Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/mDkwPnCJk1Hw_rIraGtUd6DxgGA.roa
File: mDkwPnCJk1Hw_rIraGtUd6DxgGA.roa (raw, json)
Hash identifier: 1Udf6FlPJqc7BW8bXj1BGyzmaoPFZjG5WOA9OqBzqYY=
Subject key identifier: 98:39:30:3E:70:89:93:51:F0:FE:B2:2B:68:6B:54:77:A0:F1:80:60
Certificate issuer: /CN=595b7899893b9e248be6155df445f630ae5d6872
Certificate serial: 01909BE8A852AD7CDD952825AC7C8BC1EA33
Authority key identifier: 59:5B:78:99:89:3B:9E:24:8B:E6:15:5D:F4:45:F6:30:AE:5D:68:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVt4mYk7niSL5hVd9EX2MK5daHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/mDkwPnCJk1Hw_rIraGtUd6DxgGA.roa
Signing time: Wed 10 Jul 2024 09:10:34 +0000
ROA not before: Wed 10 Jul 2024 09:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21369
IP address blocks: 157.203.6.0/24 maxlen: 24
157.203.7.0/24 maxlen: 24
157.203.36.0/24 maxlen: 24
157.203.37.0/24 maxlen: 24
157.203.40.0/24 maxlen: 24
157.203.41.0/24 maxlen: 24
157.203.42.0/24 maxlen: 24
157.203.43.0/24 maxlen: 24
157.203.48.0/24 maxlen: 24
157.203.49.0/24 maxlen: 24
157.203.52.0/24 maxlen: 24
157.203.53.0/24 maxlen: 24
157.203.56.0/24 maxlen: 24
157.203.57.0/24 maxlen: 24
157.203.59.0/24 maxlen: 24
157.203.60.0/24 maxlen: 24
157.203.61.0/24 maxlen: 24
157.203.62.0/24 maxlen: 24
157.203.120.0/24 maxlen: 24
157.203.142.0/24 maxlen: 24
157.203.143.0/24 maxlen: 24
157.203.176.0/24 maxlen: 24
157.203.177.0/24 maxlen: 24
157.203.178.0/24 maxlen: 24
157.203.179.0/24 maxlen: 24
157.203.180.0/24 maxlen: 24
157.203.181.0/24 maxlen: 24
157.203.242.0/24 maxlen: 24
157.203.243.0/24 maxlen: 24
157.203.254.0/24 maxlen: 24
157.203.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVt4mYk7niSL5hVd9EX2MK5daHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9b:e8:a8:52:ad:7c:dd:95:28:25:ac:7c:8b:c1:ea:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=595b7899893b9e248be6155df445f630ae5d6872
Validity
Not Before: Jul 10 09:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9839303e70899351f0feb22b686b5477a0f18060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:93:92:bb:24:ff:9b:49:e4:a6:78:c4:a8:29:
60:80:e4:1a:e6:99:41:07:c7:36:69:de:2a:55:9e:
e9:14:1c:7b:d7:77:b1:45:ce:fa:78:25:cc:1d:4e:
81:a3:04:2f:22:ea:d2:2c:5b:0d:ef:58:5d:91:cf:
bc:59:88:b2:56:2f:6b:25:9a:c6:33:0a:8c:dc:93:
e9:bf:0d:5c:a4:06:ed:74:38:04:ae:da:bb:6b:3a:
f9:2b:55:6b:35:8f:ea:73:fa:c1:10:be:0b:81:5c:
88:23:00:97:04:b9:98:32:47:0a:4d:b2:6d:2f:06:
93:48:26:9f:2a:9f:9e:93:19:38:57:10:c8:52:05:
d1:8c:b8:44:c7:ed:fc:25:6f:ff:99:51:ee:1f:8d:
4d:63:23:96:4d:50:42:c0:dc:a0:dc:40:72:37:8c:
91:5d:45:8e:c2:f6:0a:cc:a4:63:d4:24:b7:c7:55:
ff:f0:77:51:ca:b6:6f:85:a4:2f:20:68:df:4b:6a:
0b:52:c8:89:8d:8e:22:8f:05:7a:3c:78:aa:85:e5:
3b:eb:b2:64:08:a3:47:3a:70:8a:7c:87:04:eb:39:
4b:c4:37:48:93:b1:82:8f:70:c5:c2:6e:33:5b:5e:
84:f9:cb:ac:1c:12:46:92:53:bd:94:3c:4e:d0:be:
4f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:39:30:3E:70:89:93:51:F0:FE:B2:2B:68:6B:54:77:A0:F1:80:60
X509v3 Authority Key Identifier:
