Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/MLOlCObbJYTJxHADFRCFxYAEhJg.roa
File: MLOlCObbJYTJxHADFRCFxYAEhJg.roa (raw, json)
Hash identifier: DGhKd8kU79jMtvR8iFc19mvvGj/4pNnLsRfI/8H2FzY=
Subject key identifier: 30:B3:A5:08:E6:DB:25:84:C9:C4:70:03:15:10:85:C5:80:04:84:98
Certificate issuer: /CN=b30515f47da925d9f9013808aa9113c2bde96d9a
Certificate serial: 0193982790F4B140B42061B47F7A7C57420B
Authority key identifier: B3:05:15:F4:7D:A9:25:D9:F9:01:38:08:AA:91:13:C2:BD:E9:6D:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/MLOlCObbJYTJxHADFRCFxYAEhJg.roa
Signing time: Thu 05 Dec 2024 18:49:10 +0000
ROA not before: Thu 05 Dec 2024 18:49:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201661
IP address blocks: 185.53.152.0/22 maxlen: 22
2a04:cdc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Dec 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:98:27:90:f4:b1:40:b4:20:61:b4:7f:7a:7c:57:42:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30515f47da925d9f9013808aa9113c2bde96d9a
Validity
Not Before: Dec 5 18:49:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30b3a508e6db2584c9c47003151085c580048498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3d:8c:9d:a2:d6:74:54:7c:a3:91:be:c4:66:
76:6e:23:04:a9:97:2d:ce:b6:7a:ae:0e:06:a9:da:
35:ba:39:4d:a8:74:ad:4a:1e:4c:d0:14:c7:e6:d4:
3e:f7:9b:91:87:04:2a:27:64:73:dd:f0:1a:9b:37:
f2:39:17:67:11:9e:5f:e9:22:22:9b:af:f0:fd:44:
a7:73:13:55:1e:4d:60:cb:d5:1b:07:5f:fe:13:b4:
14:77:d9:7c:e9:93:a3:4c:3d:fd:99:9e:e5:13:a5:
e0:8b:5b:cb:61:41:b5:e8:61:9e:55:ca:93:dc:66:
2a:f5:30:72:57:fd:70:a1:55:ae:37:4d:a4:b9:1a:
ef:86:0d:f2:9c:5d:f2:be:54:1e:7c:d4:46:07:f2:
c0:b1:72:4e:60:f7:2b:c3:a5:58:a7:58:7c:c0:29:
d5:48:b9:e3:4e:1b:77:fb:40:13:df:49:68:fd:19:
84:da:b7:a4:b7:39:56:c2:50:c5:61:89:a2:44:3c:
77:ab:35:a8:df:bd:b9:7e:35:94:94:09:3d:d3:b3:
a6:fa:b7:a7:be:21:67:74:41:d1:fe:17:37:44:ba:
0e:37:5a:04:1a:b0:30:40:56:6c:25:1c:ff:fd:a0:
9a:8e:e0:66:a3:9d:82:a5:e8:d2:0a:17:e2:81:9c:
f5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B3:A5:08:E6:DB:25:84:C9:C4:70:03:15:10:85:C5:80:04:84:98
X509v3 Authority Key Identifier:
keyid:B3:05:15:F4:7D:A9:25:D9:F9:01:38:08:AA:91:13:C2:BD:E9:6D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swUV9H2pJdn5ATgIqpETwr3pbZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/MLOlCObbJYTJxHADFRCFxYAEhJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/swUV9H2pJdn5ATgIqpETwr3pbZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.152.0/22
IPv6:
2a04:cdc0::/29
Signature Algorithm: sha256WithRSAEncryption
