Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/MNVuiGSBYQu7gD-mttA2FoqxkvI.roa
File: MNVuiGSBYQu7gD-mttA2FoqxkvI.roa (raw, json)
Hash identifier: rkMBqxDX2Qvct5Teim6LIQJEnlfIb2VXvoE1ReE3y34=
Subject key identifier: 30:D5:6E:88:64:81:61:0B:BB:80:3F:A6:B6:D0:36:16:8A:B1:92:F2
Certificate issuer: /CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Certificate serial: 018EC77BF2AB3F9D6A0C2DD2435348518AD2
Authority key identifier: FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/MNVuiGSBYQu7gD-mttA2FoqxkvI.roa
Signing time: Wed 10 Apr 2024 10:09:32 +0000
ROA not before: Wed 10 Apr 2024 10:09:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60631
IP address blocks: 45.149.76.0/24 maxlen: 24
45.149.77.0/24 maxlen: 24
45.149.78.0/24 maxlen: 24
45.149.79.0/24 maxlen: 24
171.22.24.0/24 maxlen: 24
171.22.25.0/24 maxlen: 24
171.22.26.0/24 maxlen: 24
171.22.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c7:7b:f2:ab:3f:9d:6a:0c:2d:d2:43:53:48:51:8a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd8eff201218a5a823cbe85336853e3db4dd16eb
Validity
Not Before: Apr 10 10:09:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30d56e886481610bbb803fa6b6d036168ab192f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:29:3f:d5:da:44:5a:17:ce:53:7e:e1:60:d7:
85:ea:51:82:c4:d4:4a:86:36:e4:ec:2b:83:47:98:
78:a4:23:c9:b4:5a:a0:ec:5b:5b:81:93:3d:5e:4d:
6c:d8:5f:c4:ae:3e:ce:c8:a9:95:ca:1f:c2:f8:5e:
8d:c5:7f:97:ec:e8:ea:ae:11:be:aa:8a:32:e2:97:
d4:2b:75:f8:2d:4c:6e:ec:6d:11:61:c8:d1:28:e2:
10:e3:49:ad:b8:47:c7:1d:3e:d1:5f:24:76:8e:01:
6b:21:2a:4b:12:7d:74:de:e3:bb:cd:9b:fa:00:43:
4c:c7:e3:f4:9c:3c:47:b9:21:65:7a:23:d8:36:4f:
32:1e:da:1f:6a:b6:6d:32:18:4b:87:9c:1d:45:68:
75:3e:63:13:f8:36:7d:66:2d:53:e2:fe:18:1f:63:
d6:95:9a:9c:17:25:78:a2:1f:0c:21:01:40:aa:61:
97:43:5b:77:56:57:29:a7:01:12:5c:95:a0:82:a9:
2c:13:db:55:7d:5c:53:5a:e6:89:51:96:6c:8c:57:
eb:ea:7b:40:be:b2:59:93:d7:65:fe:50:ad:cb:bb:
67:da:7e:d9:1a:6a:1f:28:26:27:bb:bd:07:63:fb:
35:0f:c9:b7:83:ac:8a:b1:24:bd:3d:9c:92:cc:68:
4d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D5:6E:88:64:81:61:0B:BB:80:3F:A6:B6:D0:36:16:8A:B1:92:F2
X509v3 Authority Key Identifier:
keyid:FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/MNVuiGSBYQu7gD-mttA2FoqxkvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.76.0/22
171.22.24.0/22
Signature Algorithm: sha256WithRSAEncryption
28:34:56:3f:60:9c:96:4c:b3:8c:43:34:a7:13:8c:fc:b3:b0:
