Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/MgwbdzmncvpI1ESb1vd0BGlAnZY.roa
File: MgwbdzmncvpI1ESb1vd0BGlAnZY.roa (raw, json)
Hash identifier: 4bNiKyzQqipZ9w3VQdqS+cjPm5/7A1motA8/jr3KKvg=
Subject key identifier: 32:0C:1B:77:39:A7:72:FA:48:D4:44:9B:D6:F7:74:04:69:40:9D:96
Certificate issuer: /CN=82fffcfadd271623c8d5055d64a93eb3d3425dbc
Certificate serial: 018CC9B9CA68CD00F1F920A7EE1DE51D65D2
Authority key identifier: 82:FF:FC:FA:DD:27:16:23:C8:D5:05:5D:64:A9:3E:B3:D3:42:5D:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gv_8-t0nFiPI1QVdZKk-s9NCXbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/MgwbdzmncvpI1ESb1vd0BGlAnZY.roa
Signing time: Tue 02 Jan 2024 10:30:45 +0000
ROA not before: Tue 02 Jan 2024 10:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8727
IP address blocks: 195.190.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gv_8-t0nFiPI1QVdZKk-s9NCXbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 22:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:b9:ca:68:cd:00:f1:f9:20:a7:ee:1d:e5:1d:65:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82fffcfadd271623c8d5055d64a93eb3d3425dbc
Validity
Not Before: Jan 2 10:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=320c1b7739a772fa48d4449bd6f7740469409d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:77:a1:b1:7c:d7:4d:c5:9f:e3:07:b3:09:e0:
6a:18:3a:1e:c2:9b:d4:37:65:a7:e6:58:38:24:e1:
9d:ab:d1:e7:bd:37:f8:4c:c7:cd:6e:9b:6f:26:bb:
05:0d:ed:a5:74:ff:10:8d:ea:aa:b4:14:c3:e6:73:
44:ca:98:86:af:9b:84:96:16:4e:24:1c:d6:08:d0:
63:97:2b:85:9c:9d:0e:76:88:ac:74:db:b0:01:ed:
d4:c7:b0:21:88:8e:8d:89:e1:25:3a:93:3f:ca:f6:
90:55:bf:2c:3d:10:44:e3:ef:ce:6e:8d:83:64:37:
4b:ba:d9:be:d4:6c:46:0a:44:e9:3c:c1:ca:98:ce:
54:85:77:c0:bf:d0:3a:05:0a:04:f8:9f:c4:ce:76:
5d:d9:45:b1:32:48:69:bd:3e:91:a9:c4:0e:9a:99:
c8:03:71:40:af:11:2a:21:42:f9:e5:c8:b5:8d:f2:
bc:d1:cd:45:27:b2:0f:8f:fd:fb:f2:45:81:c1:54:
8b:f1:ec:d4:06:41:80:ff:ab:f0:12:02:f7:18:a7:
45:1a:30:55:d5:e7:3c:a5:2a:ca:3e:ac:f0:49:e6:
9f:a0:68:a1:d3:42:ea:16:1d:4b:d2:57:4e:4e:e6:
2f:5c:7a:24:4d:c9:2c:53:e2:9d:fd:01:ae:0d:13:
a1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0C:1B:77:39:A7:72:FA:48:D4:44:9B:D6:F7:74:04:69:40:9D:96
X509v3 Authority Key Identifier:
keyid:82:FF:FC:FA:DD:27:16:23:C8:D5:05:5D:64:A9:3E:B3:D3:42:5D:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gv_8-t0nFiPI1QVdZKk-s9NCXbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/MgwbdzmncvpI1ESb1vd0BGlAnZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3444a6-b2e8-400a-a2b1-7bff1dcb106a/1/gv_8-t0nFiPI1QVdZKk-s9NCXbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.190.129.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:20:cb:61:d3:59:c2:b1:ad:7e:d8:ce:55:ca:f5:1f:f2:5a:
