Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/MtyGavINQVvTOyUDZFzSLtiNPYU.roa
File: MtyGavINQVvTOyUDZFzSLtiNPYU.roa (raw, json)
Hash identifier: OCJlwGcWM4D2i1hvrwXOFRE4ytBbGIPbeH0JlJm3tYA=
Subject key identifier: 32:DC:86:6A:F2:0D:41:5B:D3:3B:25:03:64:5C:D2:2E:D8:8D:3D:85
Certificate issuer: /CN=b660d78320860d5efe729e208b5eb4b2abebe078
Certificate serial: 018CC8DF4D734DB26A8FBCC44F54DABE05DE
Authority key identifier: B6:60:D7:83:20:86:0D:5E:FE:72:9E:20:8B:5E:B4:B2:AB:EB:E0:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/MtyGavINQVvTOyUDZFzSLtiNPYU.roa
Signing time: Tue 02 Jan 2024 06:32:06 +0000
ROA not before: Tue 02 Jan 2024 06:32:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51198
IP address blocks: 45.132.9.0/24 maxlen: 24
45.132.11.0/24 maxlen: 24
45.132.8.0/24 maxlen: 24
45.132.10.0/24 maxlen: 24
185.179.179.0/24 maxlen: 24
2a0e:6540::/29 maxlen: 29
2a13:7d00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 18:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:4d:73:4d:b2:6a:8f:bc:c4:4f:54:da:be:05:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b660d78320860d5efe729e208b5eb4b2abebe078
Validity
Not Before: Jan 2 06:32:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32dc866af20d415bd33b2503645cd22ed88d3d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:05:e4:75:58:81:93:54:4a:42:75:5a:b1:f1:
dd:bc:1f:ac:e4:17:cc:e1:b7:38:1d:8d:64:32:f2:
ea:dd:80:37:eb:c5:8c:32:5d:99:11:b5:a9:48:c9:
a2:7f:1a:ca:22:a8:f7:fc:23:f5:d9:4e:57:68:24:
fe:56:be:32:c3:8b:40:6a:f8:fa:83:43:24:4c:c8:
73:d3:63:5d:bd:22:56:ab:de:55:d5:64:1b:3d:a9:
0e:ea:83:74:d0:ee:56:ba:14:36:0f:c6:12:28:d2:
30:83:47:49:74:09:97:0b:ec:d5:e6:3d:25:a2:15:
df:c2:de:b1:6a:6f:49:d7:0b:a9:b2:3b:25:82:75:
8e:a8:5b:10:2c:70:67:6b:c4:cc:94:11:75:7b:aa:
6c:0a:a1:e8:4a:4d:c8:4a:a6:51:f5:23:91:52:8c:
1c:9a:4c:fd:96:e8:f4:b8:5e:52:aa:a2:a4:81:b5:
b4:71:63:e0:75:3d:ec:c2:6e:7f:4d:85:f8:ff:c1:
8d:25:59:44:ba:89:58:a3:73:07:1a:bd:36:eb:3a:
69:1d:07:62:d8:99:c8:04:73:d4:ca:1c:db:9b:17:
6b:35:4b:43:7f:65:08:e4:97:6c:91:e7:23:08:b6:
23:54:1c:6f:15:ba:2c:70:a9:59:5e:43:83:1f:a1:
c2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DC:86:6A:F2:0D:41:5B:D3:3B:25:03:64:5C:D2:2E:D8:8D:3D:85
X509v3 Authority Key Identifier:
keyid:B6:60:D7:83:20:86:0D:5E:FE:72:9E:20:8B:5E:B4:B2:AB:EB:E0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/MtyGavINQVvTOyUDZFzSLtiNPYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.8.0/22
185.179.179.0/24
IPv6:
2a0e:6540::/29
2a13:7d00::/29
Signature Algorithm: sha256WithRSAEncryption