67:c8:4e:4b:d5:d1:4c:4f:4b:46:35:5f:2e:ee:cf:1c:ea:7f:
46:83:14:55:06:cf:e3:34:64:73:13:b5:1c:bf:e7:57:18:be:
60:e3:56:5b:93:71:cf:5e:ee:a4:46:32:84:f4:bb:f8:4d:b7:
2b:f1:b7:ee:8b:0d:3f:ec:09:d4:5a:6b:91:f0:a5:3c:ee:6e:
a4:08:1c:8b:0f:e3:ab:96:fb:dd:35:87:f3:de:13:4f:37:53:
f6:b8:d9:f6:52:a3:d3:68:f3:51:0f:19:c9:c1:1a:63:be:42:
f9:ef:b9:07:d0:3a:39:04:d4:b1:9c:c1:5e:d4:a5:55:fb:70:
ad:f2:97:6f:9a:ec:5f:b9:d0:8a:5f:4a:78:bf:55:06:55:22:
de:1d:93:18:af:8a:d5:97:a4:44:49:92:79:42:34:c5:ce:45:
c2:0c:f4:64:84:9f:21:a2:62:0d:e3:30:1b:4e:ec:2c:6a:5b:
ac:a9:ed:16:4e:73:7b:b8:43:ff:2d:72:f2:fb:9c:a2:1e:a5:
98:8c:d3:c7:e3:1c:45:99:b7:36:0e:c8:c4:78:a4:a3:2e:43:
fe:d9:0f:21:54:40:73:f3:6c:22:1d:00:0c:a6:fe:4b:ca:14:
ec:f4:83:7b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY7He/KrP51qDC3SQ1NIUYrSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkOGVmZjIwMTIxOGE1YTgyM2NiZTg1MzM2ODUzZTNkYjRk
ZDE2ZWIwHhcNMjQwNDEwMTAwOTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMGQ1NmU4ODY0ODE2MTBiYmI4MDNmYTZiNmQwMzYxNjhhYjE5MmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCk/1dpEWhfOU37hYNeF6lGCxNRK
hjbk7CuDR5h4pCPJtFqg7FtbgZM9Xk1s2F/Erj7OyKmVyh/C+F6NxX+X7OjqrhG+
qooy4pfUK3X4LUxu7G0RYcjRKOIQ40mtuEfHHT7RXyR2jgFrISpLEn103uO7zZv6
AENMx+P0nDxHuSFleiPYNk8yHtofarZtMhhLh5wdRWh1PmMT+DZ9Zi1T4v4YH2PW
lZqcFyV4oh8MIQFAqmGXQ1t3VlcppwESXJWggqksE9tVfVxTWuaJUZZsjFfr6ntA
vrJZk9dl/lCty7tn2n7ZGmofKCYnu70HY/s1D8m3g6yKsSS9PZySzGhNZQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDDVbohkgWELu4A/prbQNhaKsZLyMB8GA1UdIwQY
MBaAFP2O/yASGKWoI8voUzaFPj203RbrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1k3X0lCSVlwYWdqeS1oVE5vVS1QYlRkRnVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85OWZkNDEtN2VkOC00YjI1LThkNTYt
YzdhYzI2YmNjMmRhLzEvTU5WdWlHU0JZUXU3Z0QtbXR0QTJGb3F4a3ZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC85OWZkNDEtN2VkOC00YjI1LThkNTYtYzdhYzI2YmNjMmRh
LzEvX1k3X0lCSVlwYWdqeS1oVE5vVS1QYlRkRnVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLZVMAwQC
qxYYMA0GCSqGSIb3DQEBCwUAA4IBAQAoNFY/YJyWTLOMQzSnE4z8s7BnyE5L1dFM
T0tGNV8u7s8c6n9GgxRVBs/jNGRzE7Ucv+dXGL5g41Zbk3HPXu6kRjKE9Lv4Tbcr
8bfuiw0/7AnUWmuR8KU87m6kCByLD+OrlvvdNYfz3hNPN1P2uNn2UqPTaPNRDxnJ
wRpjvkL577kH0Do5BNSxnMFe1KVV+3Ct8pdvmuxfudCKX0p4v1UGVSLeHZMYr4rV
l6RESZJ5QjTFzkXCDPRkhJ8homIN4zAbTuwsalusqe0WTnN7uEP/LXLy+5yiHqWY
jNPH4xxFmbc2DsjEeKSjLkP+2Q8hVEBz82wiHQAMpv5LyhTs9IN7
-----END CERTIFICATE-----
Generated at Sun Jun 2 19:42:17 2024 by rpki-client on console-ams.rpki-client.org