Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/dMg8kb30k_RHGhQLDGBoYQ2q8rQ.roa
File: dMg8kb30k_RHGhQLDGBoYQ2q8rQ.roa (raw, json)
Hash identifier: gbcvdfronOruPG3G21DfZaZeAbqKh9zWKtT5U/1z8G0=
Subject key identifier: 74:C8:3C:91:BD:F4:93:F4:47:1A:14:0B:0C:60:68:61:0D:AA:F2:B4
Certificate issuer: /CN=e89795201c7d3d93cd2a085de3692edd71b7726d
Certificate serial: 018CC56E6BFAC0084A8ED43F189A2C4F0A47
Authority key identifier: E8:97:95:20:1C:7D:3D:93:CD:2A:08:5D:E3:69:2E:DD:71:B7:72:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6JeVIBx9PZPNKghd42ku3XG3cm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/dMg8kb30k_RHGhQLDGBoYQ2q8rQ.roa
Signing time: Mon 01 Jan 2024 14:29:57 +0000
ROA not before: Mon 01 Jan 2024 14:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206493
IP address blocks: 2001:67c:272c::/48 maxlen: 48
2001:67c:114c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/6JeVIBx9PZPNKghd42ku3XG3cm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/6JeVIBx9PZPNKghd42ku3XG3cm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6JeVIBx9PZPNKghd42ku3XG3cm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:6b:fa:c0:08:4a:8e:d4:3f:18:9a:2c:4f:0a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e89795201c7d3d93cd2a085de3692edd71b7726d
Validity
Not Before: Jan 1 14:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74c83c91bdf493f4471a140b0c6068610daaf2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2b:94:eb:21:e6:1c:56:be:52:a2:50:e8:8b:
5c:b3:94:3a:3e:81:a4:1d:a5:5e:7b:36:a0:88:23:
c7:47:7d:dd:8f:cc:7f:55:ab:5e:b8:f1:08:bb:2f:
ed:c6:e7:bb:eb:27:04:cb:18:1b:5e:bc:b9:ef:82:
ef:ca:d8:19:1b:97:96:d1:be:65:6b:b5:0a:bc:af:
7f:18:08:ec:4e:5d:03:55:f9:65:c2:24:96:22:52:
20:6a:df:42:e6:4d:f9:41:19:1d:ea:15:b8:f8:81:
02:56:0e:fa:dc:2c:d6:3a:5e:bd:58:3c:ce:81:ea:
04:f0:e4:fa:2f:0f:64:57:61:b5:39:02:dc:e7:bd:
97:45:a1:90:80:d6:63:5c:43:2a:55:3b:90:71:f3:
3e:39:77:a8:42:0a:66:a7:f3:0c:eb:00:d0:46:59:
51:24:7c:6f:90:c6:e1:95:3e:07:d0:a2:91:fd:e8:
6a:26:04:c5:e4:3a:17:a6:db:43:3f:8b:c0:c3:7f:
1d:d3:c4:af:ac:e7:8a:00:2f:41:69:4e:c6:b0:0e:
69:8b:08:eb:82:22:6b:71:1b:37:63:d2:82:a2:05:
e2:e9:ca:91:11:e6:14:ac:31:b5:2d:0d:96:dc:2f:
31:9e:8e:19:06:67:03:a2:89:ae:1c:72:76:bc:20:
ac:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C8:3C:91:BD:F4:93:F4:47:1A:14:0B:0C:60:68:61:0D:AA:F2:B4
X509v3 Authority Key Identifier:
keyid:E8:97:95:20:1C:7D:3D:93:CD:2A:08:5D:E3:69:2E:DD:71:B7:72:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6JeVIBx9PZPNKghd42ku3XG3cm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/dMg8kb30k_RHGhQLDGBoYQ2q8rQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b18b03-7229-4a2a-9185-298671d1261e/1/6JeVIBx9PZPNKghd42ku3XG3cm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:114c::/48
