Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/MvF-Vz0UZfkrOeyUg86N5lNqzCc.roa
File: MvF-Vz0UZfkrOeyUg86N5lNqzCc.roa (raw, json)
Hash identifier: ZTPgBlYPWQipaUyEExqMWe4wHL8Nl6VOtdYK18jaTgI=
Subject key identifier: 32:F1:7E:57:3D:14:65:F9:2B:39:EC:94:83:CE:8D:E6:53:6A:CC:27
Certificate issuer: /CN=9b32a2e8fcbeee63020ba93daab9076c37bc9991
Certificate serial: 018CC64A61D8376506D0FB7AF12E28F39FF6
Authority key identifier: 9B:32:A2:E8:FC:BE:EE:63:02:0B:A9:3D:AA:B9:07:6C:37:BC:99:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/MvF-Vz0UZfkrOeyUg86N5lNqzCc.roa
Signing time: Mon 01 Jan 2024 18:30:12 +0000
ROA not before: Mon 01 Jan 2024 18:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57986
IP address blocks: 45.15.201.0/24 maxlen: 24
45.15.202.0/24 maxlen: 24
45.15.203.0/24 maxlen: 24
45.15.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:61:d8:37:65:06:d0:fb:7a:f1:2e:28:f3:9f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b32a2e8fcbeee63020ba93daab9076c37bc9991
Validity
Not Before: Jan 1 18:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32f17e573d1465f92b39ec9483ce8de6536acc27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:37:1f:13:f1:2c:e9:5c:d5:ea:b3:dc:37:86:
61:ae:d1:3c:b1:3a:75:85:69:c6:9f:95:62:38:ee:
ea:ee:17:52:05:95:d0:31:d0:4e:68:74:b2:32:59:
ae:f4:40:99:24:3a:79:d4:ed:ec:33:b4:66:d2:96:
7d:d4:1b:52:06:24:a0:c3:72:cb:68:de:6e:64:48:
d7:8e:c0:be:13:01:06:88:5c:98:06:ef:bc:5a:5d:
1d:1d:0f:cc:d3:28:27:e1:f8:54:bb:93:13:bd:7b:
1b:57:e1:14:06:2e:dc:e3:01:22:14:5f:40:1d:6f:
e4:39:cb:3e:f8:c8:b9:bc:91:d4:ae:20:18:e5:ae:
1b:95:9b:3c:83:f3:de:2c:20:d4:73:31:f2:36:2e:
38:1f:b4:4c:7d:49:5f:da:0d:d7:3b:86:00:82:5c:
5e:45:97:83:b3:51:01:ba:7e:44:0f:77:2a:43:03:
c3:2e:39:1a:15:bd:fe:92:ae:7b:fb:00:1d:6d:bb:
e6:f8:0f:b0:3d:93:0b:2a:ce:21:66:b8:33:f8:32:
b1:9d:d6:8c:04:59:e0:47:60:39:7e:a3:b6:9e:2a:
d3:db:3c:5e:8e:d5:94:99:f2:fa:b1:ab:19:89:24:
04:66:fe:66:cd:b3:34:a6:c9:64:55:97:56:7e:0b:
c2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F1:7E:57:3D:14:65:F9:2B:39:EC:94:83:CE:8D:E6:53:6A:CC:27
X509v3 Authority Key Identifier:
keyid:9B:32:A2:E8:FC:BE:EE:63:02:0B:A9:3D:AA:B9:07:6C:37:BC:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/MvF-Vz0UZfkrOeyUg86N5lNqzCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.200.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:fc:22:41:9b:88:ed:db:d4:6b:65:1b:27:fd:5f:1a:0c:5a:
