Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/1-MIXQxRn_V5NApktsp3mRCKYNPI.roa
File: 1-MIXQxRn_V5NApktsp3mRCKYNPI.roa (raw, json)
Hash identifier: TxqsZr0h+g1L1kIxuC6+mGMcohUk74SbQT5MrhUpOx4=
Subject key identifier: F8:C2:17:43:14:67:FD:5E:4D:02:99:2D:B2:9D:E6:44:22:98:34:F2
Certificate issuer: /CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Certificate serial: 018CC8DEBD5ED4D1751919F3A345A2F3A89A
Authority key identifier: 50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/1-MIXQxRn_V5NApktsp3mRCKYNPI.roa
Signing time: Tue 02 Jan 2024 06:31:29 +0000
ROA not before: Tue 02 Jan 2024 06:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8561
IP address blocks: 195.253.66.0/24 maxlen: 24
195.253.74.0/24 maxlen: 24
195.253.88.0/21 maxlen: 24
195.253.96.0/19 maxlen: 24
185.119.136.0/22 maxlen: 24
195.253.64.0/24 maxlen: 24
2a01:5b0:d::/48 maxlen: 48
2a01:5b0:3::/48 maxlen: 48
2a01:5b0:8::/46 maxlen: 48
2a01:5b0:10::/45 maxlen: 48
2a01:5b0:20::/43 maxlen: 48
2a01:5b0:6::/48 maxlen: 48
2a01:5b0:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:bd:5e:d4:d1:75:19:19:f3:a3:45:a2:f3:a8:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Validity
Not Before: Jan 2 06:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8c217431467fd5e4d02992db29de644229834f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:73:1d:ed:a7:ae:34:8f:50:92:3e:98:f6:0f:
a8:19:86:0a:ef:74:fb:a4:2a:c8:74:e7:93:a8:b0:
c7:e3:84:06:bf:45:38:ba:c6:77:b7:86:ca:c8:ed:
d4:2d:dd:46:72:a1:52:9c:36:88:c8:4b:63:c3:78:
eb:9c:4f:b3:18:58:35:3c:87:ea:fa:a4:80:1e:79:
86:e2:83:aa:4f:00:f7:68:c0:38:82:26:ff:56:53:
d1:97:5b:09:a8:33:c3:14:ba:14:47:9e:fe:da:6a:
f1:31:0d:2e:cd:75:a0:28:d7:90:fc:8b:57:72:c4:
bf:04:88:16:b0:11:5e:f9:aa:5c:02:52:d1:31:b9:
29:c0:20:14:4a:c2:ad:b5:15:d9:f8:6f:19:65:fb:
2a:8b:29:c4:fe:fb:09:df:19:2c:d9:92:9e:e1:8e:
1b:15:36:d1:7d:04:de:f0:b9:c4:ff:41:24:70:65:
29:59:c4:4a:1b:b0:e4:b9:75:11:a7:39:7e:e2:1d:
e5:ca:67:f8:a9:66:bf:5e:16:42:f3:37:60:12:89:
9e:17:42:e5:a1:01:17:eb:21:4f:c1:fd:a0:d6:21:
f9:c7:5f:aa:93:6c:41:76:8d:13:60:8f:b8:b9:13:
28:81:32:a6:e6:ba:99:65:3b:96:af:00:86:30:51:
09:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C2:17:43:14:67:FD:5E:4D:02:99:2D:B2:9D:E6:44:22:98:34:F2
X509v3 Authority Key Identifier:
keyid:50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/1-MIXQxRn_V5NApktsp3mRCKYNPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.136.0/22
195.253.64.0/24
195.253.66.0/24
195.253.74.0/24
195.253.88.0-195.253.127.255
IPv6:
2a01:5b0:3::-2a01:5b0:4:ffff:ffff:ffff:ffff:ffff
2a01:5b0:6::/48
2a01:5b0:8::/46
2a01:5b0:d::/48
2a01:5b0:10::/45
2a01:5b0:20::/43
Signature Algorithm: sha256WithRSAEncryption
