Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/mBnsm8errkRxiRVR34MpaYn4x4k.roa
File: mBnsm8errkRxiRVR34MpaYn4x4k.roa (raw, json)
Hash identifier: LtVw6SMsQiI0C7qLEkwEnoYq8MSqnnjAAIjbheJ1XKA=
Subject key identifier: 98:19:EC:9B:C7:AB:AE:44:71:89:15:51:DF:83:29:69:89:F8:C7:89
Certificate issuer: /CN=4b1a238e043fe063a723b63159015393a64afceb
Certificate serial: 018E50976D401DC7EE67F438D70C72AD7769
Authority key identifier: 4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/mBnsm8errkRxiRVR34MpaYn4x4k.roa
Signing time: Mon 18 Mar 2024 08:04:44 +0000
ROA not before: Mon 18 Mar 2024 08:04:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12350
IP address blocks: 193.247.107.0/24 maxlen: 24
193.247.108.0/24 maxlen: 24
193.247.110.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.mft
rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:50:97:6d:40:1d:c7:ee:67:f4:38:d7:0c:72:ad:77:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b1a238e043fe063a723b63159015393a64afceb
Validity
Not Before: Mar 18 08:04:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9819ec9bc7abae4471891551df83296989f8c789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0a:a7:86:6c:22:3a:5c:77:92:cc:b2:99:cb:
dd:35:4b:f8:58:46:10:20:56:f9:5e:23:95:b8:c8:
ac:41:bc:a9:31:89:9a:53:3c:fb:7c:c0:f1:d4:a2:
8d:68:67:bf:80:f4:7c:9d:63:2f:d0:1b:7b:8a:08:
1b:c8:75:6e:9c:99:9a:45:50:5e:18:7b:d2:7a:8e:
7c:9b:f9:a9:7c:17:e1:f4:a3:1f:e0:fe:76:59:24:
4a:c0:6e:e7:8a:d7:d5:e7:1b:21:e0:af:3e:b2:ca:
fb:6d:f4:8d:fb:15:68:17:bc:3f:1f:ab:22:76:54:
59:53:4a:bd:88:a0:54:fe:d0:fc:e1:23:88:57:ab:
e3:a0:84:36:7c:0f:f8:a7:3d:1f:f8:36:9e:69:7f:
79:89:f8:fe:f9:2d:0b:09:02:92:ef:50:45:aa:68:
60:4f:f4:3d:eb:b9:20:f9:e5:02:66:6f:b4:08:e2:
29:65:d8:c0:b2:cd:66:b0:9d:bd:c6:ae:28:d2:33:
6c:46:7e:79:48:51:b6:4e:cb:a5:44:f9:99:9a:ba:
ba:67:fa:94:24:29:9f:41:e2:d5:b6:b9:95:2f:f7:
bd:35:a8:3e:c3:d2:51:5f:f4:50:6e:3d:4e:3f:54:
3f:b8:1e:04:03:3e:20:b9:a7:1f:58:a8:fb:76:e6:
8a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:19:EC:9B:C7:AB:AE:44:71:89:15:51:DF:83:29:69:89:F8:C7:89
X509v3 Authority Key Identifier:
keyid:4B:1A:23:8E:04:3F:E0:63:A7:23:B6:31:59:01:53:93:A6:4A:FC:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/mBnsm8errkRxiRVR34MpaYn4x4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9a1e6f-2e1c-4743-a7a6-06f36628c8a1/1/SxojjgQ_4GOnI7YxWQFTk6ZK_Os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.107.0-193.247.108.255
193.247.110.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:ff:6f:a9:9c:2f:95:8a:e8:0b:4b:4d:fd:14:f3:0b:0c:83:
