Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/mW1eh09fdhiPDvk5XuIPibMDyYQ.roa
File: mW1eh09fdhiPDvk5XuIPibMDyYQ.roa (raw, json)
Hash identifier: 4BVCn1i/jKxGpdZeB3uBn52wxYDGwlJTsbtcb9e4kWA=
Subject key identifier: 99:6D:5E:87:4F:5F:76:18:8F:0E:F9:39:5E:E2:0F:89:B3:03:C9:84
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 018F905BC76966F1FBB6EB57DA911CE07497
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/mW1eh09fdhiPDvk5XuIPibMDyYQ.roa
Signing time: Sun 19 May 2024 10:18:04 +0000
ROA not before: Sun 19 May 2024 10:18:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216125
IP address blocks: 77.237.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:90:5b:c7:69:66:f1:fb:b6:eb:57:da:91:1c:e0:74:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: May 19 10:18:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=996d5e874f5f76188f0ef9395ee20f89b303c984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ba:cd:c4:ee:6d:21:77:f3:7e:d9:bd:be:5a:
b1:aa:44:d5:b3:6f:24:35:11:88:58:b0:75:cf:8c:
09:07:62:f4:23:f5:4e:75:bb:16:87:c0:7a:70:75:
93:1a:f9:9d:0c:66:1d:5d:18:0c:50:ca:53:78:b3:
6e:1f:44:2d:b2:a7:c8:6f:c6:41:12:df:df:8d:eb:
c0:b9:7e:13:6d:35:48:40:21:a4:e6:44:8d:8a:5f:
69:b2:0e:67:b6:cd:38:95:fe:f3:70:86:49:e2:c7:
40:2e:b3:c6:60:f7:d6:ed:dd:8e:da:32:76:bc:83:
dd:4f:5b:26:6a:34:68:aa:e5:fb:a9:77:a2:0d:87:
27:54:aa:d5:14:ec:4f:19:27:30:aa:8d:84:d9:9f:
6c:bb:67:c9:17:28:81:ee:f6:d8:da:85:57:8f:90:
2b:de:09:8f:4f:24:60:8e:46:92:01:9d:82:b3:cf:
da:ab:de:b7:4f:ba:58:35:bb:c2:56:cb:72:a7:e0:
ff:0f:20:58:e5:d3:a9:c7:6d:20:b4:ab:95:43:93:
e1:36:e4:cd:23:71:b7:2a:ce:89:ec:37:3d:6d:3e:
54:6b:4b:0c:52:ac:86:02:f2:65:9b:f7:0d:88:c6:
70:08:02:c9:b8:ae:87:f5:ae:4c:5c:f8:4d:96:e3:
99:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6D:5E:87:4F:5F:76:18:8F:0E:F9:39:5E:E2:0F:89:B3:03:C9:84
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/mW1eh09fdhiPDvk5XuIPibMDyYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.237.64.0/24
Signature Algorithm: sha256WithRSAEncryption
20:d3:f4:1f:2a:fc:9d:b1:2d:d1:3d:ac:6b:41:7b:5f:b2:b5:
64:ea:db:5e:2e:d0:bb:13:de:ab:40:2d:37:31:d4:0d:f9:d1:
4b:49:ca:35:ac:4c:c8:b0:12:d7:00:a8:c1:8b:54:6c:8b:bc:
20:fb:29:76:9a:63:63:9b:98:d0:a3:2c:b0:e5:b2:27:55:a6:
88:2e:32:1b:70:fa:07:11:e8:4c:45:6e:af:8e:55:df:11:0f:
d0:78:a0:fc:c6:c5:22:48:37:38:fa:f1:7e:3d:59:f8:af:0a:
2b:52:fd:53:b5:f9:78:19:a3:a8:17:07:02:4d:ee:39:0b:18:
2b:1b:71:12:14:3e:3b:06:7e:cb:b6:29:c0:68:13:1f:9e:d1:
c1:34:a6:c9:70:4f:0e:34:e2:23:2f:d4:4f:19:7f:8e:4c:82:
02:05:64:f9:ee:09:45:01:5f:f3:ae:a0:e3:bf:db:14:0a:4f:
e6:a4:14:93:0d:7c:ea:85:95:9d:88:82:d1:b7:70:b2:1e:b9:
06:f5:38:bf:9c:26:f0:91:4f:19:bd:fb:41:49:40:a4:a0:fb:
37:d5:6c:c4:02:02:64:80:dd:92:01:a9:06:7c:ef:07:f7:a4:
54:a9:16:8e:71:54:82:5e:9e:ad:ff:82:7b:8a:67:52:b5:56:
27:40:c0:6a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY+QW8dpZvH7tutX2pEc4HSXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxY2NhOWYxNWUxOTIxOTUzYTYyOGM4YWQyYWM0YmU5Nzdi
NmMzMDMwHhcNMjQwNTE5MTAxODA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTZkNWU4NzRmNWY3NjE4OGYwZWY5Mzk1ZWUyMGY4OWIzMDNjOTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbrNxO5tIXfzftm9vlqxqkTVs28k
NRGIWLB1z4wJB2L0I/VOdbsWh8B6cHWTGvmdDGYdXRgMUMpTeLNuH0QtsqfIb8ZB
Et/fjevAuX4TbTVIQCGk5kSNil9psg5nts04lf7zcIZJ4sdALrPGYPfW7d2O2jJ2
vIPdT1smajRoquX7qXeiDYcnVKrVFOxPGScwqo2E2Z9su2fJFyiB7vbY2oVXj5Ar
3gmPTyRgjkaSAZ2Cs8/aq963T7pYNbvCVstyp+D/DyBY5dOpx20gtKuVQ5PhNuTN
I3G3Ks6J7Dc9bT5Ua0sMUqyGAvJlm/cNiMZwCALJuK6H9a5MXPhNluOZswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJltXodPX3YYjw75OV7iD4mzA8mEMB8GA1UdIwQY
MBaAFIHMqfFeGSGVOmKMitKsS+l3tsMDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUt
MjIwNmNjMmU2OTFjLzEvbVcxZWgwOWZkaGlQRHZrNVh1SVBpYk1EeVlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xZWEyYjAtNmI5YS00NGQ3LWEyZTUtMjIwNmNjMmU2OTFj
LzEvZ2N5cDhWNFpJWlU2WW95SzBxeEw2WGUyd3dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATe1AMA0G
CSqGSIb3DQEBCwUAA4IBAQAg0/QfKvydsS3RPaxrQXtfsrVk6tteLtC7E96rQC03
MdQN+dFLSco1rEzIsBLXAKjBi1Rsi7wg+yl2mmNjm5jQoyyw5bInVaaILjIbcPoH
EehMRW6vjlXfEQ/QeKD8xsUiSDc4+vF+PVn4rworUv1Ttfl4GaOoFwcCTe45Cxgr
G3ESFD47Bn7LtinAaBMfntHBNKbJcE8ONOIjL9RPGX+OTIICBWT57glFAV/zrqDj
v9sUCk/mpBSTDXzqhZWdiILRt3CyHrkG9Ti/nCbwkU8ZvftBSUCkoPs31WzEAgJk
gN2SAakGfO8H96RUqRaOcVSCXp6t/4J7imdStVYnQMBq
-----END CERTIFICATE-----
Generated at Sat Sep 28 18:39:16 2024 by rpki-client on console-fra.rpki-client.org