0e:80:14:38:7a:4e:2e:bb:45:b9:cd:4e:b9:73:05:84:ef:ac:
c5:14:ac:f8:b6:0d:90:31:75:64:37:f7:5f:d4:b2:62:7a:18:
df:48:89:89:39:95:6c:17:bb:89:07:ca:a7:a3:12:e1:79:88:
0f:fc:39:63:0c:ff:b1:d8:01:66:eb:a2:69:31:47:4a:c9:d2:
82:18:23:0a:7d:67:7f:9f:c3:3b:38:11:9b:26:1f:c4:12:4d:
a0:c8:89:13:b7:c4:b9:65:4d:63:34:53:15:b7:89:92:18:57:
11:0b:60:a6:22:07:01:90:e0:a6:bb:38:43:4d:5b:2d:3a:54:
00:8e:77:f1:14:25:15:98:ed:54:6f:d3:01:87:15:cb:bf:28:
7c:92:2b:36:ec:3e:bf:22:ef:14:b2:a5:85:88:03:de:31:e7:
94:21:75:6c:1b:26:0c:25:da:e4:4d:a0:72:49:00:df:fc:00:
6d:80:09:58:8e:75:4f:5f:f2:1e:db:5a:02:77:39:ee:b7:df:
b0:f9:42:5e:ea:99:8e:53:f7:a4:d9:ea:a0:f8:0d:a0:3e:70:
c6:43:e9:ec:d5:b1:31:55:4a:78:c8:9d:48:ab:49:c3:f8:e2:
03:5c:76:c4:23:54:5c:23:4c:6c:96:7a:fc:7c:90:88:1f:1a:
14:67:5c:b9
-----BEGIN CERTIFICATE-----
MIIFaDCCBFCgAwIBAgISAYzI3r1e1NF1GRnzo0Wi86iaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYzFlNDI2ZjU4ZTQyYWUzMGU1NmNkYjdmZjRkOGY5ZGRk
ODViMzAwHhcNMjQwMTAyMDYzMTI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGMyMTc0MzE0NjdmZDVlNGQwMjk5MmRiMjlkZTY0NDIyOTgzNGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHMd7aeuNI9Qkj6Y9g+oGYYK73T7
pCrIdOeTqLDH44QGv0U4usZ3t4bKyO3ULd1GcqFSnDaIyEtjw3jrnE+zGFg1PIfq
+qSAHnmG4oOqTwD3aMA4gib/VlPRl1sJqDPDFLoUR57+2mrxMQ0uzXWgKNeQ/ItX
csS/BIgWsBFe+apcAlLRMbkpwCAUSsKttRXZ+G8ZZfsqiynE/vsJ3xks2ZKe4Y4b
FTbRfQTe8LnE/0EkcGUpWcRKG7DkuXURpzl+4h3lymf4qWa/XhZC8zdgEomeF0Ll
oQEX6yFPwf2g1iH5x1+qk2xBdo0TYI+4uRMogTKm5rqZZTuWrwCGMFEJKwIDAQAB
o4ICdDCCAnAwHQYDVR0OBBYEFPjCF0MUZ/1eTQKZLbKd5kQimDTyMB8GA1UdIwQY
MBaAFFDB5Cb1jkKuMOVs23/02Pnd2FswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU1Ia0p2V09RcTR3NVd6YmZfVFktZDNZV3pBLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi85YzZkYWQtMzc3YS00NDRlLWIwZGMt
MDYzY2U2Y2Y0NjBkLzEvMS1NSVhReFJuX1Y1TkFwa3RzcDNtUkNLWU5QSS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvN2IvOWM2ZGFkLTM3N2EtNDQ0ZS1iMGRjLTA2M2NlNmNmNDYw
ZC8xL1VNSGtKdldPUXE0dzVXemJmX1RZLWQzWVd6QS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCBiAYIKwYBBQUHAQcBAf8EeTB3MCwEAgABMCYDBAK5d4gD
BADD/UADBADD/UIDBADD/UowDAMEA8P9WAMEB8P9ADBHBAIAAjBBMBIDBwAqAQWw
AAMDBwAqAQWwAAQDBwAqAQWwAAYDBwIqAQWwAAgDBwAqAQWwAA0DBwMqAQWwABAD
BwUqAQWwACAwDQYJKoZIhvcNAQELBQADggEBAA6AFDh6Ti67RbnNTrlzBYTvrMUU
rPi2DZAxdWQ391/UsmJ6GN9IiYk5lWwXu4kHyqejEuF5iA/8OWMM/7HYAWbromkx
R0rJ0oIYIwp9Z3+fwzs4EZsmH8QSTaDIiRO3xLllTWM0UxW3iZIYVxELYKYiBwGQ
4Ka7OENNWy06VACOd/EUJRWY7VRv0wGHFcu/KHySKzbsPr8i7xSypYWIA94x55Qh
dWwbJgwl2uRNoHJJAN/8AG2ACViOdU9f8h7bWgJ3Oe6337D5Ql7qmY5T96TZ6qD4
DaA+cMZD6ezVsTFVSnjInUirScP44gNcdsQjVFwjTGyWevx8kIgfGhRnXLk=
-----END CERTIFICATE-----
Generated at Sat Nov 23 13:15:57 2024 by rpki-client on console-fra.rpki-client.org