Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/MDRMY_uj64wQhb-E1l45Gqj-fb8.roa
File: MDRMY_uj64wQhb-E1l45Gqj-fb8.roa (raw, json)
Hash identifier: C/pwkKAH+IPksRjFWwDvgeQAbR4aUV8hR0MDA8h7MXQ=
Subject key identifier: 30:34:4C:63:FB:A3:EB:8C:10:85:BF:84:D6:5E:39:1A:A8:FE:7D:BF
Certificate issuer: /CN=1143dd85fa01ebec01ee331a13179e8a33d9022f
Certificate serial: 018CC86F4721C0B200D9C5552545A1B98E6D
Authority key identifier: 11:43:DD:85:FA:01:EB:EC:01:EE:33:1A:13:17:9E:8A:33:D9:02:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/MDRMY_uj64wQhb-E1l45Gqj-fb8.roa
Signing time: Tue 02 Jan 2024 04:29:45 +0000
ROA not before: Tue 02 Jan 2024 04:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9155
IP address blocks: 91.221.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:47:21:c0:b2:00:d9:c5:55:25:45:a1:b9:8e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1143dd85fa01ebec01ee331a13179e8a33d9022f
Validity
Not Before: Jan 2 04:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30344c63fba3eb8c1085bf84d65e391aa8fe7dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:61:99:be:dd:f9:5c:36:b3:39:e4:4d:83:9d:
f0:c8:7d:12:50:a0:00:1b:34:5e:b6:b7:81:88:89:
95:b1:da:55:bd:10:e1:82:37:c7:16:db:ca:25:ff:
31:f2:23:ab:71:47:95:b6:a1:0a:30:ad:99:16:71:
f7:12:69:bf:db:e6:8d:de:b0:da:14:64:61:64:76:
10:ab:8e:b1:76:a5:16:31:81:47:5c:5a:e2:56:2b:
6d:59:88:cf:45:86:09:4f:5a:8b:6e:27:ea:bd:37:
56:d5:1f:8e:5f:58:66:14:7b:fe:c7:b6:78:1f:57:
4d:a7:9f:76:e9:2b:7f:0a:96:aa:37:c5:58:e6:c0:
47:8d:b4:ef:ee:76:56:2c:8d:71:77:de:55:5a:d7:
7c:90:8c:d9:37:21:f3:1e:a6:d2:17:20:ff:e0:66:
58:b8:01:8f:9e:ce:c6:2c:97:55:38:62:cf:13:7b:
5c:64:84:74:90:55:b5:92:ed:74:78:b1:e7:77:ab:
8c:97:6b:52:dc:db:d7:ab:64:a8:a7:11:8c:c4:cb:
8b:c6:de:3f:0e:d3:6b:f0:5f:25:1e:ef:18:0c:88:
d3:dd:6b:b5:07:0c:d3:21:3d:b1:8c:16:7a:c3:a5:
e4:56:06:06:f3:5b:b6:2d:6e:e2:25:4f:ee:8f:89:
8e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:34:4C:63:FB:A3:EB:8C:10:85:BF:84:D6:5E:39:1A:A8:FE:7D:BF
X509v3 Authority Key Identifier:
keyid:11:43:DD:85:FA:01:EB:EC:01:EE:33:1A:13:17:9E:8A:33:D9:02:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUPdhfoB6-wB7jMaExeeijPZAi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/MDRMY_uj64wQhb-E1l45Gqj-fb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6cddca-fad7-4494-bc14-00abc471f9c1/1/EUPdhfoB6-wB7jMaExeeijPZAi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.128.0/24
Signature Algorithm: sha256WithRSAEncryption
