Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/MlU1dC7uL_UX4i3RsjYh80vZ25E.roa
File: MlU1dC7uL_UX4i3RsjYh80vZ25E.roa (raw, json)
Hash identifier: 7Ix7xJWtxt9hP3pgsbmO2CiyY6SNkqsq5CDk3Gq1hlw=
Subject key identifier: 32:55:35:74:2E:EE:2F:F5:17:E2:2D:D1:B2:36:21:F3:4B:D9:DB:91
Certificate issuer: /CN=c297409bc27c5843e2b16ac67cdb6a155c2f73fb
Certificate serial: 018E9DA0CD7DEC1BDD313769E2C1F0B60413
Authority key identifier: C2:97:40:9B:C2:7C:58:43:E2:B1:6A:C6:7C:DB:6A:15:5C:2F:73:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpdAm8J8WEPisWrGfNtqFVwvc_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/MlU1dC7uL_UX4i3RsjYh80vZ25E.roa
Signing time: Tue 02 Apr 2024 07:05:44 +0000
ROA not before: Tue 02 Apr 2024 07:05:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206082
IP address blocks: 91.239.38.0/23 maxlen: 23
185.196.208.0/22 maxlen: 22
185.221.100.0/22 maxlen: 22
185.221.102.0/24 maxlen: 24
2001:67c:11c0::/48 maxlen: 48
2a0a:7240::/29 maxlen: 29
2a0a:7240::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/wpdAm8J8WEPisWrGfNtqFVwvc_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9d:a0:cd:7d:ec:1b:dd:31:37:69:e2:c1:f0:b6:04:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c297409bc27c5843e2b16ac67cdb6a155c2f73fb
Validity
Not Before: Apr 2 07:05:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=325535742eee2ff517e22dd1b23621f34bd9db91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:64:86:00:67:96:55:74:6b:68:71:25:81:85:
3b:a1:dd:08:87:e0:0a:d8:4f:68:41:3c:96:f7:68:
75:d6:9c:34:57:54:bf:9d:5f:ab:fc:72:79:99:e2:
c3:56:a6:06:92:0a:32:e5:4c:4f:5f:d0:58:90:c7:
9f:ec:3d:50:e7:51:c1:16:8a:42:2d:38:95:70:9c:
dc:a8:68:f6:c6:df:f4:0e:6c:b2:c6:16:4f:83:2c:
6d:9e:63:37:b0:63:c4:ee:b6:d1:fe:ad:ad:48:f7:
a8:48:15:3a:9f:35:d3:61:a5:2e:2c:49:bf:57:ed:
47:64:00:60:83:84:5f:19:6f:ff:5a:e0:4c:3f:65:
d6:70:23:a2:1d:45:04:58:43:5a:38:91:bd:e7:34:
87:f2:10:27:9c:76:fa:16:c7:cf:aa:ff:35:36:67:
22:51:8f:34:98:0a:9f:c9:09:f5:57:3a:8c:61:66:
c9:69:28:bd:c4:29:e8:7b:fd:44:aa:24:b7:f8:28:
37:0f:0e:9b:78:26:c5:96:a6:cb:b9:52:e1:a9:04:
60:4c:46:e6:ad:6d:a3:6f:c8:de:02:1b:a0:38:ac:
65:43:75:9a:6c:14:07:4b:76:e1:25:21:c9:a5:60:
f0:c1:34:25:50:d6:67:8b:6d:55:1d:e1:a7:0a:5d:
3b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:55:35:74:2E:EE:2F:F5:17:E2:2D:D1:B2:36:21:F3:4B:D9:DB:91
X509v3 Authority Key Identifier:
keyid:C2:97:40:9B:C2:7C:58:43:E2:B1:6A:C6:7C:DB:6A:15:5C:2F:73:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpdAm8J8WEPisWrGfNtqFVwvc_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/MlU1dC7uL_UX4i3RsjYh80vZ25E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.38.0/23
185.196.208.0/22