cb:b1:3a:83:36:3f:cd:2e:f6:db:74:18:da:67:40:8d:31:61:
85:9f:ae:dc:a3:87:39:cb:b2:6c:5b:95:e7:9d:e5:c2:74:9f:
c5:c9:5f:eb:01:df:72:74:65:6d:9a:f1:88:29:d4:63:59:98:
db:49:be:a7:41:b9:fa:ec:7a:fa:76:99:23:3e:aa:35:25:58:
ee:14:42:bb:a6:91:b0:ea:d3:7e:37:84:24:c1:51:c0:32:0e:
15:ed:de:21:32:ab:f9:e7:21:8a:fe:ae:cb:41:3f:be:3e:94:
ab:41:43:ba:e7:74:2d:5d:3b:62:0c:d4:44:0f:4c:bd:b1:a0:
63:da:ef:0f:00:3a:25:10:49:fb:8d:f2:07:d5:96:a9:9f:d3:
3a:0e:61:92:3e:5b:ff:3d:2e:d2:c0:dd:5a:81:ad:c7:5a:fd:
c7:88:c3:4d:9d:82:8b:49:78:9d:74:f0:39:f7:90:57:d4:5c:
ed:59:69:dc:5b:18:0a:e9:ef:fa:5c:5c:62:5c:c2:78:4b:94:
a0:ae:49:36:ab:74:10:c7:a6:f1:7c:ab:88:a1:df:ba:9c:3f:
a2:47:0a:45:71:aa:9c:89:b4:00:da:81:75:d1:bf:89:33:5e:
ef:69:79:d3
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAY5Ql21AHcfuZ/Q41wxyrXdpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMWEyMzhlMDQzZmUwNjNhNzIzYjYzMTU5MDE1MzkzYTY0
YWZjZWIwHhcNMjQwMzE4MDgwNDQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODE5ZWM5YmM3YWJhZTQ0NzE4OTE1NTFkZjgzMjk2OTg5ZjhjNzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQqnhmwiOlx3ksyymcvdNUv4WEYQ
IFb5XiOVuMisQbypMYmaUzz7fMDx1KKNaGe/gPR8nWMv0Bt7iggbyHVunJmaRVBe
GHvSeo58m/mpfBfh9KMf4P52WSRKwG7nitfV5xsh4K8+ssr7bfSN+xVoF7w/H6si
dlRZU0q9iKBU/tD84SOIV6vjoIQ2fA/4pz0f+DaeaX95ifj++S0LCQKS71BFqmhg
T/Q967kg+eUCZm+0COIpZdjAss1msJ29xq4o0jNsRn55SFG2TsulRPmZmrq6Z/qU
JCmfQeLVtrmVL/e9Nag+w9JRX/RQbj1OP1Q/uB4EAz4guacfWKj7duaKswIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFJgZ7JvHq65EcYkVUd+DKWmJ+MeJMB8GA1UdIwQY
MBaAFEsaI44EP+BjpyO2MVkBU5OmSvzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3hvampnUV80R09uSTdZeFdRRlRrNlpLX09zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi85YTFlNmYtMmUxYy00NzQzLWE3YTYt
MDZmMzY2MjhjOGExLzEvbUJuc204ZXJya1J4aVJWUjM0TXBhWW40eDRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi85YTFlNmYtMmUxYy00NzQzLWE3YTYtMDZmMzY2MjhjOGEx
LzEvU3hvampnUV80R09uSTdZeFdRRlRrNlpLX09zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBADB92sD
BADB92wDBAHB924wDQYJKoZIhvcNAQELBQADggEBAKH/b6mcL5WK6AtLTf0U8wsM
g8uxOoM2P80u9tt0GNpnQI0xYYWfrtyjhznLsmxbleed5cJ0n8XJX+sB33J0ZW2a
8Ygp1GNZmNtJvqdBufrsevp2mSM+qjUlWO4UQrumkbDq0343hCTBUcAyDhXt3iEy
q/nnIYr+rstBP74+lKtBQ7rndC1dO2IM1EQPTL2xoGPa7w8AOiUQSfuN8gfVlqmf
0zoOYZI+W/89LtLA3VqBrcda/ceIw02dgotJeJ108Dn3kFfUXO1ZadxbGArp7/pc
XGJcwnhLlKCuSTardBDHpvF8q4ih37qcP6JHCkVxqpyJtADagXXRv4kzXu9pedM=
-----END CERTIFICATE-----
Generated at Fri Sep 20 19:00:13 2024 by rpki-client on console-fra.rpki-client.org