Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/0mrrwDjiwNALsZW_JZ0iUydHkHM.roa
File: 0mrrwDjiwNALsZW_JZ0iUydHkHM.roa (raw, json)
Hash identifier: CY0sGiuBgZmvv2z21hzC6XWqHyED6i6s5RwNleOQquk=
Subject key identifier: D2:6A:EB:C0:38:E2:C0:D0:0B:B1:95:BF:25:9D:22:53:27:47:90:73
Certificate issuer: /CN=335ca521362226d03c1829003d81d498aa838f33
Certificate serial: 018CC492CCDC2647E14922E0CC7A8D8E3C57
Authority key identifier: 33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/0mrrwDjiwNALsZW_JZ0iUydHkHM.roa
Signing time: Mon 01 Jan 2024 10:30:04 +0000
ROA not before: Mon 01 Jan 2024 10:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200393
IP address blocks: 185.186.223.0/24 maxlen: 24
2a11:1e40:5aa5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:cc:dc:26:47:e1:49:22:e0:cc:7a:8d:8e:3c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=335ca521362226d03c1829003d81d498aa838f33
Validity
Not Before: Jan 1 10:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d26aebc038e2c0d00bb195bf259d225327479073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:46:33:fa:55:63:fe:af:5b:24:eb:a0:41:14:
8b:36:bf:43:81:95:af:2d:9f:57:67:9c:42:5d:4a:
f9:a3:43:e3:5f:92:e8:4a:a2:d1:d7:30:32:c3:c5:
18:e0:9d:b7:68:58:a2:f2:6b:e4:e4:f3:53:2e:6d:
87:8f:b5:a7:be:3d:a2:83:3c:cc:af:bc:f1:d1:7f:
28:8e:b0:0d:0a:dd:02:8d:0b:4b:89:fe:b4:6e:72:
02:c9:d4:a1:9f:36:ce:20:18:35:4f:07:7f:e1:a3:
57:2f:63:25:5b:b0:c8:42:f9:cf:17:01:e1:21:38:
74:9b:d2:b9:19:14:4e:50:67:01:97:0c:e8:b9:4b:
5a:c1:5a:25:21:b8:f2:07:88:e5:51:94:72:ba:48:
bc:b6:f9:d4:4c:13:41:94:80:a0:8e:f8:f7:f9:5a:
d5:9c:04:59:04:88:bf:21:b7:1e:b0:0c:da:f5:60:
72:6b:bc:92:80:de:e6:3c:91:ac:cf:4f:44:e6:00:
b0:54:ec:6b:2f:2b:7f:b9:4d:54:fe:45:cf:e4:bf:
e1:b2:4a:4c:ff:0b:46:97:ab:d5:92:af:57:58:80:
3b:39:64:a3:da:f1:6a:ba:a7:b3:7e:2d:32:1f:ec:
16:ec:a5:36:cb:f3:ad:73:e2:b9:12:78:4f:22:31:
03:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6A:EB:C0:38:E2:C0:D0:0B:B1:95:BF:25:9D:22:53:27:47:90:73
X509v3 Authority Key Identifier:
keyid:33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/0mrrwDjiwNALsZW_JZ0iUydHkHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.223.0/24
IPv6:
2a11:1e40:5aa5::/48
Signature Algorithm: sha256WithRSAEncryption
3a:c5:d1:8f:c9:da:40:9e:8b:52:8f:6e:99:a2:6a:01:cf:04:
d9:9b:5c:88:cb:63:73:a3:c9:3c:30:69:31:b7:07:81:38:58:
a2:a5:35:da:6d:64:79:e5:46:d6:1e:ec:4e:5b:64:63:ee:89:
