Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/MsvF0XXeG_H1QdtSTQT_I6JC-4g.roa
File: MsvF0XXeG_H1QdtSTQT_I6JC-4g.roa (raw, json)
Hash identifier: 7N34yh8nfiV2tA8n/7qroN6muqmFq1I5d6qOsD+HWhw=
Subject key identifier: 32:CB:C5:D1:75:DE:1B:F1:F5:41:DB:52:4D:04:FF:23:A2:42:FB:88
Certificate issuer: /CN=816684a2958e0190f270a80a98789319e1cee4d8
Certificate serial: 018CC26D4959EAD9B0FDB9C41B060866387D
Authority key identifier: 81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/MsvF0XXeG_H1QdtSTQT_I6JC-4g.roa
Signing time: Mon 01 Jan 2024 00:29:51 +0000
ROA not before: Mon 01 Jan 2024 00:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 46.17.73.0/24 maxlen: 24
46.17.72.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 07:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:49:59:ea:d9:b0:fd:b9:c4:1b:06:08:66:38:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816684a2958e0190f270a80a98789319e1cee4d8
Validity
Not Before: Jan 1 00:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32cbc5d175de1bf1f541db524d04ff23a242fb88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0f:ba:02:cb:f9:c1:0d:27:85:5c:b9:bb:24:
34:ad:7f:52:5b:db:8d:ca:cc:f6:74:25:8b:0b:fb:
a8:b0:8b:a0:92:78:f2:cb:cb:1c:42:61:ff:75:07:
68:84:ec:e7:fe:9e:a6:14:5f:ba:92:fb:5a:01:80:
91:b1:4a:a4:1d:31:28:2a:26:fb:93:4a:12:29:05:
ae:33:f6:48:df:70:0e:f6:f2:f5:d2:9c:a0:90:4c:
58:fc:74:6c:0e:b1:50:ba:16:29:53:be:6b:de:ce:
50:a8:7c:c0:9c:91:e6:99:5b:31:79:49:d3:33:30:
11:b5:b5:98:bf:55:cd:5a:01:8f:a2:93:7c:be:68:
a0:95:32:f9:26:04:c2:0a:93:6d:fe:ef:f8:14:ab:
bc:91:2f:f5:b5:d5:60:0a:9c:f3:73:73:e1:ae:81:
88:0b:1d:fb:e0:0c:6c:aa:de:6d:14:f2:4a:42:36:
14:e1:d3:12:ae:ea:14:3e:9a:bb:75:d2:23:f1:d5:
84:64:81:3a:46:0e:41:8f:12:fc:80:49:48:92:5f:
4d:92:60:cd:4f:49:30:2c:06:d6:13:aa:a8:76:a6:
23:bd:bc:86:3d:8b:95:0c:f9:31:01:09:68:1a:aa:
3f:2e:03:06:f2:ab:dc:bf:1b:42:9e:f4:9c:84:b8:
7a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CB:C5:D1:75:DE:1B:F1:F5:41:DB:52:4D:04:FF:23:A2:42:FB:88
X509v3 Authority Key Identifier:
keyid:81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/MsvF0XXeG_H1QdtSTQT_I6JC-4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.72.0/21
Signature Algorithm: sha256WithRSAEncryption
2a:55:8a:56:10:fb:78:72:da:c8:a9:9b:2d:49:d0:f0:27:64:
5f:97:02:13:c4:3c:4a:6f:92:61:03:81:44:ff:ef:3d:54:c2:
a0:fc:ff:9b:87:37:91:c4:3a:d9:e6:e6:f6:88:7f:a2:64:0e:
