Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/eMMiBMqdgCYlfRvkR7C_5HyOkHQ.roa
File: eMMiBMqdgCYlfRvkR7C_5HyOkHQ.roa (raw, json)
Hash identifier: 4na3fuOKSWoZqcoqhaTGKlwQIKkdXhL7FH07+kD+KVI=
Subject key identifier: 78:C3:22:04:CA:9D:80:26:25:7D:1B:E4:47:B0:BF:E4:7C:8E:90:74
Certificate issuer: /CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Certificate serial: 018CC8712228DE5925B1149232B937026187
Authority key identifier: B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/eMMiBMqdgCYlfRvkR7C_5HyOkHQ.roa
Signing time: Tue 02 Jan 2024 04:31:46 +0000
ROA not before: Tue 02 Jan 2024 04:31:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201925
IP address blocks: 94.246.179.0/24 maxlen: 24
94.246.180.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:22:28:de:59:25:b1:14:92:32:b9:37:02:61:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Validity
Not Before: Jan 2 04:31:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78c32204ca9d8026257d1be447b0bfe47c8e9074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6d:f3:df:b7:d5:f8:90:67:8c:c2:d8:3a:0b:
89:e7:ac:53:d1:05:f2:d0:67:73:f5:bf:59:60:bf:
fd:0f:e3:ab:c1:ab:5a:41:e6:60:78:5a:b0:72:e5:
80:d2:82:7f:fe:3d:c5:85:7f:fc:d0:69:3c:fa:2e:
9c:e7:aa:a8:a2:13:23:7d:79:3b:7e:df:20:62:a6:
76:8a:b4:81:12:ad:6e:0f:c4:ef:34:ab:bd:85:bc:
6c:4c:c6:da:55:78:25:ee:b0:4a:3a:1c:65:e6:c9:
ba:81:52:a7:bd:8c:75:9e:89:2c:7b:9a:43:22:2d:
ee:d3:7a:0f:40:4a:45:e4:d8:8f:1d:7d:57:93:ca:
bb:55:fc:9f:4c:09:a5:53:40:34:51:10:1c:7c:7f:
84:38:73:42:d7:97:99:a4:0f:5f:65:43:07:56:9d:
f5:30:a3:18:9d:e2:4d:39:a8:da:05:43:73:cd:40:
09:1d:6b:6a:2a:69:ce:08:84:08:dc:36:05:16:da:
2f:bc:d4:c0:0d:fd:bb:83:ff:0e:c2:1b:0d:34:29:
b5:bb:1c:1c:5a:f3:7d:a2:f5:a5:92:d0:81:9e:c4:
5f:49:e5:6f:2c:ad:fa:22:69:97:f4:48:45:60:d8:
30:fd:c0:2a:f1:93:b9:89:89:56:60:1e:9f:5a:bc:
45:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C3:22:04:CA:9D:80:26:25:7D:1B:E4:47:B0:BF:E4:7C:8E:90:74
X509v3 Authority Key Identifier:
keyid:B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/eMMiBMqdgCYlfRvkR7C_5HyOkHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.246.179.0-94.246.181.255
Signature Algorithm: sha256WithRSAEncryption
1a:c3:3e:5e:29:8e:5d:a6:e7:87:4b:ea:ca:53:cc:60:4e:e0:
b7:dc:d0:d0:6c:0b:f7:3c:7b:d7:fa:ab:74:68:ab:7c:4c:0e:
95:10:32:5d:ef:7d:f7:e2:5d:d8:42:dc:a6:3a:3f:ca:7d:84:
