Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/M9yRCqHSegd5w0XGg-mGN35W1es.roa
File: M9yRCqHSegd5w0XGg-mGN35W1es.roa (raw, json)
Hash identifier: wGLQ9qCUrKX0bLD5LkGeHwc3pfhX3TvVRzGVs3LQb54=
Subject key identifier: 33:DC:91:0A:A1:D2:7A:07:79:C3:45:C6:83:E9:86:37:7E:56:D5:EB
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018E08D4827363B85E0C56EE1096FB9F0CCC
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/M9yRCqHSegd5w0XGg-mGN35W1es.roa
Signing time: Mon 04 Mar 2024 09:38:48 +0000
ROA not before: Mon 04 Mar 2024 09:38:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43606
IP address blocks: 217.119.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 12:22:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:08:d4:82:73:63:b8:5e:0c:56:ee:10:96:fb:9f:0c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Mar 4 09:38:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33dc910aa1d27a0779c345c683e986377e56d5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3e:c8:da:3d:74:1d:50:6e:78:f1:1e:36:31:
57:9c:22:25:3a:cb:19:29:f2:81:fc:cc:45:a7:11:
42:1d:8c:1f:cd:c6:b1:ad:f6:58:9c:3a:6c:c6:cd:
07:ee:ec:d8:38:7d:f3:79:d9:7e:4f:8f:fd:bd:bd:
bc:a7:93:2b:2a:81:90:bc:23:e2:c1:ae:36:e7:f4:
08:42:ac:c1:25:09:56:b4:c2:6f:59:da:2c:95:ae:
cb:9f:7e:54:c9:9c:ac:84:5e:5f:b7:dd:a9:f0:4d:
3a:75:b1:3c:6e:81:b9:43:70:b2:56:d9:82:c6:4a:
c9:2e:1c:46:70:5b:7d:fe:af:db:1c:7d:2e:cf:ca:
76:17:37:f0:f4:a8:96:07:ac:12:3b:3a:f1:e7:d0:
6b:9b:e4:81:25:b8:dc:40:e9:f0:4c:62:d8:b7:08:
ea:b8:05:7d:49:ff:1e:eb:53:44:55:42:f1:e4:1b:
32:60:7c:41:d5:65:db:c7:2a:60:fc:30:77:41:a5:
29:cf:5c:f8:34:52:97:92:35:4f:60:2c:62:94:4a:
08:de:38:15:19:2c:b3:46:2f:df:95:ce:8b:60:cb:
ba:e4:e4:af:72:c4:f6:c6:86:f3:cb:d3:ef:9b:2b:
d3:5c:f3:97:55:c1:b9:07:0e:9c:57:02:e0:fb:19:
5f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DC:91:0A:A1:D2:7A:07:79:C3:45:C6:83:E9:86:37:7E:56:D5:EB
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/M9yRCqHSegd5w0XGg-mGN35W1es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.119.139.0/24
Signature Algorithm: sha256WithRSAEncryption
00:af:7d:0a:1b:95:dc:ca:f0:ab:e0:d2:66:1b:df:db:da:b5:
6a:6f:83:5f:f8:40:a4:51:01:4b:20:f0:0e:b7:f0:b2:b4:93:
50:83:85:40:00:50:0f:ea:a3:cc:99:4a:e9:24:c3:42:0c:1e:
96:68:0a:48:bc:12:b4:c0:4f:71:2c:ec:4b:a4:e6:03:48:03:
b9:d4:df:e0:59:7b:28:fc:63:a9:88:3e:4d:f1:da:7d:bc:6a:
9a:ed:d7:31:39:8b:73:ca:fb:cc:cb:f1:67:20:7f:30:10:21:
e4:77:25:94:02:e0:09:b0:90:5b:01:b4:a8:d0:dc:a0:29:5e:
47:2c:c7:0f:21:bd:e0:5f:79:63:51:95:f4:c7:0b:d7:6a:be:
d5:d3:70:71:dc:73:38:a4:f3:07:81:84:16:2c:94:70:3c:fa:
86:8d:f4:ef:4d:70:4a:e9:fa:7a:c0:cd:cd:32:c2:4a:fb:c0:
44:be:4b:f3:b6:a1:e6:70:65:85:ab:3c:d5:31:32:2c:29:d0:
60:be:09:f7:70:c1:57:9d:56:4d:07:56:03:6d:de:98:68:53:
1c:70:35:8c:b9:e6:79:6c:37:3c:be:42:5b:4e:8e:8c:1a:16:
83:b5:3e:9c:df:f8:cd:f4:cb:74:29:26:88:42:02:4d:35:93:
d3:34:6a:f5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY4I1IJzY7heDFbuEJb7nwzMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw
N2VlNTYwHhcNMjQwMzA0MDkzODQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2RjOTEwYWExZDI3YTA3NzljMzQ1YzY4M2U5ODYzNzdlNTZkNWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwT7I2j10HVBuePEeNjFXnCIlOssZ
KfKB/MxFpxFCHYwfzcaxrfZYnDpsxs0H7uzYOH3zedl+T4/9vb28p5MrKoGQvCPi
wa425/QIQqzBJQlWtMJvWdosla7Ln35UyZyshF5ft92p8E06dbE8boG5Q3CyVtmC
xkrJLhxGcFt9/q/bHH0uz8p2Fzfw9KiWB6wSOzrx59Brm+SBJbjcQOnwTGLYtwjq
uAV9Sf8e61NEVULx5BsyYHxB1WXbxypg/DB3QaUpz1z4NFKXkjVPYCxilEoI3jgV
GSyzRi/flc6LYMu65OSvcsT2xobzy9PvmyvTXPOXVcG5Bw6cVwLg+xlfdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDPckQqh0noHecNFxoPphjd+VtXrMB8GA1UdIwQY
MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt
OGJmYmRkNDVjYjYyLzEvTTl5UkNxSFNlZ2Q1dzBYR2ctbUdOMzVXMWVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy
LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2XeLMA0G
CSqGSIb3DQEBCwUAA4IBAQAAr30KG5XcyvCr4NJmG9/b2rVqb4Nf+ECkUQFLIPAO
t/CytJNQg4VAAFAP6qPMmUrpJMNCDB6WaApIvBK0wE9xLOxLpOYDSAO51N/gWXso
/GOpiD5N8dp9vGqa7dcxOYtzyvvMy/FnIH8wECHkdyWUAuAJsJBbAbSo0NygKV5H
LMcPIb3gX3ljUZX0xwvXar7V03Bx3HM4pPMHgYQWLJRwPPqGjfTvTXBK6fp6wM3N
MsJK+8BEvkvztqHmcGWFqzzVMTIsKdBgvgn3cMFXnVZNB1YDbd6YaFMccDWMueZ5
bDc8vkJbTo6MGhaDtT6c3/jN9Mt0KSaIQgJNNZPTNGr1
-----END CERTIFICATE-----
Generated at Fri Jun 7 20:53:14 2024 by rpki-client on console-fra.rpki-client.org