25:c0:b8:40:63:d1:44:35:5d:55:80:6c:e1:bd:31:1d:ec:ad:
c1:12:55:74:8f:4a:b9:49:01:7e:c1:51:d2:3e:52:0f:18:ad:
24:69:69:99:b5:42:79:89:1d:1c:32:bc:53:91:b9:c2:04:07:
94:03:75:b5:ca:0c:bd:c3:09:b9:c3:f2:3c:bb:8a:b9:e4:3d:
1d:85:b6:ec:e1:79:95:2e:36:d2:d4:39:77:c7:37:70:8a:95:
61:f2:d9:fd:ea:9b:db:f7:7b:26:89:ac:68:42:f4:be:f1:12:
3e:02:76:da:7a:7b:c1:8b:2b:1b:95:1a:29:41:64:cf:8c:d3:
f1:c6:a2:4b:6e:6c:3f:e5:40:47:ec:c8:69:45:8a:64:cd:31:
82:4c:5b:f9:b2:0a:8c:aa:40:c6:8d:82:ca:65:d7:e1:54:89:
69:c3:d8:27:f3:89:af:ab:94:e1:43:29:5a:02:72:b7:ce:4f:
fb:bf:c8:10:ca:a5:b6:3e:bd:8e:8c:99:83:fa:92:fd:ac:c5:
de:57:c1:d8:84:b8:fd:d9:50:6d:c0:8c:a7:fd:68:f3:d8:ea:
f4:2c:42:c6:0c:5a:1e:ea:6f:e2:3d:06:36:ef:23:3f:54:49:
f3:9e:c3:7b:6f:68:6a:c1:e4:12:f1:2f:34:d7:c8:ef:f9:3e:
db:b2:3f:8a
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYzI301zTbJqj7zET1TavgXeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2NjBkNzgzMjA4NjBkNWVmZTcyOWUyMDhiNWViNGIyYWJl
YmUwNzgwHhcNMjQwMTAyMDYzMjA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmRjODY2YWYyMGQ0MTViZDMzYjI1MDM2NDVjZDIyZWQ4OGQzZDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAXkdViBk1RKQnVasfHdvB+s5BfM
4bc4HY1kMvLq3YA368WMMl2ZEbWpSMmifxrKIqj3/CP12U5XaCT+Vr4yw4tAavj6
g0MkTMhz02NdvSJWq95V1WQbPakO6oN00O5WuhQ2D8YSKNIwg0dJdAmXC+zV5j0l
ohXfwt6xam9J1wupsjslgnWOqFsQLHBna8TMlBF1e6psCqHoSk3ISqZR9SORUowc
mkz9luj0uF5SqqKkgbW0cWPgdT3swm5/TYX4/8GNJVlEuolYo3MHGr026zppHQdi
2JnIBHPUyhzbmxdrNUtDf2UI5JdskecjCLYjVBxvFboscKlZXkODH6HCBwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDLchmryDUFb0zslA2Rc0i7YjT2FMB8GA1UdIwQY
MBaAFLZg14Mghg1e/nKeIItetLKr6+B4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG1EWGd5Q0dEVjctY3A0Z2kxNjBzcXZyNEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9kYWYyMTItZjAwOS00YmQ0LTg3NGQt
NjI0YzNlNzg4Y2RmLzEvTXR5R2F2SU5RVnZUT3lVRFpGelNMdGlOUFlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9kYWYyMTItZjAwOS00YmQ0LTg3NGQtNjI0YzNlNzg4Y2Rm
LzEvdG1EWGd5Q0dEVjctY3A0Z2kxNjBzcXZyNEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQCLYQIAwQA
ubOzMBQEAgACMA4DBQMqDmVAAwUDKhN9ADANBgkqhkiG9w0BAQsFAAOCAQEAJcC4
QGPRRDVdVYBs4b0xHeytwRJVdI9KuUkBfsFR0j5SDxitJGlpmbVCeYkdHDK8U5G5
wgQHlAN1tcoMvcMJucPyPLuKueQ9HYW27OF5lS420tQ5d8c3cIqVYfLZ/eqb2/d7
JomsaEL0vvESPgJ22np7wYsrG5UaKUFkz4zT8caiS25sP+VAR+zIaUWKZM0xgkxb
+bIKjKpAxo2CymXX4VSJacPYJ/OJr6uU4UMpWgJyt85P+7/IEMqltj69joyZg/qS
/azF3lfB2IS4/dlQbcCMp/1o89jq9CxCxgxaHupv4j0GNu8jP1RJ857De29oasHk
EvEvNNfI7/k+27I/ig==
-----END CERTIFICATE-----
Generated at Sat Jun 8 03:06:10 2024 by rpki-client on console-fra.rpki-client.org