ad:cb:2e:89:22:d6:14:40:42:64:1e:0d:5f:1c:0e:37:12:57:
23:4f:27:3c:ea:e3:e2:4f:16:a8:0a:51:f6:4c:1a:ac:4d:cd:
87:88:16:b4:78:86:69:24:23:08:dd:da:06:16:de:5e:b2:ce:
ad:77:de:20:7d:03:78:24:84:91:8f:6a:0e:01:49:76:78:05:
e2:0d:2c:b0:a2:36:cf:44:6e:f8:8c:c7:21:e7:d0:d2:a8:38:
72:58:77:79:e4:de:fb:6b:71:fd:e5:9a:25:eb:d6:59:e7:23:
11:34:6c:0b:16:9d:0d:f8:b3:c4:f0:f2:1e:72:9d:25:eb:f5:
91:dd:8c:c6:68:c7:2f:22:df:d7:ef:2d:c5:b0:a5:22:33:fe:
76:5a:3d:4a:ff:71:db:e5:9d:e3:1e:62:5d:7c:a3:92:86:47:
52:7f:93:c6:28:45:6f:e2:26:45:d6:41:12:3a:ef:2e:05:86:
49:f3:90:de:2d:5c:76:1d:a4:6a:52:1b:6d:60:e1:c5:19:e3:
23:b9:d0:03
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYzIcSIo3lklsRSSMrk3AmGHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5Yjg3YjNiMDljY2I2OWE2ZGUyMDQ2OGU5MGVjYmIxOGY1
ZWNiYjYwHhcNMjQwMTAyMDQzMTQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OGMzMjIwNGNhOWQ4MDI2MjU3ZDFiZTQ0N2IwYmZlNDdjOGU5MDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxW3z37fV+JBnjMLYOguJ56xT0QXy
0Gdz9b9ZYL/9D+OrwataQeZgeFqwcuWA0oJ//j3FhX/80Gk8+i6c56qoohMjfXk7
ft8gYqZ2irSBEq1uD8TvNKu9hbxsTMbaVXgl7rBKOhxl5sm6gVKnvYx1nokse5pD
Ii3u03oPQEpF5NiPHX1Xk8q7VfyfTAmlU0A0URAcfH+EOHNC15eZpA9fZUMHVp31
MKMYneJNOajaBUNzzUAJHWtqKmnOCIQI3DYFFtovvNTADf27g/8OwhsNNCm1uxwc
WvN9ovWlktCBnsRfSeVvLK36ImmX9EhFYNgw/cAq8ZO5iYlWYB6fWrxFqwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFHjDIgTKnYAmJX0b5Eewv+R8jpB0MB8GA1UdIwQY
MBaAFLm4ezsJzLaabeIEaOkOy7GPXsu2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWJoN093bk10cHB0NGdSbzZRN0xzWTlleTdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wMGRkYWYtM2JlNS00MjBkLTkxOWYt
M2I0Y2I5NzVhOWJjLzEvZU1NaUJNcWRnQ1lsZlJ2a1I3Q181SHlPa0hRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8wMGRkYWYtM2JlNS00MjBkLTkxOWYtM2I0Y2I5NzVhOWJj
LzEvdWJoN093bk10cHB0NGdSbzZRN0xzWTlleTdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABe9rMD
BAFe9rQwDQYJKoZIhvcNAQELBQADggEBABrDPl4pjl2m54dL6spTzGBO4Lfc0NBs
C/c8e9f6q3Roq3xMDpUQMl3vfffiXdhC3KY6P8p9hK3LLoki1hRAQmQeDV8cDjcS
VyNPJzzq4+JPFqgKUfZMGqxNzYeIFrR4hmkkIwjd2gYW3l6yzq133iB9A3gkhJGP
ag4BSXZ4BeINLLCiNs9EbviMxyHn0NKoOHJYd3nk3vtrcf3lmiXr1lnnIxE0bAsW
nQ34s8Tw8h5ynSXr9ZHdjMZoxy8i39fvLcWwpSIz/nZaPUr/cdvlneMeYl18o5KG
R1J/k8YoRW/iJkXWQRI67y4FhknzkN4tXHYdpGpSG21g4cUZ4yO50AM=
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:47:18 2024 by rpki-client on console-fra.rpki-client.org