a4:6e:dd:3e:7e:90:62:1e:30:e3:b4:d4:e4:e5:8c:bb:d7:dc:
f2:69:e5:2c:e0:f7:c4:64:57:14:96:c4:29:b6:21:5c:8b:11:
a6:c0:b7:b8:86:ad:97:c7:d3:de:2c:b7:17:d7:d9:a2:7b:49:
5f:ae:ad:d6:a6:7b:21:59:eb:5b:60:2f:a8:9c:1d:f9:65:35:
40:84:26:9f:6b:aa:45:e8:3c:e4:4d:d9:42:a8:8a:d4:c9:87:
cc:d7:9d:35:bb:dd:24:88:b0:1d:0d:ea:35:ca:c3:bf:8e:05:
a1:a6:11:58:a2:f1:1a:80:74:29:0a:07:17:9e:d8:f5:c7:42:
89:a6:9f:6c:46:1e:4e:a2:14:24:1a:72:0b:70:1d:3d:92:63:
7f:25:21:1a:ee:89:d2:af:af:c0:90:fb:91:99:c3:fa:9a:72:
be:62:48:41:7b:49:30:aa:2d:d4:93:15:98:d0:d8:54:30:6e:
8f:3b:5b:40:9a:90:c1:a6:5f:c5:fc:32:ef:5d:24:37:a4:af:
fb:09:93:45
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbUlZ6tmw/bnEGwYIZjh9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNjY4NGEyOTU4ZTAxOTBmMjcwYTgwYTk4Nzg5MzE5ZTFj
ZWU0ZDgwHhcNMjQwMTAxMDAyOTUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmNiYzVkMTc1ZGUxYmYxZjU0MWRiNTI0ZDA0ZmYyM2EyNDJmYjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAng+6Asv5wQ0nhVy5uyQ0rX9SW9uN
ysz2dCWLC/uosIugknjyy8scQmH/dQdohOzn/p6mFF+6kvtaAYCRsUqkHTEoKib7
k0oSKQWuM/ZI33AO9vL10pygkExY/HRsDrFQuhYpU75r3s5QqHzAnJHmmVsxeUnT
MzARtbWYv1XNWgGPopN8vmiglTL5JgTCCpNt/u/4FKu8kS/1tdVgCpzzc3PhroGI
Cx374Axsqt5tFPJKQjYU4dMSruoUPpq7ddIj8dWEZIE6Rg5BjxL8gElIkl9NkmDN
T0kwLAbWE6qodqYjvbyGPYuVDPkxAQloGqo/LgMG8qvcvxtCnvSchLh6xQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDLLxdF13hvx9UHbUk0E/yOiQvuIMB8GA1UdIwQY
MBaAFIFmhKKVjgGQ8nCoCph4kxnhzuTYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1dhRW9wV09BWkR5Y0tnS21IaVRHZUhPNU5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8xMzQ5Y2EtOGMzYy00MTMxLTlmNTUt
ZDU5MDMwNjYxOTQ5LzEvTXN2RjBYWGVHX0gxUWR0U1RRVF9JNkpDLTRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8xMzQ5Y2EtOGMzYy00MTMxLTlmNTUtZDU5MDMwNjYxOTQ5
LzEvZ1dhRW9wV09BWkR5Y0tnS21IaVRHZUhPNU5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLhFIMA0G
CSqGSIb3DQEBCwUAA4IBAQAqVYpWEPt4ctrIqZstSdDwJ2RflwITxDxKb5JhA4FE
/+89VMKg/P+bhzeRxDrZ5ub2iH+iZA6kbt0+fpBiHjDjtNTk5Yy719zyaeUs4PfE
ZFcUlsQptiFcixGmwLe4hq2Xx9PeLLcX19mie0lfrq3WpnshWetbYC+onB35ZTVA
hCafa6pF6DzkTdlCqIrUyYfM1501u90kiLAdDeo1ysO/jgWhphFYovEagHQpCgcX
ntj1x0KJpp9sRh5OohQkGnILcB09kmN/JSEa7onSr6/AkPuRmcP6mnK+YkhBe0kw
qi3UkxWY0NhUMG6PO1tAmpDBpl/F/DLvXSQ3pK/7CZNF
-----END CERTIFICATE-----
Generated at Thu May 2 12:20:00 2024 by rpki-client on console-fra.rpki-client.org