2001:67c:272c::/48
Signature Algorithm: sha256WithRSAEncryption
a8:46:f8:0e:b7:f4:06:22:6d:b9:b9:da:3e:4f:db:b9:72:57:
91:c6:db:32:e6:c4:d1:8a:4a:5e:d0:d9:f0:b6:8d:d0:d0:7c:
8b:cd:d7:90:9a:0d:83:63:d1:f7:64:c5:e6:64:1a:b8:cf:8f:
a1:96:c1:45:46:b6:24:44:35:62:a5:38:e6:11:e2:19:5a:4f:
8e:bf:13:43:59:b6:9c:dc:04:0d:f8:7b:d5:bd:d4:cb:3b:9d:
6a:16:59:58:55:db:a3:01:b2:c8:2e:6a:05:ea:23:86:0f:3f:
07:93:4c:c4:9f:4a:2f:08:fb:8f:e7:db:62:b1:e5:ce:bd:b7:
63:fc:b6:ef:33:d1:22:f7:79:d6:aa:b3:8d:bb:4c:ca:92:9d:
76:ca:a7:18:5b:96:96:e9:e6:f6:27:0b:9f:50:4a:2c:0c:df:
91:a1:99:9f:43:1b:47:6a:c8:fb:a4:83:09:77:c3:b2:03:20:
78:82:52:6b:f6:04:2f:3e:d0:8a:18:74:99:f1:82:57:b1:f0:
a2:d8:80:6a:42:73:c4:5a:f2:3c:7b:58:99:6d:fc:5c:4f:8c:
9c:de:1b:2e:d0:fb:88:6a:81:38:41:98:9e:46:cd:08:c0:bd:
6a:ea:e6:6d:04:fd:fa:a7:bc:c9:fa:e8:66:6d:47:9d:03:8c:
12:c2:1c:10
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzFbmv6wAhKjtQ/GJosTwpHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4OTc5NTIwMWM3ZDNkOTNjZDJhMDg1ZGUzNjkyZWRkNzFi
NzcyNmQwHhcNMjQwMTAxMTQyOTU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NGM4M2M5MWJkZjQ5M2Y0NDcxYTE0MGIwYzYwNjg2MTBkYWFmMmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCuU6yHmHFa+UqJQ6Itcs5Q6PoGk
HaVeezagiCPHR33dj8x/VateuPEIuy/txue76ycEyxgbXry574LvytgZG5eW0b5l
a7UKvK9/GAjsTl0DVfllwiSWIlIgat9C5k35QRkd6hW4+IECVg763CzWOl69WDzO
geoE8OT6Lw9kV2G1OQLc572XRaGQgNZjXEMqVTuQcfM+OXeoQgpmp/MM6wDQRllR
JHxvkMbhlT4H0KKR/ehqJgTF5DoXpttDP4vAw38d08SvrOeKAC9BaU7GsA5piwjr
giJrcRs3Y9KCogXi6cqREeYUrDG1LQ2W3C8xno4ZBmcDoomuHHJ2vCCsgwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHTIPJG99JP0RxoUCwxgaGENqvK0MB8GA1UdIwQY
MBaAFOiXlSAcfT2TzSoIXeNpLt1xt3JtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkplVklCeDlQWlBOS2doZDQya3UzWEczY20wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iMThiMDMtNzIyOS00YTJhLTkxODUt
Mjk4NjcxZDEyNjFlLzEvZE1nOGtiMzBrX1JIR2hRTERHQm9ZUTJxOHJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9iMThiMDMtNzIyOS00YTJhLTkxODUtMjk4NjcxZDEyNjFl
LzEvNkplVklCeDlQWlBOS2doZDQya3UzWEczY20wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAIAEGfBFM
AwcAIAEGfCcsMA0GCSqGSIb3DQEBCwUAA4IBAQCoRvgOt/QGIm25udo+T9u5cleR
xtsy5sTRikpe0Nnwto3Q0HyLzdeQmg2DY9H3ZMXmZBq4z4+hlsFFRrYkRDVipTjm
EeIZWk+OvxNDWbac3AQN+HvVvdTLO51qFllYVdujAbLILmoF6iOGDz8Hk0zEn0ov
CPuP59tiseXOvbdj/LbvM9Ei93nWqrONu0zKkp12yqcYW5aW6eb2JwufUEosDN+R
oZmfQxtHasj7pIMJd8OyAyB4glJr9gQvPtCKGHSZ8YJXsfCi2IBqQnPEWvI8e1iZ
bfxcT4yc3hsu0PuIaoE4QZieRs0IwL1q6uZtBP36p7zJ+uhmbUedA4wSwhwQ
-----END CERTIFICATE-----
Generated at Sun May 19 08:29:03 2024 by rpki-client on console-fra.rpki-client.org