Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/mDOKm6eXSOn0c7Ld4ivRSRZObcA.roa
File: mDOKm6eXSOn0c7Ld4ivRSRZObcA.roa (raw, json)
Hash identifier: FdbWTHllFp3rbTu1onhUq8kMxKWagodtiyaPa2Ga1+Q=
Subject key identifier: 98:33:8A:9B:A7:97:48:E9:F4:73:B2:DD:E2:2B:D1:49:16:4E:6D:C0
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 01926B8689BCEF2FBABBC0CEF914608D972D
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/mDOKm6eXSOn0c7Ld4ivRSRZObcA.roa
Signing time: Tue 08 Oct 2024 09:47:12 +0000
ROA not before: Tue 08 Oct 2024 09:47:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198883
IP address blocks: 188.66.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6b:86:89:bc:ef:2f:ba:bb:c0:ce:f9:14:60:8d:97:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Oct 8 09:47:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=98338a9ba79748e9f473b2dde22bd149164e6dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:54:fc:5b:d1:7d:2e:87:81:ce:5b:e6:27:42:
0c:28:f8:83:ba:c5:55:89:32:9c:61:43:5d:e8:a9:
33:b7:29:ee:65:69:db:43:22:34:a6:da:6a:b5:fa:
d9:3c:bd:45:9d:d6:d4:fd:b6:57:68:14:94:ac:06:
33:9c:38:68:ed:65:c0:4d:57:da:46:83:07:72:db:
36:93:c0:51:b1:ca:7b:4c:01:29:b2:78:c1:d4:d1:
a7:50:29:3c:11:ab:1b:a6:f2:32:dd:bf:27:12:9e:
6c:34:9f:38:78:6d:ed:d8:dd:b1:34:d2:2a:23:44:
1f:b6:86:22:4b:49:52:1c:f8:5a:1d:28:67:04:ca:
3c:f0:21:9f:aa:b2:64:1d:7a:23:a5:97:7f:0b:9b:
09:5c:51:e5:5c:c8:bb:ae:43:a2:5d:6e:0e:0f:74:
cb:9a:56:3c:d3:df:87:47:b2:25:51:57:ea:41:ec:
08:20:c4:0f:84:7b:9d:56:f3:0d:f0:fc:1c:63:93:
03:a6:d0:0c:85:ff:07:a7:70:21:ee:43:76:17:c0:
d5:20:8c:ef:f8:25:89:a8:41:e7:38:65:aa:4a:96:
74:eb:26:e4:8e:0b:d1:3a:d1:4a:6d:c4:71:92:43:
b8:b1:e1:b5:c4:4d:11:a4:71:83:b5:e3:3c:de:26:
50:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:33:8A:9B:A7:97:48:E9:F4:73:B2:DD:E2:2B:D1:49:16:4E:6D:C0
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/mDOKm6eXSOn0c7Ld4ivRSRZObcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.66.27.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:18:e2:0f:66:54:0a:b2:31:a2:6c:08:e1:28:f6:f7:e4:dd:
b4:50:35:c8:3d:1b:41:69:ab:b1:ae:db:bb:e2:21:04:0f:55:
0a:c2:d8:de:19:02:e4:7d:00:ca:64:46:48:a1:75:97:fe:ce:
92:5d:7b:cc:5e:f8:5d:dd:c7:4d:6a:a9:12:86:e3:a8:c6:ae:
56:db:c4:e2:db:67:98:33:06:03:f0:9a:07:3f:a3:84:5d:b0:
bb:bf:b6:07:1c:a1:3b:73:60:ff:a1:da:94:e7:e9:24:cb:4b:
52:c6:00:6f:9c:e1:05:9e:29:c5:a9:82:ee:86:aa:fc:b0:a9:
f9:9a:c9:d8:a3:07:bf:7f:a3:44:a6:bd:65:d9:5e:68:e1:d7:
09:bd:9f:50:79:bb:e5:e2:90:c7:4f:6f:c0:0f:2a:17:22:6e:
8e:83:e8:7c:aa:02:93:38:3c:8b:52:f0:ee:37:b9:3a:9b:76:
6a:38:85:ca:ae:69:a0:df:ad:b1:57:35:84:42:ba:0d:0a:1d:
b0:fb:0e:7d:26:33:73:e2:af:64:a1:39:8f:3f:a8:7e:45:f3:
7f:80:e0:93:e8:f4:19:9c:aa:2c:7c:21:03:2b:be:f6:7f:24:
c4:b9:b4:c3:6d:b6:d0:a0:b7:50:fe:66:5a:5e:b7:f1:a5:8b:
63:fc:81:d0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJrhom87y+6u8DO+RRgjZctMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz
M2RiOTYwHhcNMjQxMDA4MDk0NzEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODMzOGE5YmE3OTc0OGU5ZjQ3M2IyZGRlMjJiZDE0OTE2NGU2ZGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVT8W9F9LoeBzlvmJ0IMKPiDusVV
iTKcYUNd6KkztynuZWnbQyI0ptpqtfrZPL1FndbU/bZXaBSUrAYznDho7WXATVfa
RoMHcts2k8BRscp7TAEpsnjB1NGnUCk8EasbpvIy3b8nEp5sNJ84eG3t2N2xNNIq
I0QftoYiS0lSHPhaHShnBMo88CGfqrJkHXojpZd/C5sJXFHlXMi7rkOiXW4OD3TL
mlY809+HR7IlUVfqQewIIMQPhHudVvMN8PwcY5MDptAMhf8Hp3Ah7kN2F8DVIIzv
+CWJqEHnOGWqSpZ06ybkjgvROtFKbcRxkkO4seG1xE0RpHGDteM83iZQvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJgzipunl0jp9HOy3eIr0UkWTm3AMB8GA1UdIwQY
MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt
MmM3MDg2ZmRlZDkzLzEvbURPS202ZVhTT24wYzdMZDRpdlJTUlpPYmNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz
LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvEIbMA0G
CSqGSIb3DQEBCwUAA4IBAQBKGOIPZlQKsjGibAjhKPb35N20UDXIPRtBaauxrtu7
4iEED1UKwtjeGQLkfQDKZEZIoXWX/s6SXXvMXvhd3cdNaqkShuOoxq5W28Ti22eY
MwYD8JoHP6OEXbC7v7YHHKE7c2D/odqU5+kky0tSxgBvnOEFninFqYLuhqr8sKn5
msnYowe/f6NEpr1l2V5o4dcJvZ9Qebvl4pDHT2/ADyoXIm6Og+h8qgKTODyLUvDu
N7k6m3ZqOIXKrmmg362xVzWEQroNCh2w+w59JjNz4q9koTmPP6h+RfN/gOCT6PQZ
nKosfCEDK772fyTEubTDbbbQoLdQ/mZaXrfxpYtj/IHQ
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:22:58 2024 by rpki-client on console-ams.rpki-client.org