f8:f9:4a:ea:b7:29:ca:42:50:fb:a5:ab:de:1c:e5:5a:f9:1c:
40:9b:ae:19:a2:cb:92:05:97:18:ec:bd:f8:5c:4c:b2:f9:83:
15:a9:fa:ed:64:9d:bf:19:18:d9:77:ff:3e:7a:29:a0:ed:f6:
62:16:36:7a:57:63:03:37:6c:72:07:e3:e1:8f:c8:25:b3:5e:
72:99:5c:58:61:f7:63:2e:25:17:15:0a:fe:cd:c9:ee:80:a3:
a5:00:b6:02:5b:ec:af:29:26:15:4c:7f:6a:97:b8:85:5f:f4:
07:84:e4:47:96:55:bf:10:10:85:1a:40:a0:8a:0d:4c:8e:91:
3a:07:5f:41:9f:48:82:57:78:e9:69:af:93:ca:05:5b:37:7d:
3e:fc:05:72:06:0a:b4:48:fd:f1:b1:f7:c9:8c:54:73:46:fb:
c2:62:fe:5e:7e:ed:f8:c6:1b:36:40:40:34:58:78:38:a6:1b:
5b:d2:8b:73:d4:28:1a:bb:b3:00:ca:71:5e:f1:25:61:1d:65:
aa:ef:1a:d5:95:d7:4e:29:14:7e:30:11:29:5a:b4:fe:0e:1e:
94:7c:ae:fb:29:a1:91:96:c5:a5:05:3a:e9:88:53:59:9d:5e:
ba:cf:9f:b4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSmHYN2UG0Pt68S4o85/2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMzJhMmU4ZmNiZWVlNjMwMjBiYTkzZGFhYjkwNzZjMzdi
Yzk5OTEwHhcNMjQwMTAxMTgzMDEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmYxN2U1NzNkMTQ2NWY5MmIzOWVjOTQ4M2NlOGRlNjUzNmFjYzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zcfE/Es6VzV6rPcN4ZhrtE8sTp1
hWnGn5ViOO7q7hdSBZXQMdBOaHSyMlmu9ECZJDp51O3sM7Rm0pZ91BtSBiSgw3LL
aN5uZEjXjsC+EwEGiFyYBu+8Wl0dHQ/M0ygn4fhUu5MTvXsbV+EUBi7c4wEiFF9A
HW/kOcs++Mi5vJHUriAY5a4blZs8g/PeLCDUczHyNi44H7RMfUlf2g3XO4YAglxe
RZeDs1EBun5ED3cqQwPDLjkaFb3+kq57+wAdbbvm+A+wPZMLKs4hZrgz+DKxndaM
BFngR2A5fqO2nirT2zxejtWUmfL6sasZiSQEZv5mzbM0pslkVZdWfgvCFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDLxflc9FGX5KznslIPOjeZTaswnMB8GA1UdIwQY
MBaAFJsyouj8vu5jAgupPaq5B2w3vJmRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXpLaTZQeS03bU1DQzZrOXFya0hiRGU4bVpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9kZjIxY2ItMDhhYy00ZTVjLWI4NTQt
ZTNhYjkwODdkNDAzLzEvTXZGLVZ6MFVaZmtyT2V5VWc4Nk41bE5xekNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9kZjIxY2ItMDhhYy00ZTVjLWI4NTQtZTNhYjkwODdkNDAz
LzEvbXpLaTZQeS03bU1DQzZrOXFya0hiRGU4bVpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQ/IMA0G
CSqGSIb3DQEBCwUAA4IBAQCe/CJBm4jt29RrZRsn/V8aDFr4+UrqtynKQlD7pave
HOVa+RxAm64ZosuSBZcY7L34XEyy+YMVqfrtZJ2/GRjZd/8+eimg7fZiFjZ6V2MD
N2xyB+Phj8gls15ymVxYYfdjLiUXFQr+zcnugKOlALYCW+yvKSYVTH9ql7iFX/QH
hORHllW/EBCFGkCgig1MjpE6B19Bn0iCV3jpaa+TygVbN30+/AVyBgq0SP3xsffJ
jFRzRvvCYv5efu34xhs2QEA0WHg4phtb0otz1Cgau7MAynFe8SVhHWWq7xrVlddO
KRR+MBEpWrT+Dh6UfK77KaGRlsWlBTrpiFNZnV66z5+0
-----END CERTIFICATE-----
Generated at Sat Nov 23 04:43:04 2024 by rpki-client on console-ams.rpki-client.org