Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/Mb24bsmo9dD5q6Lov0916RzAU0k.roa
File: Mb24bsmo9dD5q6Lov0916RzAU0k.roa (raw, json)
Hash identifier: 9CBr/VeXfX6hSieJuz0AcWVtk4VqCq6cQVPBEDejzlo=
Subject key identifier: 31:BD:B8:6E:C9:A8:F5:D0:F9:AB:A2:E8:BF:4F:75:E9:1C:C0:53:49
Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Certificate serial: 018CC56E303D951FAEE5AEF8198570EF1209
Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/Mb24bsmo9dD5q6Lov0916RzAU0k.roa
Signing time: Mon 01 Jan 2024 14:29:42 +0000
ROA not before: Mon 01 Jan 2024 14:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39143
IP address blocks: 89.188.162.0/24 maxlen: 24
185.211.240.0/22 maxlen: 23
185.211.241.0/24 maxlen: 24
2a03:8641::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:30:3d:95:1f:ae:e5:ae:f8:19:85:70:ef:12:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Validity
Not Before: Jan 1 14:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31bdb86ec9a8f5d0f9aba2e8bf4f75e91cc05349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ba:21:a8:e6:2a:f8:68:50:2f:51:70:8e:1b:
29:0f:52:b0:06:00:4c:d9:67:fe:d8:e9:13:54:c6:
a9:ad:45:f4:d7:7f:0e:74:10:65:94:ef:9f:89:6b:
ef:d9:25:03:d1:29:7f:7a:13:14:29:13:7c:68:d5:
22:dc:ef:ba:73:2a:7b:72:19:10:82:7d:99:f9:4a:
69:ef:6b:b1:91:bb:ba:af:8d:4b:f9:a3:5e:be:c7:
3b:9e:fa:2d:dc:7c:4e:7c:8e:6d:3b:d1:cf:93:4e:
21:aa:72:24:20:ae:f7:0c:82:6a:2e:4d:dc:d3:0e:
9b:12:8a:06:64:7e:de:66:7d:3a:53:3c:1e:7f:34:
10:b8:e7:0f:06:75:0a:5b:bb:75:e3:83:5b:ba:b4:
12:a3:bc:0d:17:06:52:cd:c3:5c:2c:cf:66:c2:12:
51:32:38:fb:2c:d9:56:ae:c2:54:e6:6e:07:ec:77:
27:29:ec:ea:30:ab:0c:1a:5a:2c:5a:eb:0e:78:7f:
b4:88:49:42:ae:55:cd:f2:fb:5d:c4:4f:17:7f:35:
09:5b:3e:58:17:06:61:63:87:80:3f:96:b0:b5:7c:
da:e9:37:61:89:b0:53:36:a9:ab:41:fd:c0:31:71:
54:04:8c:56:61:13:c3:f2:4f:8e:f6:72:d2:ee:c4:
31:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BD:B8:6E:C9:A8:F5:D0:F9:AB:A2:E8:BF:4F:75:E9:1C:C0:53:49
X509v3 Authority Key Identifier:
keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/Mb24bsmo9dD5q6Lov0916RzAU0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.188.162.0/24
185.211.240.0/22
IPv6:
2a03:8641::/32
Signature Algorithm: sha256WithRSAEncryption
03:18:ba:43:bc:c7:90:af:9e:38:c4:fa:52:a8:76:1e:23:93:
4a:d1:1e:26:11:b0:43:d8:ac:1e:df:fc:58:2a:37:12:23:a7:
e8:1b:c6:75:42:21:3c:e1:db:17:19:48:21:ac:0c:31:21:99:
68:57:4d:4e:40:db:d9:d0:4a:ee:a3:b6:65:a9:d8:ae:52:1c:
dd:e9:4d:0b:6b:5a:1b:22:9c:c3:cd:b5:57:99:25:76:7a:a2:
dc:3d:24:e1:25:c6:b8:78:13:3b:2f:e9:85:b9:7c:4f:b6:9f:
72:84:94:dd:b8:72:54:fc:1e:14:c7:a3:fc:df:9e:39:d2:ed:
fe:84:5b:0a:32:58:f9:52:97:b9:96:f6:ea:eb:3a:6b:03:bc:
be:3d:fd:6f:93:f1:f2:7a:4f:6d:4c:84:f5:c8:50:20:f1:70:
75:21:d7:f3:e0:75:da:95:4b:75:a0:11:45:45:65:c7:11:79:
6c:36:2e:c8:11:b9:ed:d3:40:6f:07:4d:9d:cd:27:f7:0b:31:
1f:5f:4b:0d:e5:48:9b:0e:07:c5:09:7e:df:fb:43:7f:1d:a3:
91:2b:10:74:48:d1:90:af:02:54:27:c1:13:2c:c8:f3:ae:bd:
5b:23:d9:30:5f:c0:16:a4:27:d5:b2:da:8a:3a:9d:e7:43:bb:
dd:b8:62:01
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzFbjA9lR+u5a74GYVw7xIJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZTNkOTJiZmUxNjYxOWNhNTAwYzAzMjY3ZWZmYTlhYTdj
YTBjNDcwHhcNMjQwMTAxMTQyOTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMWJkYjg2ZWM5YThmNWQwZjlhYmEyZThiZjRmNzVlOTFjYzA1MzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrohqOYq+GhQL1FwjhspD1KwBgBM
2Wf+2OkTVMaprUX0138OdBBllO+fiWvv2SUD0Sl/ehMUKRN8aNUi3O+6cyp7chkQ
gn2Z+Upp72uxkbu6r41L+aNevsc7nvot3HxOfI5tO9HPk04hqnIkIK73DIJqLk3c
0w6bEooGZH7eZn06UzwefzQQuOcPBnUKW7t144NburQSo7wNFwZSzcNcLM9mwhJR
Mjj7LNlWrsJU5m4H7HcnKezqMKsMGlosWusOeH+0iElCrlXN8vtdxE8XfzUJWz5Y
FwZhY4eAP5awtXza6TdhibBTNqmrQf3AMXFUBIxWYRPD8k+O9nLS7sQx4QIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFDG9uG7JqPXQ+aui6L9PdekcwFNJMB8GA1UdIwQY
MBaAFCPj2Sv+FmGcpQDAMmfv+pqnygxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYt
ZjFiZjBjMzNhOTA4LzEvTWIyNGJzbW85ZEQ1cTZMb3YwOTE2UnpBVTBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYtZjFiZjBjMzNhOTA4
LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAWbyiAwQC
udPwMA0EAgACMAcDBQAqA4ZBMA0GCSqGSIb3DQEBCwUAA4IBAQADGLpDvMeQr544
xPpSqHYeI5NK0R4mEbBD2Kwe3/xYKjcSI6foG8Z1QiE84dsXGUghrAwxIZloV01O
QNvZ0Eruo7ZlqdiuUhzd6U0La1obIpzDzbVXmSV2eqLcPSThJca4eBM7L+mFuXxP
tp9yhJTduHJU/B4Ux6P835450u3+hFsKMlj5Upe5lvbq6zprA7y+Pf1vk/Hyek9t
TIT1yFAg8XB1Idfz4HXalUt1oBFFRWXHEXlsNi7IEbnt00BvB02dzSf3CzEfX0sN
5UibDgfFCX7f+0N/HaORKxB0SNGQrwJUJ8ETLMjzrr1bI9kwX8AWpCfVstqKOp3n
Q7vduGIB
-----END CERTIFICATE-----
Generated at Sat May 18 02:07:20 2024 by rpki-client on console-ams.rpki-client.org