Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/MMs4HnHsbdNr8Ew965SH5DIpvi4.roa
File: MMs4HnHsbdNr8Ew965SH5DIpvi4.roa (raw, json)
Hash identifier: Ku/6dybZerpifq4qXee8mDRjz4eG7rI5ajzOtuGjP0c=
Subject key identifier: 30:CB:38:1E:71:EC:6D:D3:6B:F0:4C:3D:EB:94:87:E4:32:29:BE:2E
Certificate issuer: /CN=3474210c28413e26284822abe83ad6d7c0f764fa
Certificate serial: 019423D70719D75F3E8E0AFF3261F9D63318
Authority key identifier: 34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/MMs4HnHsbdNr8Ew965SH5DIpvi4.roa
Signing time: Wed 01 Jan 2025 21:48:02 +0000
ROA not before: Wed 01 Jan 2025 21:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3356
IP address blocks: 91.206.20.0/24 maxlen: 24
185.68.44.0/22 maxlen: 22
185.68.44.0/24 maxlen: 24
185.68.45.0/24 maxlen: 24
185.68.46.0/24 maxlen: 24
185.161.232.0/22 maxlen: 22
185.161.233.0/24 maxlen: 24
185.161.234.0/24 maxlen: 24
185.161.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:07:19:d7:5f:3e:8e:0a:ff:32:61:f9:d6:33:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3474210c28413e26284822abe83ad6d7c0f764fa
Validity
Not Before: Jan 1 21:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30cb381e71ec6dd36bf04c3deb9487e43229be2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:da:74:21:f2:d1:ed:dd:f5:a3:9f:05:33:ae:
b8:aa:54:6c:1c:d4:1c:21:0a:9f:ca:7e:95:b0:64:
31:a6:b6:0b:32:75:49:3c:40:65:11:99:8d:51:48:
70:4b:79:20:e7:30:87:9b:92:9a:c5:25:79:fa:1a:
5f:68:56:7a:47:49:d0:ab:f1:31:24:be:5c:3c:a8:
51:53:5b:74:6f:05:89:f0:00:13:bc:26:93:cd:88:
af:a5:b8:35:77:74:37:5a:ce:f2:e1:9f:ee:e4:1d:
1f:92:7f:dd:1f:01:5e:83:29:f6:2a:ba:04:76:0d:
0e:b8:f0:78:18:cf:4b:fd:e0:74:e3:89:23:8b:19:
ea:f9:06:5a:0f:eb:5c:66:ea:48:31:74:28:28:dc:
6d:00:6f:66:e0:ce:99:e9:0c:9f:e1:6b:f6:87:78:
7a:10:8c:4a:ca:fe:b3:be:bd:2e:4f:91:4a:8c:72:
e2:c2:41:e7:4c:8a:f2:27:7c:d3:06:19:50:87:45:
3b:55:7d:26:7c:45:0d:91:61:e2:2c:e9:c8:f0:4b:
b0:d4:2f:a8:40:fc:db:29:35:5f:06:8f:08:56:0b:
76:93:d4:b1:82:61:a8:26:ff:9c:93:64:a6:f8:b8:
8e:cc:8f:24:68:63:5b:59:8f:91:9b:b2:17:81:55:
90:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CB:38:1E:71:EC:6D:D3:6B:F0:4C:3D:EB:94:87:E4:32:29:BE:2E
X509v3 Authority Key Identifier:
keyid:34:74:21:0C:28:41:3E:26:28:48:22:AB:E8:3A:D6:D7:C0:F7:64:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHQhDChBPiYoSCKr6DrW18D3ZPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/MMs4HnHsbdNr8Ew965SH5DIpvi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/3e9916-4f8a-4b08-89c9-b0c74b76e182/1/NHQhDChBPiYoSCKr6DrW18D3ZPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.20.0/24