9e:fb:42:f5:fc:34:ae:f6:5f:34:e4:15:c5:bf:89:b1:09:33:
9d:da:db:01:3e:81:c0:05:65:56:54:05:56:53:90:28:36:c0:
34:2b:58:23:47:ac:7f:bd:a1:d4:ec:15:02:b0:2e:6e:65:1d:
e6:b3:98:23:eb:ab:cc:16:1e:e2:66:f7:79:4f:a6:38:90:2b:
3b:4a:9b:9d:c0:40:80:a6:4e:70:ad:01:c3:c9:07:d5:66:bc:
3e:a8:2a:b0:f3:87:cc:7f:08:1d:01:6a:0f:c7:08:16:84:64:
04:72:83:7e:f8:d2:2a:fc:13:7b:b0:a1:d6:e1:82:b6:ea:99:
39:19:f2:22:90:d9:92:fc:7b:98:08:8a:38:1f:f7:fb:8a:02:
e3:43:23:96:ec:8a:31:c9:83:70:76:f9:2d:74:08:fc:f5:06:
1a:de:65:d4:a3:c5:44:07:37:58:76:1b:7f:4d:0b:8a:38:e7:
2f:29:77:88:19:c7:fd:a1:5f:6a:41:cd:ee:d7:fa:b0:11:dc:
1d:a8:53:66:a9:2b:ee:c1:ee:cc:09:6d:56:b2:d9:41:26:76:
13:dd:56:68:48:82:76:3c:28:ef:cb:91:35:12:c2:b2:92:86:
8d:16:a7:e4:33:55:0a:50:47:ac:27:06:69:4b:a3:cd:e7:51:
cd:ed:c6:28
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZOYJ5D0sUC0IGG0f3p8V0ILMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMDUxNWY0N2RhOTI1ZDlmOTAxMzgwOGFhOTExM2MyYmRl
OTZkOWEwHhcNMjQxMjA1MTg0OTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMGIzYTUwOGU2ZGIyNTg0YzljNDcwMDMxNTEwODVjNTgwMDQ4NDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsz2MnaLWdFR8o5G+xGZ2biMEqZct
zrZ6rg4Gqdo1ujlNqHStSh5M0BTH5tQ+95uRhwQqJ2Rz3fAamzfyORdnEZ5f6SIi
m6/w/USncxNVHk1gy9UbB1/+E7QUd9l86ZOjTD39mZ7lE6Xgi1vLYUG16GGeVcqT
3GYq9TByV/1woVWuN02kuRrvhg3ynF3yvlQefNRGB/LAsXJOYPcrw6VYp1h8wCnV
SLnjTht3+0AT30lo/RmE2rektzlWwlDFYYmiRDx3qzWo3725fjWUlAk907Om+ren
viFndEHR/hc3RLoON1oEGrAwQFZsJRz//aCajuBmo52CpejSChfigZz1bwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFDCzpQjm2yWEycRwAxUQhcWABISYMB8GA1UdIwQY
MBaAFLMFFfR9qSXZ+QE4CKqRE8K96W2aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3dVVjlIMnBKZG41QVRnSXFwRVR3cjNwYlpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9lZjIxOTItZjJkOS00YTU2LTkzZjYt
MTczODI1MzliMDAwLzEvTUxPbENPYmJKWVRKeEhBREZSQ0Z4WUFFaEpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9lZjIxOTItZjJkOS00YTU2LTkzZjYtMTczODI1MzliMDAw
LzEvc3dVVjlIMnBKZG41QVRnSXFwRVR3cjNwYlpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuTWYMA0E
AgACMAcDBQMqBM3AMA0GCSqGSIb3DQEBCwUAA4IBAQCe+0L1/DSu9l805BXFv4mx
CTOd2tsBPoHABWVWVAVWU5AoNsA0K1gjR6x/vaHU7BUCsC5uZR3ms5gj66vMFh7i
Zvd5T6Y4kCs7SpudwECApk5wrQHDyQfVZrw+qCqw84fMfwgdAWoPxwgWhGQEcoN+
+NIq/BN7sKHW4YK26pk5GfIikNmS/HuYCIo4H/f7igLjQyOW7IoxyYNwdvktdAj8
9QYa3mXUo8VEBzdYdht/TQuKOOcvKXeIGcf9oV9qQc3u1/qwEdwdqFNmqSvuwe7M
CW1WstlBJnYT3VZoSIJ2PCjvy5E1EsKykoaNFqfkM1UKUEesJwZpS6PN51HN7cYo
-----END CERTIFICATE-----
Generated at Sun Dec 29 10:25:52 2024 by rpki-client on console-fra.rpki-client.org