Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/MBAoVFnz9ZpZWB4UPEEqHh0YX_w.roa
File: MBAoVFnz9ZpZWB4UPEEqHh0YX_w.roa (raw, json)
Hash identifier: ArGV/WlDmupW+pOSHh8xl3R9PwhIawTAf7/acT0fGTs=
Subject key identifier: 30:10:28:54:59:F3:F5:9A:59:58:1E:14:3C:41:2A:1E:1D:18:5F:FC
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018CC86F46FDF17EEF5E16F460A4D9B54DDC
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/MBAoVFnz9ZpZWB4UPEEqHh0YX_w.roa
Signing time: Tue 02 Jan 2024 04:29:45 +0000
ROA not before: Tue 02 Jan 2024 04:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204875
IP address blocks: 185.200.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:46:fd:f1:7e:ef:5e:16:f4:60:a4:d9:b5:4d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 2 04:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3010285459f3f59a59581e143c412a1e1d185ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:69:ce:1e:48:48:20:34:c9:4f:a8:1a:cd:14:
c2:2b:4e:6c:fb:f0:62:2d:8b:ad:ba:21:a6:76:53:
67:51:5a:3b:bd:37:b4:c8:53:4c:5c:c9:cf:88:ef:
ed:24:dd:6a:ad:0b:7f:bc:cf:ab:0e:74:83:72:d0:
f2:3f:fc:ed:9b:04:c8:f1:35:f8:a0:36:89:79:85:
b6:09:25:f9:fd:8f:64:dd:45:95:cb:c3:82:65:c5:
79:12:57:15:d4:f0:14:bb:4e:c1:d3:f3:19:05:ca:
9e:0f:79:6c:60:ad:f6:b2:01:57:20:5a:bf:06:5b:
25:c8:fe:60:9d:52:6a:cc:de:d3:51:fc:39:28:d6:
f6:28:ab:7e:4c:16:76:23:63:ca:fb:64:7a:85:de:
9c:d2:f0:2c:ea:0a:d7:6b:91:f1:d4:25:2e:ac:d0:
50:bc:02:52:8f:1c:2c:06:03:46:ea:40:00:63:fb:
ea:ae:02:72:e8:d3:89:0d:3c:df:5f:4a:db:26:7f:
64:7b:a6:ee:24:a6:79:e2:56:e6:91:e6:d1:16:e6:
25:f7:7a:28:76:52:49:2d:e6:f1:d1:00:69:42:e9:
b6:d8:c0:ae:67:a0:18:f7:65:fe:46:91:7e:4e:79:
fe:e5:87:c3:00:c0:b4:d7:01:a3:f1:61:4c:e0:aa:
94:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:10:28:54:59:F3:F5:9A:59:58:1E:14:3C:41:2A:1E:1D:18:5F:FC
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/MBAoVFnz9ZpZWB4UPEEqHh0YX_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.60.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:b0:a7:22:3c:30:08:9d:b4:22:96:c3:60:ca:2d:85:d7:f8:
a1:b6:65:f1:ee:b3:d9:0e:08:b1:d4:9a:1d:66:f4:86:63:49:
1f:ab:22:36:a1:42:b0:ef:83:34:e7:e3:50:b8:b1:e2:6c:51:
07:dd:8d:38:66:51:da:c1:55:a7:1f:71:ed:e2:31:6f:4d:0f:
2f:60:ff:56:b9:a4:da:45:d2:6c:2a:b3:5d:95:03:32:39:c8:
81:f2:a1:2b:59:3d:d8:a0:76:cd:1d:7c:ed:5f:e9:77:6c:86:
5e:11:d1:d7:47:49:06:7e:9f:4f:3e:4c:10:d5:d6:90:0d:34:
0d:61:35:a8:43:2b:87:6f:7a:26:66:a7:c5:ed:4b:b5:9c:e3:
c0:f5:31:b9:d1:41:bc:b0:26:f3:de:5e:d9:96:7e:88:59:dd:
f6:7c:5e:3d:5a:0d:bd:fc:59:d6:46:55:60:74:cd:41:f2:49:
32:d6:e4:aa:7d:49:08:76:b4:47:9f:96:e6:9b:85:0f:8c:84:
19:af:bc:1c:d6:80:19:6c:d6:aa:97:b1:7e:6e:2a:8f:42:9e:
cd:c9:ce:90:77:d9:3c:5c:6d:55:17:cf:79:ee:75:7f:90:b0:
24:b9:86:ae:5a:76:f0:1a:94:81:26:b0:0f:51:4a:b6:c2:63:
a7:32:ae:12
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIb0b98X7vXhb0YKTZtU3cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjQwMTAyMDQyOTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDEwMjg1NDU5ZjNmNTlhNTk1ODFlMTQzYzQxMmExZTFkMTg1ZmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2nOHkhIIDTJT6gazRTCK05s+/Bi
LYutuiGmdlNnUVo7vTe0yFNMXMnPiO/tJN1qrQt/vM+rDnSDctDyP/ztmwTI8TX4
oDaJeYW2CSX5/Y9k3UWVy8OCZcV5ElcV1PAUu07B0/MZBcqeD3lsYK32sgFXIFq/
BlslyP5gnVJqzN7TUfw5KNb2KKt+TBZ2I2PK+2R6hd6c0vAs6grXa5Hx1CUurNBQ
vAJSjxwsBgNG6kAAY/vqrgJy6NOJDTzfX0rbJn9ke6buJKZ54lbmkebRFuYl93oo
dlJJLebx0QBpQum22MCuZ6AY92X+RpF+Tnn+5YfDAMC01wGj8WFM4KqUDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDAQKFRZ8/WaWVgeFDxBKh4dGF/8MB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvTUJBb1ZGbno5WnBaV0I0VVBFRXFIaDBZWF93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucg8MA0G
CSqGSIb3DQEBCwUAA4IBAQCdsKciPDAInbQilsNgyi2F1/ihtmXx7rPZDgix1Jod
ZvSGY0kfqyI2oUKw74M05+NQuLHibFEH3Y04ZlHawVWnH3Ht4jFvTQ8vYP9WuaTa
RdJsKrNdlQMyOciB8qErWT3YoHbNHXztX+l3bIZeEdHXR0kGfp9PPkwQ1daQDTQN
YTWoQyuHb3omZqfF7Uu1nOPA9TG50UG8sCbz3l7Zln6IWd32fF49Wg29/FnWRlVg
dM1B8kky1uSqfUkIdrRHn5bmm4UPjIQZr7wc1oAZbNaql7F+biqPQp7Nyc6Qd9k8
XG1VF8957nV/kLAkuYauWnbwGpSBJrAPUUq2wmOnMq4S
-----END CERTIFICATE-----
Generated at Wed May 22 02:46:02 2024 by rpki-client on console-fra.rpki-client.org