Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mrYR5Cw806tKY2NocoNd_Cx-0SQ.roa
File: mrYR5Cw806tKY2NocoNd_Cx-0SQ.roa (raw, json)
Hash identifier: ate+1lpsB9v5JY59teszUJsKgqNuqQIjWovNKh8b1ag=
Subject key identifier: 9A:B6:11:E4:2C:3C:D3:AB:4A:63:63:68:72:83:5D:FC:2C:7E:D1:24
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA29FCECDE47A7A5341FCF4A331C0BF1
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mrYR5Cw806tKY2NocoNd_Cx-0SQ.roa
Signing time: Tue 02 Jan 2024 12:33:18 +0000
ROA not before: Tue 02 Jan 2024 12:33:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47463
IP address blocks: 95.46.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:fc:ec:de:47:a7:a5:34:1f:cf:4a:33:1c:0b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ab611e42c3cd3ab4a63636872835dfc2c7ed124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f1:8f:3e:2b:17:22:c5:a7:f1:6d:1d:00:cd:
bd:78:77:b5:74:21:2d:0b:b4:b5:db:31:7b:4d:15:
8e:a0:b5:84:74:ae:c1:f4:25:1a:df:04:12:db:4a:
2b:e2:e5:0f:c9:d8:85:a0:d5:94:61:93:10:18:2d:
66:4f:d1:c0:c9:ea:e4:3c:1b:03:b0:c7:41:4d:7c:
ed:7c:13:99:1f:5e:03:a8:c5:58:ca:0b:c2:9a:f8:
00:26:c9:35:3a:5b:e3:ef:a1:3a:fa:d0:01:f1:6a:
21:91:04:32:73:01:b4:d0:5e:49:26:13:9f:03:78:
10:24:12:3e:68:94:7d:62:61:39:6b:2d:e7:d0:79:
3d:7b:69:0a:48:ea:03:2d:a2:9c:f3:d0:33:62:d6:
0a:9c:6e:52:f7:48:d2:62:8e:98:10:58:64:03:a5:
36:38:97:97:6b:59:32:83:84:88:20:9b:92:4c:6d:
7d:f2:b4:97:33:15:0e:79:6b:46:2a:bc:e9:7f:1a:
a6:0b:3b:35:d7:cb:7d:5e:45:a6:24:83:53:ba:68:
e4:48:e9:79:0a:85:57:8e:4b:66:59:90:ab:21:36:
0a:07:e1:58:80:c0:5d:eb:53:4c:02:c4:4d:4b:5b:
37:9b:61:1e:9c:ea:47:99:4e:4d:fd:90:d3:58:6a:
fe:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B6:11:E4:2C:3C:D3:AB:4A:63:63:68:72:83:5D:FC:2C:7E:D1:24
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mrYR5Cw806tKY2NocoNd_Cx-0SQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.124.0/24
Signature Algorithm: sha256WithRSAEncryption
07:51:ed:5b:cf:1b:af:25:da:20:da:27:10:fe:fd:7a:cf:2c:
6a:92:8d:e3:21:e0:07:4f:0d:e7:f4:c3:e3:8a:79:2c:61:7a:
5a:b0:26:7e:49:4e:f1:54:2a:08:3b:2e:27:cf:16:cf:b0:63:
30:84:f1:ef:e3:92:04:30:43:af:c7:35:2d:64:c5:86:10:75:
49:88:2d:e7:af:67:1d:cf:a9:23:15:47:0f:a8:09:03:d7:a8:
d2:6e:58:b5:20:0a:e1:78:07:69:94:0f:3f:67:2c:79:bb:01:
26:bd:d5:be:7d:7f:bc:a4:40:5c:56:82:bb:84:9e:26:51:ce:
55:9a:aa:42:9a:69:d2:cb:20:ed:25:04:0b:de:a8:1b:21:fd:
c0:d2:73:b5:1d:6c:60:2d:c5:c0:b1:77:df:61:01:1f:fb:d0:
11:28:9c:e8:a7:22:68:f3:98:23:12:de:b0:34:cd:41:a0:11:
80:09:fb:ef:0d:3a:fb:db:17:66:c4:00:23:b8:d2:f5:4d:ac:
9a:89:69:8f:59:db:5d:8d:39:05:21:e5:b5:7b:8e:8c:6c:39:
6d:d0:66:bd:fd:ba:8a:9a:02:2f:99:30:57:0f:d3:1f:84:8f:
e9:11:be:6c:c1:93:88:71:3f:a2:ac:75:c9:49:05:24:47:fa:
f8:35:44:72
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKfzs3kenpTQfz0ozHAvxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjQwMTAyMTIzMzE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YWI2MTFlNDJjM2NkM2FiNGE2MzYzNjg3MjgzNWRmYzJjN2VkMTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPGPPisXIsWn8W0dAM29eHe1dCEt
C7S12zF7TRWOoLWEdK7B9CUa3wQS20or4uUPydiFoNWUYZMQGC1mT9HAyerkPBsD
sMdBTXztfBOZH14DqMVYygvCmvgAJsk1Olvj76E6+tAB8WohkQQycwG00F5JJhOf
A3gQJBI+aJR9YmE5ay3n0Hk9e2kKSOoDLaKc89AzYtYKnG5S90jSYo6YEFhkA6U2
OJeXa1kyg4SIIJuSTG198rSXMxUOeWtGKrzpfxqmCzs118t9XkWmJINTumjkSOl5
CoVXjktmWZCrITYKB+FYgMBd61NMAsRNS1s3m2EenOpHmU5N/ZDTWGr+twIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJq2EeQsPNOrSmNjaHKDXfwsftEkMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvbXJZUjVDdzgwNnRLWTJOb2NvTmRfQ3gtMFNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXy58MA0G
CSqGSIb3DQEBCwUAA4IBAQAHUe1bzxuvJdog2icQ/v16zyxqko3jIeAHTw3n9MPj
inksYXpasCZ+SU7xVCoIOy4nzxbPsGMwhPHv45IEMEOvxzUtZMWGEHVJiC3nr2cd
z6kjFUcPqAkD16jSbli1IArheAdplA8/Zyx5uwEmvdW+fX+8pEBcVoK7hJ4mUc5V
mqpCmmnSyyDtJQQL3qgbIf3A0nO1HWxgLcXAsXffYQEf+9ARKJzopyJo85gjEt6w
NM1BoBGACfvvDTr72xdmxAAjuNL1TayaiWmPWdtdjTkFIeW1e46MbDlt0Ga9/bqK
mgIvmTBXD9MfhI/pEb5swZOIcT+irHXJSQUkR/r4NURy
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:13:21 2024 by rpki-client on console-fra.rpki-client.org