Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/M_n6ZSx3bKA3NBNV1bNPequv6hk.roa
File: M_n6ZSx3bKA3NBNV1bNPequv6hk.roa (raw, json)
Hash identifier: ROFbip2OIf2+1GopeB3fT6uNX1Zx+HMwSbhZsttSdp8=
Subject key identifier: 33:F9:FA:65:2C:77:6C:A0:37:34:13:55:D5:B3:4F:7A:AB:AF:EA:19
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 018CC794F939E56238B330CB8A0B733E7188
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/M_n6ZSx3bKA3NBNV1bNPequv6hk.roa
Signing time: Tue 02 Jan 2024 00:31:18 +0000
ROA not before: Tue 02 Jan 2024 00:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54339
IP address blocks: 193.149.179.0/24 maxlen: 24
85.208.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:f9:39:e5:62:38:b3:30:cb:8a:0b:73:3e:71:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Jan 2 00:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33f9fa652c776ca037341355d5b34f7aabafea19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ae:b4:5e:f0:53:13:51:18:44:77:74:5a:d9:
82:13:84:d7:7e:5a:8a:5f:7f:3b:e3:95:87:fa:7e:
4c:85:0c:ed:63:d2:bf:a2:92:15:69:21:91:2d:4b:
2e:3e:0c:ed:e0:b7:eb:85:63:9b:db:f9:24:65:3c:
07:c1:ce:cb:eb:a7:4b:53:c3:02:3c:18:71:24:9c:
2a:78:3e:2c:40:7a:97:11:7a:00:5e:05:6b:cb:4c:
8b:a8:4c:c8:67:36:52:61:97:cf:92:63:b5:db:4a:
29:c6:18:5f:6c:5e:f7:07:f1:93:f0:2e:c4:ea:32:
df:02:7d:8f:6b:92:b0:36:1b:4d:1c:94:8d:a1:db:
af:2a:1a:c4:54:bd:39:f8:59:59:2c:ef:04:a7:f2:
31:35:22:33:6f:c7:9b:16:36:47:33:dc:bd:27:84:
f6:9b:03:02:3b:53:4a:52:99:02:fb:5c:9a:df:99:
c6:08:73:2b:dc:21:bc:84:a0:57:15:af:c2:15:8d:
ef:f7:94:38:45:8d:ca:e3:6c:ea:a9:7b:0d:10:a1:
54:93:9d:dd:a5:fe:d3:6f:5d:bd:aa:ae:9d:97:6d:
29:aa:fc:4a:85:ed:f2:bc:dc:9c:0e:5f:fc:92:8e:
ca:0f:49:42:63:5f:26:44:ea:81:d6:2e:7c:ec:50:
8c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F9:FA:65:2C:77:6C:A0:37:34:13:55:D5:B3:4F:7A:AB:AF:EA:19
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/M_n6ZSx3bKA3NBNV1bNPequv6hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.46.0/24
193.149.179.0/24
Signature Algorithm: sha256WithRSAEncryption
44:84:8d:de:5f:92:4c:4c:20:7d:59:b8:64:6e:d3:71:3f:36:
22:99:8e:9e:43:96:8f:27:b3:77:47:d4:bd:bf:56:e5:41:1e:
15:fc:03:c8:8e:a6:13:7d:f3:d7:58:0a:d3:f2:8e:99:c9:fa:
b4:69:54:52:8a:7a:76:4b:7e:50:78:c8:9e:24:88:97:95:c2:
26:2f:cf:8c:81:3f:ae:ad:d2:1c:b2:ef:40:09:6e:ef:fa:b9:
5e:a0:78:59:f0:6c:fd:4b:ff:4d:9e:3a:3a:8d:fe:45:82:29:
d5:4f:bd:ae:c5:3d:7e:a4:fd:8c:11:d8:f4:25:c6:a8:d4:a0:
46:80:37:2f:c9:af:74:a1:94:b4:24:8e:a0:46:19:aa:a6:87:
e8:4e:f9:70:6d:6d:0d:60:5d:dc:e5:13:32:a7:f1:c5:bb:55:
a0:da:fc:41:70:69:10:33:a1:65:71:f8:28:a1:44:55:30:f5:
c9:b9:19:d3:3c:65:54:cf:5c:a3:30:72:fb:24:ac:e0:65:8c:
94:34:ed:ac:90:2c:1f:50:06:84:40:6e:02:09:2d:86:7d:37:
07:78:cc:8a:be:fc:f6:31:91:95:ff:98:ab:e2:b6:3e:02:34:
17:71:fe:11:5c:f4:f5:c6:2f:7d:33:20:5e:03:f4:c7:04:67:
76:0e:32:d8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzHlPk55WI4szDLigtzPnGIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NTE2MDViNjc1ZWNlNGUwZmNlNzE3NWFlMzFhOTNmYTgy
NzJiYTYwHhcNMjQwMTAyMDAzMTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2Y5ZmE2NTJjNzc2Y2EwMzczNDEzNTVkNWIzNGY3YWFiYWZlYTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAna60XvBTE1EYRHd0WtmCE4TXflqK
X38745WH+n5MhQztY9K/opIVaSGRLUsuPgzt4LfrhWOb2/kkZTwHwc7L66dLU8MC
PBhxJJwqeD4sQHqXEXoAXgVry0yLqEzIZzZSYZfPkmO120opxhhfbF73B/GT8C7E
6jLfAn2Pa5KwNhtNHJSNoduvKhrEVL05+FlZLO8Ep/IxNSIzb8ebFjZHM9y9J4T2
mwMCO1NKUpkC+1ya35nGCHMr3CG8hKBXFa/CFY3v95Q4RY3K42zqqXsNEKFUk53d
pf7Tb129qq6dl20pqvxKhe3yvNycDl/8ko7KD0lCY18mROqB1i587FCM4QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDP5+mUsd2ygNzQTVdWzT3qrr+oZMB8GA1UdIwQY
MBaAFAVRYFtnXs5OD85xda4xqT+oJyumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEt
MDc3OWY0OGVjZWEwLzEvTV9uNlpTeDNiS0EzTkJOVjFiTlBlcXV2NmhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEtMDc3OWY0OGVjZWEw
LzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVdAuAwQA
wZWzMA0GCSqGSIb3DQEBCwUAA4IBAQBEhI3eX5JMTCB9WbhkbtNxPzYimY6eQ5aP
J7N3R9S9v1blQR4V/APIjqYTffPXWArT8o6Zyfq0aVRSinp2S35QeMieJIiXlcIm
L8+MgT+urdIcsu9ACW7v+rleoHhZ8Gz9S/9Nnjo6jf5FginVT72uxT1+pP2MEdj0
Jcao1KBGgDcvya90oZS0JI6gRhmqpofoTvlwbW0NYF3c5RMyp/HFu1Wg2vxBcGkQ
M6FlcfgooURVMPXJuRnTPGVUz1yjMHL7JKzgZYyUNO2skCwfUAaEQG4CCS2GfTcH
eMyKvvz2MZGV/5ir4rY+AjQXcf4RXPT1xi99MyBeA/THBGd2DjLY
-----END CERTIFICATE-----
Generated at Tue May 21 07:37:41 2024 by rpki-client on console-ams.rpki-client.org