b3:b6:71:44:83:9d:2b:1b:95:40:29:aa:46:29:2e:6e:1c:59:
49:98:8f:1d:07:58:bf:8b:11:1e:32:5b:1b:26:3f:04:32:cb:
60:fe:86:0f:d1:12:84:11:ec:3f:f7:18:78:ea:81:fc:bc:19:
d6:ae:16:9f:f9:0f:60:9f:35:c5:79:d7:a5:19:02:71:50:85:
2e:e2:e2:b4:17:ba:38:e1:a1:c9:b9:01:66:60:40:6f:3c:40:
f0:1f:73:88:35:be:68:bd:ba:15:3e:0b:e9:67:02:cb:b8:0f:
06:19:e8:a6:ab:63:15:62:fa:3e:58:43:23:f3:dd:37:f0:96:
ac:c2:3f:6e:6e:4d:de:3e:bf:f4:f7:15:f4:49:49:64:17:cc:
f8:d2:c5:44:f9:07:9b:7d:0e:6e:79:57:fd:ee:6f:34:43:66:
e8:98:f2:b5:35:d6:64:8f:6a:25:71:5b:2f:b3:08:8b:d9:57:
82:ed:f8:b8:18:ef:66:7b:f2:01:8d:3c:37:10:ed:3a:ff:22:
ef:64:60:23
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzEkszcJkfhSSLgzHqNjjxXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNWNhNTIxMzYyMjI2ZDAzYzE4MjkwMDNkODFkNDk4YWE4
MzhmMzMwHhcNMjQwMTAxMTAzMDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjZhZWJjMDM4ZTJjMGQwMGJiMTk1YmYyNTlkMjI1MzI3NDc5MDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kYz+lVj/q9bJOugQRSLNr9DgZWv
LZ9XZ5xCXUr5o0PjX5LoSqLR1zAyw8UY4J23aFii8mvk5PNTLm2Hj7Wnvj2igzzM
r7zx0X8ojrANCt0CjQtLif60bnICydShnzbOIBg1Twd/4aNXL2MlW7DIQvnPFwHh
ITh0m9K5GRROUGcBlwzouUtawVolIbjyB4jlUZRyuki8tvnUTBNBlICgjvj3+VrV
nARZBIi/IbcesAza9WBya7ySgN7mPJGsz09E5gCwVOxrLyt/uU1U/kXP5L/hskpM
/wtGl6vVkq9XWIA7OWSj2vFquqezfi0yH+wW7KU2y/Otc+K5EnhPIjEDhQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNJq68A44sDQC7GVvyWdIlMnR5BzMB8GA1UdIwQY
MBaAFDNcpSE2IibQPBgpAD2B1Jiqg48zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTF5bElUWWlKdEE4R0NrQVBZSFVtS3FEanpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9kYzYwOGEtMTc1ZS00MmQzLTkzZDgt
OTc0YzQ0YWI5Y2ZiLzEvMG1ycndEaml3TkFMc1pXX0paMGlVeWRIa0hNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9kYzYwOGEtMTc1ZS00MmQzLTkzZDgtOTc0YzQ0YWI5Y2Zi
LzEvTTF5bElUWWlKdEE4R0NrQVBZSFVtS3FEanpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAubrfMA8E
AgACMAkDBwAqER5AWqUwDQYJKoZIhvcNAQELBQADggEBADrF0Y/J2kCei1KPbpmi
agHPBNmbXIjLY3OjyTwwaTG3B4E4WKKlNdptZHnlRtYe7E5bZGPuibO2cUSDnSsb
lUApqkYpLm4cWUmYjx0HWL+LER4yWxsmPwQyy2D+hg/REoQR7D/3GHjqgfy8Gdau
Fp/5D2CfNcV516UZAnFQhS7i4rQXujjhocm5AWZgQG88QPAfc4g1vmi9uhU+C+ln
Asu4DwYZ6KarYxVi+j5YQyPz3TfwlqzCP25uTd4+v/T3FfRJSWQXzPjSxUT5B5t9
Dm55V/3ubzRDZuiY8rU11mSPaiVxWy+zCIvZV4Lt+LgY72Z78gGNPDcQ7Tr/Iu9k
YCM=
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:39:05 2024 by rpki-client on console-ams.rpki-client.org