c3:c3:d2:c3:3a:53:4f:fb:d5:68:33:5b:35:59:e7:50:31:a2:
b0:da:49:1d:43:fe:cd:86:d5:74:de:ef:97:0b:95:03:7c:72:
10:7c:82:66:d9:38:50:21:5f:4a:a6:81:65:6d:c0:a0:3c:15:
cd:56:7a:94:19:a7:be:5d:33:a8:22:de:2a:d9:e2:b6:96:aa:
d5:b6:3a:a6:c9:6a:3d:0a:af:6c:2d:78:96:96:48:3c:b7:d3:
6b:ac:e2:54:2b:00:90:b3:d0:3e:bc:46:3d:28:f8:5d:ed:fd:
c6:53:18:d3:74:dc:ab:6c:a4:38:f3:c6:b4:04:9f:a8:c5:8a:
62:90:23:06:7f:2a:5a:01:ca:f4:6f:64:49:20:14:1c:3d:35:
c1:fc:6b:e9:4c:9d:4b:be:78:eb:89:b3:23:d5:d0:5c:be:d2:
33:97:84:37:ba:78:70:dd:ac:58:e3:f3:43:8a:7d:6c:1b:22:
1a:04:e4:15:bb:5b:9e:eb:da:91:b4:b8:98:ac:a1:15:9b:18:
04:2c:6f:a7:8f:bb:5a:b6:92:d5:75:b5:ca:f7:2e:b3:f2:8a:
55:1f:b2:93:1c:15:b3:81:df:c8:49:0d:b8:d9:51:4a:87:41:
45:5d:18:bc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJucpozQDx+SCn7h3lHWXSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZmZmY2ZhZGQyNzE2MjNjOGQ1MDU1ZDY0YTkzZWIzZDM0
MjVkYmMwHhcNMjQwMTAyMTAzMDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjBjMWI3NzM5YTc3MmZhNDhkNDQ0OWJkNmY3NzQwNDY5NDA5ZDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinehsXzXTcWf4wezCeBqGDoewpvU
N2Wn5lg4JOGdq9HnvTf4TMfNbptvJrsFDe2ldP8QjeqqtBTD5nNEypiGr5uElhZO
JBzWCNBjlyuFnJ0OdoisdNuwAe3Ux7AhiI6NieElOpM/yvaQVb8sPRBE4+/Obo2D
ZDdLutm+1GxGCkTpPMHKmM5UhXfAv9A6BQoE+J/EznZd2UWxMkhpvT6RqcQOmpnI
A3FArxEqIUL55ci1jfK80c1FJ7IPj/378kWBwVSL8ezUBkGA/6vwEgL3GKdFGjBV
1ec8pSrKPqzwSeafoGih00LqFh1L0ldOTuYvXHokTcksU+Kd/QGuDROhwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDIMG3c5p3L6SNREm9b3dARpQJ2WMB8GA1UdIwQY
MBaAFIL//PrdJxYjyNUFXWSpPrPTQl28MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3ZfOC10MG5GaVBJMVFWZFpLay1zOU5DWGJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zNDQ0YTYtYjJlOC00MDBhLWEyYjEt
N2JmZjFkY2IxMDZhLzEvTWd3YmR6bW5jdnBJMUVTYjF2ZDBCR2xBblpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8zNDQ0YTYtYjJlOC00MDBhLWEyYjEtN2JmZjFkY2IxMDZh
LzEvZ3ZfOC10MG5GaVBJMVFWZFpLay1zOU5DWGJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw76BMA0G
CSqGSIb3DQEBCwUAA4IBAQBNIMth01nCsa1+2M5VyvUf8lrDw9LDOlNP+9VoM1s1
WedQMaKw2kkdQ/7NhtV03u+XC5UDfHIQfIJm2ThQIV9KpoFlbcCgPBXNVnqUGae+
XTOoIt4q2eK2lqrVtjqmyWo9Cq9sLXiWlkg8t9NrrOJUKwCQs9A+vEY9KPhd7f3G
UxjTdNyrbKQ488a0BJ+oxYpikCMGfypaAcr0b2RJIBQcPTXB/GvpTJ1LvnjribMj
1dBcvtIzl4Q3unhw3axY4/NDin1sGyIaBOQVu1ue69qRtLiYrKEVmxgELG+nj7ta
tpLVdbXK9y6z8opVH7KTHBWzgd/ISQ242VFKh0FFXRi8
-----END CERTIFICATE-----
Generated at Sat Jun 8 03:06:56 2024 by rpki-client on console-ams.rpki-client.org