:67:5f:14:1a:55:85:11:30:
e0:67:2b:20:6d:11:26:49:cf:9c:0e:39:56:4b:50:
ca:04:e5:88:84:3d:2e:77:68:4d:8d:83:bc:cf:fc:
82:78:3a:d7:b1:10:bc:3d:58:00:6b:34:96:31:13:
ee:f8:73:78:26:6f:5f:4a:db:b8:52:50:99:66:d9:
d0:0c:bf:63:74:45:b7:b9:1c:8c:4f:f9:07:20:8a:
28:83:55:70:27:68:5b:3f:10:21:1f:7d:6c:76:21:
b8:8e:2d:7b:ca:f0:96:13:d5:68:3b:55:9c:b6:76:
5f:ec:91:a5:f4:36:9e:df:45:d1:4a:19:4e:9c:8e:
88:55:50:34:e7:dc:7a:e8:79:70:4c:51:d2:51:db:
ff:a8:34:6d:1b:a0:82:6e:1a:ae:d7:01:77:17:e7:
0d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BE:32:83:2F:7E:78:8E:9B:7D:53:F7:1C:10:90:0B:FA:0D:B0:99
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Mr4ygy9-eI6bfVP3HBCQC_oNsJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.201.0/24
2.58.203.0/24
45.11.230.0/23
45.67.84.0/23
45.80.193.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:ab:89:85:03:42:90:2e:03:58:5b:86:53:23:1f:f7:2f:22:
9c:79:13:af:b2:c0:c9:4d:73:00:c0:5c:bc:ab:c1:e7:cb:11:
4d:84:ff:07:05:62:86:8e:7b:00:f9:37:30:78:51:f0:ef:57:
4f:8e:0c:7b:d1:72:e0:1d:52:f0:33:9f:65:a6:4d:88:8d:5d:
f7:a8:4a:90:58:f7:3d:83:1a:94:7d:11:9c:18:19:07:67:4f:
90:f0:14:78:59:2a:6d:cc:b2:1c:bc:23:7d:59:88:65:b3:c7:
8d:8b:5b:8f:69:ff:fc:05:e8:f1:08:c4:85:60:d4:25:e0:5b:
3c:c9:a0:08:2d:e4:b5:2a:53:48:ae:82:28:a8:66:c9:93:6b:
09:4b:4b:7d:53:71:dc:dd:71:eb:33:ed:d2:50:94:1d:6c:ce:
44:e1:c2:d2:ed:9b:a7:97:2f:2d:2d:b2:ba:a2:ce:ab:d3:91:
d7:5c:7e:df:ff:d0:76:b5:d9:f4:67:4a:95:0d:fd:2d:a9:8e:
28:d3:b7:45:8d:8b:07:13:82:fe:e3:bb:c1:cf:ad:af:fa:f3:
53:68:35:2f:6c:f5:84:c4:67:fc:9c:5a:39:af:db:34:b9:66:
7c:bd:ba:c6:94:f2:c4:f9:37:11:a1:75:b6:29:d1:c1:7e:e3:
ef:b6:bb:b3
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAY1+Wd9KBqSZhuts9/gdZ11BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3
NTJmZGUwHhcNMjQwMjA2MTIxNzE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmJlMzI4MzJmN2U3ODhlOWI3ZDUzZjcxYzEwOTAwYmZhMGRiMDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTOaxROVmn9xMhAv8Fs81MCeTqV5
IesPw5FaZIW8sqR5Xfv0l/UY1ZJ8qOlOYuqPjhxcsQhxfx1hhmZeEtWvM2xfI9V/
ee0/lr7M3oQP+GyaIYTUCxl/yX3+2PkrzsCTZ18UGlWFETDgZysgbREmSc+cDjlW
S1DKBOWIhD0ud2hNjYO8z/yCeDrXsRC8PVgAazSWMRPu+HN4Jm9fStu4UlCZZtnQ
DL9jdEW3uRyMT/kHIIoog1VwJ2hbPxAhH31sdiG4ji17yvCWE9VoO1WctnZf7JGl
9Dae30XRShlOnI6IVVA059x66HlwTFHSUdv/qDRtG6CCbhqu1wF3F+cN1wIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFDK+MoMvfniOm31T9xwQkAv6DbCZMB8GA1UdIwQY
MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt
YTNjYTBkYjgzMjU0LzEvTXI0eWd5OS1lSTZiZlZQM0hCQ1FDX29Oc0prLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0
LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAAjrJAwQA
AjrLAwQBLQvmAwQBLUNUAwQALVDBMA0GCSqGSIb3DQEBCwUAA4IBAQBsq4mFA0KQ
LgNYW4ZTIx/3LyKceROvssDJTXMAwFy8q8HnyxFNhP8HBWKGjnsA+TcweFHw71dP
jgx70XLgHVLwM59lpk2IjV33qEqQWPc9gxqUfRGcGBkHZ0+Q8BR4WSptzLIcvCN9
WYhls8eNi1uPaf/8BejxCMSFYNQl4Fs8yaAILeS1KlNIroIoqGbJk2sJS0t9U3Hc
3XHrM+3SUJQdbM5E4cLS7Zunly8tLbK6os6r05HXXH7f/9B2tdn0Z0qVDf0tqY4o
07dFjYsHE4L+47vBz62v+vNTaDUvbPWExGf8nFo5r9s0uWZ8vbrGlPLE+TcRoXW2
KdHBfuPvtruz
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:43:05 2024 by rpki-client on console-fra.rpki-client.org