70:b6:7c:41:53:cc:32:69:63:d9:53:67:0a:07:09:0b:cf:04:
7e:76:68:01:61:8b:bf:95:6a:23:b7:82:79:6d:fd:37:fa:d8:
be:72:d8:64:60:0a:f7:83:bc:8e:ca:b5:e8:16:9c:9f:b0:52:
d3:6a:5d:31:44:84:3f:50:1d:02:98:c4:77:d6:3d:f7:e1:e0:
90:31:64:01:81:7b:0b:5d:d4:8c:da:24:55:30:09:ff:55:16:
1b:44:7e:e3:f6:3a:bc:5c:1e:5a:38:2d:c4:ba:f1:b3:78:1d:
23:4f:0f:44:a6:e6:d5:5a:8f:f4:72:8c:c5:49:4e:20:20:8f:
e9:59:8f:1e:06:9a:81:3e:3e:ef:a6:ee:bf:f0:49:89:d5:94:
fc:b1:6a:6c:0f:38:9d:af:30:19:15:85:d7:69:68:51:af:76:
67:dd:45:1e:75:54:bb:29:88:50:3b:54:d7:9e:2a:0b:6c:f7:
5c:68:d9:11:0d:cb:d5:07:e9:79:7c:15:99:83:9f:2b:45:64:
e2:a6:65:b5:ea:86:3a:89:1e:ea:41:22:a7:90:4d:ea:c5:4a:
47:a1:77:a9:f5:34:47:94:28:94:d9:9a:3b:df:e7:cb:1c:8e:
04:b0:63:3c:4f:4d:f0:b9:56:69:b9:77:3e:e6:89:1e:c8:e7:
7f:a6:44:3d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIb0chwLIA2cVVJUWhuY5tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExNDNkZDg1ZmEwMWViZWMwMWVlMzMxYTEzMTc5ZThhMzNk
OTAyMmYwHhcNMjQwMTAyMDQyOTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDM0NGM2M2ZiYTNlYjhjMTA4NWJmODRkNjVlMzkxYWE4ZmU3ZGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymGZvt35XDazOeRNg53wyH0SUKAA
GzRetreBiImVsdpVvRDhgjfHFtvKJf8x8iOrcUeVtqEKMK2ZFnH3Emm/2+aN3rDa
FGRhZHYQq46xdqUWMYFHXFriVittWYjPRYYJT1qLbifqvTdW1R+OX1hmFHv+x7Z4
H1dNp5926St/CpaqN8VY5sBHjbTv7nZWLI1xd95VWtd8kIzZNyHzHqbSFyD/4GZY
uAGPns7GLJdVOGLPE3tcZIR0kFW1ku10eLHnd6uMl2tS3NvXq2SopxGMxMuLxt4/
DtNr8F8lHu8YDIjT3Wu1BwzTIT2xjBZ6w6XkVgYG81u2LW7iJU/uj4mOiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDA0TGP7o+uMEIW/hNZeORqo/n2/MB8GA1UdIwQY
MBaAFBFD3YX6AevsAe4zGhMXnooz2QIvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVVQZGhmb0I2LXdCN2pNYUV4ZWVpalBaQWk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC82Y2RkY2EtZmFkNy00NDk0LWJjMTQt
MDBhYmM0NzFmOWMxLzEvTURSTVlfdWo2NHdRaGItRTFsNDVHcWotZmI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC82Y2RkY2EtZmFkNy00NDk0LWJjMTQtMDBhYmM0NzFmOWMx
LzEvRVVQZGhmb0I2LXdCN2pNYUV4ZWVpalBaQWk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW92AMA0G
CSqGSIb3DQEBCwUAA4IBAQBwtnxBU8wyaWPZU2cKBwkLzwR+dmgBYYu/lWojt4J5
bf03+ti+cthkYAr3g7yOyrXoFpyfsFLTal0xRIQ/UB0CmMR31j334eCQMWQBgXsL
XdSM2iRVMAn/VRYbRH7j9jq8XB5aOC3EuvGzeB0jTw9EpubVWo/0cozFSU4gII/p
WY8eBpqBPj7vpu6/8EmJ1ZT8sWpsDzidrzAZFYXXaWhRr3Zn3UUedVS7KYhQO1TX
nioLbPdcaNkRDcvVB+l5fBWZg58rRWTipmW16oY6iR7qQSKnkE3qxUpHoXep9TRH
lCiU2Zo73+fLHI4EsGM8T03wuVZpuXc+5okeyOd/pkQ9
-----END CERTIFICATE-----
Generated at Tue Nov 26 22:12:30 2024 by rpki-client on console-ams.rpki-client.org