Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/MDU9q5IIXDxzgVmB1Zvu24oYMRs.roa
File: MDU9q5IIXDxzgVmB1Zvu24oYMRs.roa (raw, json)
Hash identifier: YoTFI2EBFnZm1o59MgtSWl6+9FymaamAfEkmkTG3VZc=
Subject key identifier: 30:35:3D:AB:92:08:5C:3C:73:81:59:81:D5:9B:EE:DB:8A:18:31:1B
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01933EAA5493764D4A15BD45B1FCECCD5DFF
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/MDU9q5IIXDxzgVmB1Zvu24oYMRs.roa
Signing time: Mon 18 Nov 2024 09:46:10 +0000
ROA not before: Mon 18 Nov 2024 09:46:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 45.155.254.0/24 maxlen: 24
185.250.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3e:aa:54:93:76:4d:4a:15:bd:45:b1:fc:ec:cd:5d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Nov 18 09:46:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30353dab92085c3c73815981d59beedb8a18311b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:73:10:cc:3d:52:91:20:5c:46:7b:02:f9:05:
26:01:e3:43:c4:27:a5:27:ef:93:14:6b:39:63:bb:
a4:da:23:08:1b:3d:4b:be:d6:52:db:0d:b4:9e:da:
f9:81:72:f0:b7:2a:99:79:f5:87:45:4d:0e:7a:8f:
64:0f:94:c9:25:17:2f:61:a8:0b:7e:04:cb:0a:5e:
e3:32:65:0f:65:f8:70:31:19:84:96:74:39:2f:a5:
ed:d4:fa:83:68:8b:39:b3:21:9c:c3:3a:d8:5c:21:
e4:25:b4:61:f6:07:18:da:4f:c4:8b:c1:28:25:65:
8e:5f:64:54:bd:7b:1c:6d:9b:63:3b:86:2b:38:b0:
8e:42:cf:47:24:bc:7f:15:c6:3e:ca:6d:f5:0a:f5:
c3:cb:d5:b5:81:42:2a:93:00:ea:99:a6:90:40:45:
1b:32:e5:bb:11:59:09:cb:84:73:4b:ef:75:5f:a1:
66:f3:01:56:c1:11:8a:57:6f:68:6a:78:f6:79:ce:
fd:d1:71:55:2a:6a:d4:3c:43:36:c7:b3:fb:7e:dc:
d9:98:65:f3:53:fb:df:09:d8:c9:60:3a:8a:1f:02:
94:61:8d:7a:d5:e4:52:3a:7a:93:93:e4:db:1a:cc:
3d:93:e1:58:86:5b:b0:08:05:85:3d:f1:1b:59:f5:
d4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:35:3D:AB:92:08:5C:3C:73:81:59:81:D5:9B:EE:DB:8A:18:31:1B
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/MDU9q5IIXDxzgVmB1Zvu24oYMRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.254.0/24
185.250.26.0/24
Signature Algorithm: sha256WithRSAEncryption
51:12:9e:b5:bd:6b:f8:d2:c9:04:95:b3:6d:5e:22:8a:9b:a6:
7a:8b:f5:81:e9:be:52:a1:fd:a5:18:9f:70:d7:8e:23:9f:21:
65:e8:ba:45:da:e5:7c:4f:66:9a:22:ca:4b:2b:d2:81:c0:d3:
9f:8e:b7:54:e0:5e:18:04:d9:97:1a:4d:6f:3c:1d:e4:a8:56:
d3:8b:74:68:53:4a:72:91:82:80:1f:43:08:ed:a8:51:4a:10:
90:d2:01:4f:23:af:9c:13:89:a7:c4:dd:ec:be:a7:fc:5a:d6:
ec:18:b3:d0:73:70:df:5f:78:41:cf:f8:9f:ac:d7:eb:4e:18:
5d:c2:80:19:71:1f:9c:ff:44:f0:52:17:72:64:10:16:5f:c2:
5c:a4:71:de:d5:d4:b3:cd:f7:37:a7:2e:79:48:09:5b:94:e9:
4e:01:d3:89:52:45:f6:ff:16:9a:00:1b:77:0f:b8:56:51:1c:
45:81:8d:03:55:c5:bf:4b:60:a9:d9:c9:44:f5:ba:a1:e9:50:
6a:d6:f3:9f:50:e8:b7:7f:54:6b:f7:18:5d:ce:50:17:f5:3f:
38:73:3b:51:28:08:9c:96:66:09:19:5f:41:44:44:5e:7d:38:
f9:93:67:1c:4c:05:4c:3f:0e:cd:12:fa:6f:1c:58:88:be:19:
41:9b:1b:18
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZM+qlSTdk1KFb1FsfzszV3/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjQxMTE4MDk0NjEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDM1M2RhYjkyMDg1YzNjNzM4MTU5ODFkNTliZWVkYjhhMTgzMTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnMQzD1SkSBcRnsC+QUmAeNDxCel
J++TFGs5Y7uk2iMIGz1LvtZS2w20ntr5gXLwtyqZefWHRU0Oeo9kD5TJJRcvYagL
fgTLCl7jMmUPZfhwMRmElnQ5L6Xt1PqDaIs5syGcwzrYXCHkJbRh9gcY2k/Ei8Eo
JWWOX2RUvXscbZtjO4YrOLCOQs9HJLx/FcY+ym31CvXDy9W1gUIqkwDqmaaQQEUb
MuW7EVkJy4RzS+91X6Fm8wFWwRGKV29oanj2ec790XFVKmrUPEM2x7P7ftzZmGXz
U/vfCdjJYDqKHwKUYY161eRSOnqTk+TbGsw9k+FYhluwCAWFPfEbWfXUrwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDA1PauSCFw8c4FZgdWb7tuKGDEbMB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEvTURVOXE1SUlYRHh6Z1ZtQjFadnUyNG9ZTVJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZv+AwQA
ufoaMA0GCSqGSIb3DQEBCwUAA4IBAQBREp61vWv40skElbNtXiKKm6Z6i/WB6b5S
of2lGJ9w144jnyFl6LpF2uV8T2aaIspLK9KBwNOfjrdU4F4YBNmXGk1vPB3kqFbT
i3RoU0pykYKAH0MI7ahRShCQ0gFPI6+cE4mnxN3svqf8WtbsGLPQc3DfX3hBz/if
rNfrThhdwoAZcR+c/0TwUhdyZBAWX8JcpHHe1dSzzfc3py55SAlblOlOAdOJUkX2
/xaaABt3D7hWURxFgY0DVcW/S2Cp2clE9bqh6VBq1vOfUOi3f1Rr9xhdzlAX9T84
cztRKAiclmYJGV9BRERefTj5k2ccTAVMPw7NEvpvHFiIvhlBmxsY
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:47:14 2024 by rpki-client on console-ams.rpki-client.org