keyid:59:5B:78:99:89:3B:9E:24:8B:E6:15:5D:F4:45:F6:30:AE:5D:68:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVt4mYk7niSL5hVd9EX2MK5daHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/mDkwPnCJk1Hw_rIraGtUd6DxgGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.203.6.0/23
157.203.36.0/23
157.203.40.0/22
157.203.48.0/23
157.203.52.0/23
157.203.56.0/23
157.203.59.0-157.203.62.255
157.203.120.0/24
157.203.142.0/23
157.203.176.0-157.203.181.255
157.203.242.0/23
157.203.254.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:91:76:9b:f8:28:ae:17:d1:66:8c:b9:94:2a:92:db:f9:aa:
8c:ae:2f:ac:34:c6:f1:2c:ba:b7:b3:33:17:e2:9b:02:92:4a:
3d:e1:df:21:44:3f:1a:cc:07:ea:3d:f7:0e:92:ab:ed:2d:4c:
8b:06:ad:ba:38:f3:f5:d4:c5:30:a5:c9:59:69:65:d8:6a:f0:
b1:e2:19:2d:5e:c0:2f:b9:25:87:eb:52:ac:c0:34:b8:8e:bb:
3e:4e:90:33:9c:71:d7:e8:6a:78:fe:e1:d6:58:77:23:30:74:
52:84:32:06:13:da:9c:26:bf:9d:62:d7:6d:71:56:44:8f:34:
11:aa:0d:0c:7d:f7:de:8b:aa:db:29:01:e0:63:30:b1:f2:e8:
42:3f:ec:19:9b:b2:5e:08:b0:6b:e7:3b:17:1f:db:0f:1c:5f:
fe:fc:fe:9d:b6:86:00:6d:f8:e3:5e:65:03:86:9b:7f:ce:4b:
f1:88:55:cf:06:ff:1b:4a:8f:95:99:94:a4:f5:2a:dd:e8:ed:
d3:60:05:6e:9b:4f:75:e5:16:e8:05:5a:c9:4a:8c:55:99:63:
e1:de:31:08:6f:ba:41:11:30:a3:47:94:db:29:86:6b:f0:94:
fa:95:4b:7b:e9:6e:d3:e0:5b:30:8c:6b:2d:c1:71:d3:a3:22:
b9:3c:45:6b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgISAZCb6KhSrXzdlSglrHyLweozMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NWI3ODk5ODkzYjllMjQ4YmU2MTU1ZGY0NDVmNjMwYWU1
ZDY4NzIwHhcNMjQwNzEwMDkxMDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODM5MzAzZTcwODk5MzUxZjBmZWIyMmI2ODZiNTQ3N2EwZjE4MDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5OSuyT/m0nkpnjEqClggOQa5plB
B8c2ad4qVZ7pFBx713exRc76eCXMHU6BowQvIurSLFsN71hdkc+8WYiyVi9rJZrG
MwqM3JPpvw1cpAbtdDgErtq7azr5K1VrNY/qc/rBEL4LgVyIIwCXBLmYMkcKTbJt
LwaTSCafKp+ekxk4VxDIUgXRjLhEx+38JW//mVHuH41NYyOWTVBCwNyg3EByN4yR
XUWOwvYKzKRj1CS3x1X/8HdRyrZvhaQvIGjfS2oLUsiJjY4ijwV6PHiqheU767Jk
CKNHOnCKfIcE6zlLxDdIk7GCj3DFwm4zW16E+cusHBJGklO9lDxO0L5PxwIDAQAB
o4ICWzCCAlcwHQYDVR0OBBYEFJg5MD5wiZNR8P6yK2hrVHeg8YBgMB8GA1UdIwQY
MBaAFFlbeJmJO54ki+YVXfRF9jCuXWhyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1Z0NG1ZazduaVNMNWhWZDlFWDJNSzVkYUhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83OWI3YTEtYjNjOC00NWE2LWI5OTEt
N2M3OGViNWIyZDk0LzEvbURrd1BuQ0prMUh3X3JJcmFHdFVkNkR4Z0dBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy83OWI3YTEtYjNjOC00NWE2LWI5OTEtN2M3OGViNWIyZDk0
LzEvV1Z0NG1ZazduaVNMNWhWZDlFWDJNSzVkYUhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHEGCCsGAQUFBwEHAQH/BGIwYDBeBAIAATBYAwQBncsGAwQB
ncskAwQCncsoAwQBncswAwQBncs0AwQBncs4MAwDBACdyzsDBACdyz4DBACdy3gD
BAGdy44wDAMEBJ3LsAMEAZ3LtAMEAZ3L8gMEAZ3L/jANBgkqhkiG9w0BAQsFAAOC
AQEAHZF2m/gorhfRZoy5lCqS2/mqjK4vrDTG8Sy6t7MzF+KbApJKPeHfIUQ/GswH
6j33DpKr7S1Miwatujjz9dTFMKXJWWll2GrwseIZLV7AL7klh+tSrMA0uI67Pk6Q
M5xx1+hqeP7h1lh3IzB0UoQyBhPanCa/nWLXbXFWRI80EaoNDH333ouq2ykB4GMw
sfLoQj/sGZuyXgiwa+c7Fx/bDxxf/vz+nbaGAG34415lA4abf85L8YhVzwb/G0qP
lZmUpPUq3ejt02AFbptPdeUW6AVayUqMVZlj4d4xCG+6QREwo0eU2ymGa/CU+pVL
e+lu0+BbMIxrLcFx06MiuTxFaw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:27 2024 by rpki-client on console-fra.rpki-client.org