185.221.100.0/22
IPv6:
2001:67c:11c0::/48
2a0a:7240::/29
Signature Algorithm: sha256WithRSAEncryption
4b:af:7b:7f:58:4d:39:f7:54:f6:0d:44:40:a8:cd:bc:c7:32:
04:ab:e7:31:89:a7:6d:6e:c7:b7:20:75:d7:d2:83:c3:69:4a:
e4:db:db:75:7f:12:03:a5:38:9a:c0:5b:a6:90:fe:f7:11:10:
c6:be:0f:a8:d6:71:d5:58:73:d0:12:20:07:e2:ae:96:75:f2:
98:34:4a:e8:88:2c:38:ed:4b:f9:73:fe:b7:2c:54:14:4e:5f:
e5:cc:db:bf:bb:59:d6:8d:3b:f2:71:47:60:05:34:22:9c:15:
69:45:27:12:9c:cf:29:07:6b:af:64:3c:8f:9a:d4:fd:f5:40:
79:7f:5a:90:6b:88:8c:4d:be:f0:a4:09:96:b6:e0:2e:f7:00:
84:29:9b:c8:09:5b:1a:ca:b3:7c:b1:d6:38:ad:d0:63:fd:2f:
4b:be:7c:b9:12:85:fc:92:94:3f:6c:15:da:35:28:60:22:08:
dc:f1:5f:83:ac:7c:27:39:5f:26:86:15:96:54:af:f4:82:ed:
13:98:e0:ce:8e:29:0b:49:02:d4:68:71:09:ae:4b:d0:02:2d:
4d:ad:5a:46:fc:02:6c:10:dd:c7:86:c3:a5:30:c4:ef:a1:54:
05:89:91:8a:bf:66:be:e4:e1:2f:e0:ef:00:18:35:42:e1:ee:
51:5f:c0:46
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAY6doM197BvdMTdp4sHwtgQTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyOTc0MDliYzI3YzU4NDNlMmIxNmFjNjdjZGI2YTE1NWMy
ZjczZmIwHhcNMjQwNDAyMDcwNTQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjU1MzU3NDJlZWUyZmY1MTdlMjJkZDFiMjM2MjFmMzRiZDlkYjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmSGAGeWVXRraHElgYU7od0Ih+AK
2E9oQTyW92h11pw0V1S/nV+r/HJ5meLDVqYGkgoy5UxPX9BYkMef7D1Q51HBFopC
LTiVcJzcqGj2xt/0DmyyxhZPgyxtnmM3sGPE7rbR/q2tSPeoSBU6nzXTYaUuLEm/
V+1HZABgg4RfGW//WuBMP2XWcCOiHUUEWENaOJG95zSH8hAnnHb6FsfPqv81Nmci
UY80mAqfyQn1VzqMYWbJaSi9xCnoe/1EqiS3+Cg3Dw6beCbFlqbLuVLhqQRgTEbm
rW2jb8jeAhugOKxlQ3WabBQHS3bhJSHJpWDwwTQlUNZni21VHeGnCl07bQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFDJVNXQu7i/1F+It0bI2IfNL2duRMB8GA1UdIwQY
MBaAFMKXQJvCfFhD4rFqxnzbahVcL3P7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3BkQW04SjhXRVBpc1dyR2ZOdHFGVnd2Y19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jOGJmOGUtMTFhZC00NTllLWI3NjMt
NmMwMjhhNGQ4NWRhLzEvTWxVMWRDN3VMX1VYNGkzUnNqWWg4MHZaMjVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9jOGJmOGUtMTFhZC00NTllLWI3NjMtNmMwMjhhNGQ4NWRh
LzEvd3BkQW04SjhXRVBpc1dyR2ZOdHFGVnd2Y19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAYBAIAATASAwQBW+8mAwQC
ucTQAwQCud1kMBYEAgACMBADBwAgAQZ8EcADBQMqCnJAMA0GCSqGSIb3DQEBCwUA
A4IBAQBLr3t/WE0591T2DURAqM28xzIEq+cxiadtbse3IHXX0oPDaUrk29t1fxID
pTiawFumkP73ERDGvg+o1nHVWHPQEiAH4q6WdfKYNEroiCw47Uv5c/63LFQUTl/l
zNu/u1nWjTvycUdgBTQinBVpRScSnM8pB2uvZDyPmtT99UB5f1qQa4iMTb7wpAmW
tuAu9wCEKZvICVsayrN8sdY4rdBj/S9Lvny5EoX8kpQ/bBXaNShgIgjc8V+DrHwn
OV8mhhWWVK/0gu0TmODOjikLSQLUaHEJrkvQAi1NrVpG/AJsEN3HhsOlMMTvoVQF
iZGKv2a+5OEv4O8AGDVC4e5RX8BG
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:35:45 2024 by rpki-client on console-ams.rpki-client.org