185.68.44.0/22
185.161.232.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:f5:00:ba:cf:5d:8e:34:d1:13:fb:fa:90:9b:78:3c:03:96:
20:ce:8e:40:5c:b9:60:2d:68:51:b6:f0:c5:0b:5c:96:2c:4c:
77:7f:b7:e9:9f:16:79:1a:58:e0:6b:64:c8:ab:a9:8c:d8:d2:
15:4a:81:bf:ff:c9:09:08:47:30:56:a3:a4:d0:ff:ed:a6:27:
f7:03:1b:2c:7f:95:86:0d:61:cc:81:8d:61:38:88:b8:c5:0a:
36:1c:ca:29:03:65:7d:9f:41:f6:a6:0f:a0:2b:c0:4d:33:24:
c6:b1:ec:5c:de:1c:47:2a:53:3d:86:5f:ce:93:61:c2:6b:f8:
11:e5:1b:87:8f:0d:00:f4:5f:33:19:15:9e:a4:89:34:6d:c9:
08:b0:15:d1:2f:83:7c:36:61:92:2b:da:5b:63:51:fd:68:aa:
3d:d6:d8:cd:2c:1f:82:c4:91:0b:4a:47:8d:cc:5e:cf:6d:5b:
a3:4d:1d:72:a8:93:cf:7f:da:76:c1:f9:9e:8e:ec:28:d2:8d:
8f:f9:bf:75:f9:08:c8:31:89:7b:52:dd:73:04:a2:f9:5d:cc:
67:c3:94:aa:49:a1:e9:62:c7:94:01:cb:41:4f:b7:a2:43:0f:
b0:81:9e:44:c9:84:81:ea:36:2a:34:c1:ff:eb:59:90:ba:f3:
18:b4:d4:b7
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQj1wcZ118+jgr/MmH51jMYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NzQyMTBjMjg0MTNlMjYyODQ4MjJhYmU4M2FkNmQ3YzBm
NzY0ZmEwHhcNMjUwMTAxMjE0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMGNiMzgxZTcxZWM2ZGQzNmJmMDRjM2RlYjk0ODdlNDMyMjliZTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtp0IfLR7d31o58FM664qlRsHNQc
IQqfyn6VsGQxprYLMnVJPEBlEZmNUUhwS3kg5zCHm5KaxSV5+hpfaFZ6R0nQq/Ex
JL5cPKhRU1t0bwWJ8AATvCaTzYivpbg1d3Q3Ws7y4Z/u5B0fkn/dHwFegyn2KroE
dg0OuPB4GM9L/eB044kjixnq+QZaD+tcZupIMXQoKNxtAG9m4M6Z6Qyf4Wv2h3h6
EIxKyv6zvr0uT5FKjHLiwkHnTIryJ3zTBhlQh0U7VX0mfEUNkWHiLOnI8Euw1C+o
QPzbKTVfBo8IVgt2k9SxgmGoJv+ck2Sm+LiOzI8kaGNbWY+Rm7IXgVWQ6wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDDLOB5x7G3Ta/BMPeuUh+QyKb4uMB8GA1UdIwQY
MBaAFDR0IQwoQT4mKEgiq+g61tfA92T6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkhRaERDaEJQaVlvU0NLcjZEclcxOEQzWlBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8zZTk5MTYtNGY4YS00YjA4LTg5Yzkt
YjBjNzRiNzZlMTgyLzEvTU1zNEhuSHNiZE5yOEV3OTY1U0g1RElwdmk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8zZTk5MTYtNGY4YS00YjA4LTg5YzktYjBjNzRiNzZlMTgy
LzEvTkhRaERDaEJQaVlvU0NLcjZEclcxOEQzWlBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW84UAwQC
uUQsAwQCuaHoMA0GCSqGSIb3DQEBCwUAA4IBAQAr9QC6z12ONNET+/qQm3g8A5Yg
zo5AXLlgLWhRtvDFC1yWLEx3f7fpnxZ5Gljga2TIq6mM2NIVSoG//8kJCEcwVqOk
0P/tpif3Axssf5WGDWHMgY1hOIi4xQo2HMopA2V9n0H2pg+gK8BNMyTGsexc3hxH
KlM9hl/Ok2HCa/gR5RuHjw0A9F8zGRWepIk0bckIsBXRL4N8NmGSK9pbY1H9aKo9
1tjNLB+CxJELSkeNzF7PbVujTR1yqJPPf9p2wfmejuwo0o2P+b91+QjIMYl7Ut1z
BKL5Xcxnw5SqSaHpYseUActBT7eiQw+wgZ5EyYSB6jYqNMH/61mQuvMYtNS3
-----END CERTIFICATE-----
Generated at Wed Feb 5 18:57:02 2025 by rpki-client