Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/M3Stvvg9I9mPoKWDiL2QOon8Tq0.roa
File: M3Stvvg9I9mPoKWDiL2QOon8Tq0.roa (raw, json)
Hash identifier: PKcL9RxLMLwYqXpCMJwN6K4qnqgwn5ntpU3AhWM3TsY=
Subject key identifier: 33:74:AD:BE:F8:3D:23:D9:8F:A0:A5:83:88:BD:90:3A:89:FC:4E:AD
Certificate issuer: /CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Certificate serial: 018CC50136DB27C543956D91D830D9D1AE65
Authority key identifier: 2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/M3Stvvg9I9mPoKWDiL2QOon8Tq0.roa
Signing time: Mon 01 Jan 2024 12:30:40 +0000
ROA not before: Mon 01 Jan 2024 12:30:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201079
IP address blocks: 185.23.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:36:db:27:c5:43:95:6d:91:d8:30:d9:d1:ae:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Validity
Not Before: Jan 1 12:30:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3374adbef83d23d98fa0a58388bd903a89fc4ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:34:08:20:6f:fc:38:87:b8:85:e2:f3:96:c3:
b3:a0:8f:3d:43:34:ab:93:70:bc:09:b2:b3:e4:f2:
84:73:d3:28:00:b9:34:ff:e5:16:9d:6a:d0:23:53:
ba:01:5d:04:df:e1:84:ce:a1:ed:23:b0:e8:80:9f:
0c:40:15:49:17:14:32:bf:30:18:d7:1a:10:d5:ca:
bf:65:ad:ea:c3:29:29:5b:9b:1b:a6:e5:3e:e0:49:
86:ae:18:b2:ee:44:0e:1f:2c:0d:f7:8c:e0:35:51:
25:22:24:8d:af:0b:67:22:68:68:ca:21:83:70:24:
67:fd:2e:a5:66:f6:a6:36:a9:91:f1:6e:f0:c3:8a:
b3:9a:2c:1a:02:4c:3a:36:57:16:f8:12:84:8e:fe:
cc:e9:43:df:22:df:d2:a4:45:65:ca:13:f4:90:0c:
16:84:5f:d0:82:23:66:47:82:2d:f7:d1:62:a0:bb:
ed:55:ba:00:d2:2e:53:24:54:03:7c:0f:12:42:80:
45:98:ed:fc:10:7f:d6:06:11:63:78:4e:64:a2:85:
73:8c:51:d3:32:e2:28:80:a8:ef:da:00:e9:86:f2:
cf:cb:8c:22:36:15:cb:e4:20:f3:40:c0:00:82:d9:
32:e2:56:31:b4:37:29:d6:da:44:53:58:1e:50:c9:
ee:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:74:AD:BE:F8:3D:23:D9:8F:A0:A5:83:88:BD:90:3A:89:FC:4E:AD
X509v3 Authority Key Identifier:
keyid:2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/M3Stvvg9I9mPoKWDiL2QOon8Tq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.72.0/24
Signature Algorithm: sha256WithRSAEncryption
14:08:53:cf:9d:f4:72:fe:56:db:48:9c:e2:65:24:b0:5c:a1:
b9:71:de:f8:31:6d:7d:9a:7a:d6:11:fa:db:9c:ef:e0:76:11:
6b:68:c2:2c:a7:37:ec:64:db:5a:b4:35:91:c8:c3:2e:74:c0:
4a:9e:dd:ac:3d:7f:64:0f:87:b8:52:7b:d9:af:e6:5a:60:35:
fc:ee:fd:d3:ab:e2:c8:78:60:66:f2:ea:e8:54:eb:86:c7:98:
9c:05:10:43:47:c4:20:76:0c:0e:6a:f1:1a:11:74:68:ca:f2:
cc:7c:d6:a0:b3:8a:24:40:a9:ee:45:17:bc:e1:cc:5f:25:c5:
06:18:a2:56:e3:ba:25:64:c1:3c:7a:14:c9:c1:3a:d2:6a:9b:
6f:91:72:1d:f6:ce:da:c8:da:bc:44:af:6c:30:f9:51:a5:3b:
60:82:74:7a:d1:e6:65:aa:f3:d4:4f:b3:f9:5f:fc:ef:12:f4:
c1:14:83:e7:7d:3f:62:a7:b8:a1:a9:0a:d7:8c:74:7c:76:b4:
78:10:1a:55:0c:7a:de:25:7a:12:87:54:ec:37:8c:1e:c5:eb:
8c:3f:b7:62:8b:60:2d:a7:e2:39:f4:34:3c:5d:3f:1f:bd:27:
43:de:ba:12:d5:c3:d1:45:68:a8:ce:79:e0:55:22:30:9e:f6:
fe:97:db:93
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFATbbJ8VDlW2R2DDZ0a5lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMGE5MzMzZjkzY2NhNTQ0ZmRhYmUyZWE3YTY3MzhhNTRh
Zjc1OWUwHhcNMjQwMTAxMTIzMDQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzc0YWRiZWY4M2QyM2Q5OGZhMGE1ODM4OGJkOTAzYTg5ZmM0ZWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzQIIG/8OIe4heLzlsOzoI89QzSr
k3C8CbKz5PKEc9MoALk0/+UWnWrQI1O6AV0E3+GEzqHtI7DogJ8MQBVJFxQyvzAY
1xoQ1cq/Za3qwykpW5sbpuU+4EmGrhiy7kQOHywN94zgNVElIiSNrwtnImhoyiGD
cCRn/S6lZvamNqmR8W7ww4qzmiwaAkw6NlcW+BKEjv7M6UPfIt/SpEVlyhP0kAwW
hF/QgiNmR4It99FioLvtVboA0i5TJFQDfA8SQoBFmO38EH/WBhFjeE5kooVzjFHT
MuIogKjv2gDphvLPy4wiNhXL5CDzQMAAgtky4lYxtDcp1tpEU1geUMnucQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDN0rb74PSPZj6Clg4i9kDqJ/E6tMB8GA1UdIwQY
MBaAFC4KkzP5PMpUT9q+Lqemc4pUr3WeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGdxVE1fazh5bFJQMnI0dXA2WnppbFN2ZFo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNGQwOWYtMjlkZi00NGVhLWE3YjEt
MGEwYWFlYWVlNGYxLzEvTTNTdHZ2ZzlJOW1Qb0tXRGlMMlFPb244VHEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9hNGQwOWYtMjlkZi00NGVhLWE3YjEtMGEwYWFlYWVlNGYx
LzEvTGdxVE1fazh5bFJQMnI0dXA2WnppbFN2ZFo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRdIMA0G
CSqGSIb3DQEBCwUAA4IBAQAUCFPPnfRy/lbbSJziZSSwXKG5cd74MW19mnrWEfrb
nO/gdhFraMIspzfsZNtatDWRyMMudMBKnt2sPX9kD4e4UnvZr+ZaYDX87v3Tq+LI
eGBm8uroVOuGx5icBRBDR8QgdgwOavEaEXRoyvLMfNags4okQKnuRRe84cxfJcUG
GKJW47olZME8ehTJwTrSaptvkXId9s7ayNq8RK9sMPlRpTtggnR60eZlqvPUT7P5
X/zvEvTBFIPnfT9ip7ihqQrXjHR8drR4EBpVDHreJXoSh1TsN4wexeuMP7dii2At
p+I59DQ8XT8fvSdD3roS1cPRRWioznngVSIwnvb+l9uT
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:44:39 2024 by rpki-client on console-fra.rpki-client.org