Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/PX-K-MMDGBbFoV65uJkojcPxvyE.roa
File: PX-K-MMDGBbFoV65uJkojcPxvyE.roa (raw, json)
Hash identifier: sjpgixjd7hCeJC1dwK5Z3kqnqmiVX5cmwqZKcl6gvLE=
Subject key identifier: 3D:7F:8A:F8:C3:03:18:16:C5:A1:5E:B9:B8:99:28:8D:C3:F1:BF:21
Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial: 01933ED55C2024B45C593848F3B05F5DC8D5
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/PX-K-MMDGBbFoV65uJkojcPxvyE.roa
Signing time: Mon 18 Nov 2024 10:33:10 +0000
ROA not before: Mon 18 Nov 2024 10:33:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42473
IP address blocks: 152.53.0.0/16 maxlen: 24
152.53.9.0/24 maxlen: 24
152.53.24.0/24 maxlen: 24
152.53.30.0/24 maxlen: 24
152.53.36.0/22 maxlen: 24
152.53.48.0/22 maxlen: 22
152.53.59.0/24 maxlen: 24
152.53.62.0/24 maxlen: 24
152.53.64.0/22 maxlen: 24
152.53.69.0/24 maxlen: 24
152.53.75.0/24 maxlen: 24
152.53.78.0/24 maxlen: 24
152.53.80.0/22 maxlen: 22
152.53.100.0/22 maxlen: 22
152.53.104.0/22 maxlen: 22
152.53.108.0/22 maxlen: 22
152.53.128.0/20 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3e:d5:5c:20:24:b4:5c:59:38:48:f3:b0:5f:5d:c8:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Validity
Not Before: Nov 18 10:33:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d7f8af8c3031816c5a15eb9b899288dc3f1bf21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c2:66:50:9e:fb:45:6e:5a:e2:0e:98:cf:b4:
de:00:20:ac:11:d2:fe:82:5d:5d:ec:61:3d:c3:81:
ce:af:d2:2b:b6:f0:de:5e:22:d6:51:1b:db:4b:a1:
af:a0:d6:e2:30:c4:ee:52:6f:e0:fd:66:47:93:3c:
c0:8e:f9:d9:82:21:31:7d:51:8b:47:55:af:bf:7d:
86:98:bf:6e:98:84:59:d1:42:73:b5:6d:41:29:e5:
17:16:ce:8b:da:6b:69:b3:ed:ef:a7:a0:7d:a3:b6:
1a:2d:30:6d:8c:c6:98:50:aa:5c:95:20:be:9c:07:
89:1f:85:24:59:2c:16:e8:98:7a:0e:91:60:81:b2:
67:45:b0:76:ad:c3:45:88:36:c9:a3:c8:fe:6b:9e:
8f:f3:f9:3a:20:c2:cd:e6:48:e6:02:08:a7:16:6d:
58:13:32:e4:96:21:81:a6:cb:6e:19:60:c9:26:1b:
53:94:54:5f:5e:bf:a4:57:4f:d8:ca:8e:43:d1:20:
d9:48:9a:36:94:75:99:ab:f7:62:d1:33:7f:9f:53:
b4:4b:21:32:f0:70:52:90:53:45:b1:72:db:37:57:
ea:34:4d:75:13:3d:16:65:1b:10:39:c1:ce:b5:6f:
34:5f:4f:da:e1:d5:dc:df:3b:3c:13:93:92:69:cd:
51:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7F:8A:F8:C3:03:18:16:C5:A1:5E:B9:B8:99:28:8D:C3:F1:BF:21
X509v3 Authority Key Identifier:
keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/PX-K-MMDGBbFoV65uJkojcPxvyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.53.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4d:b8:29:24:2b:73:50:df:46:0d:b8:e9:f2:68:ca:ad:56:86:
9b:7e:47:fe:b1:18:1c:b1:3f:5b:f3:c4:16:bb:91:fe:85:93:
bc:6c:4d:48:dc:06:db:bd:e9:6a:34:ea:b7:b1:81:de:ed:6d:
7c:ae:44:7c:8f:e4:ab:96:25:96:3f:eb:23:62:5d:09:05:1a:
cf:23:37:bf:a4:65:92:38:63:40:d7:61:5b:ef:92:10:a3:df:
b4:21:76:60:a0:7d:73:4e:1f:31:6a:d2:02:89:d1:34:98:0c:
49:f4:f1:68:3a:0a:21:7b:ab:05:b1:c6:d1:79:a9:fe:9d:65:
2e:9e:7a:bb:7d:83:e8:be:10:4f:eb:4f:4c:fa:45:6a:68:ce:
1b:c5:3d:2b:bf:f3:0a:34:9c:b4:65:e0:2c:ff:03:ad:c1:ba:
e4:e8:16:8f:8a:5c:de:f5:89:bf:99:de:80:b7:d1:18:5d:4b:
90:ab:68:28:0a:8b:ff:1a:ce:95:53:6c:da:e1:f3:52:3e:e5:
d1:07:5d:ba:54:2e:94:d2:b7:cb:c3:51:53:c3:ea:57:9c:2f:
40:23:59:88:dc:b3:20:18:1c:a1:28:f3:82:0d:3c:ed:aa:61:
bd:03:d1:16:44:16:d6:88:b1:99:46:40:f9:44:7d:2a:36:68:
3b:37:03:02
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZM+1VwgJLRcWThI87BfXcjVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMGIzN2I2ZjRiNDQ1NjQ1ZTY5OTNhOWM1ZWM2MDg0OTI0
MjVmMGUwHhcNMjQxMTE4MTAzMzEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDdmOGFmOGMzMDMxODE2YzVhMTVlYjliODk5Mjg4ZGMzZjFiZjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsJmUJ77RW5a4g6Yz7TeACCsEdL+
gl1d7GE9w4HOr9IrtvDeXiLWURvbS6GvoNbiMMTuUm/g/WZHkzzAjvnZgiExfVGL
R1Wvv32GmL9umIRZ0UJztW1BKeUXFs6L2mtps+3vp6B9o7YaLTBtjMaYUKpclSC+
nAeJH4UkWSwW6Jh6DpFggbJnRbB2rcNFiDbJo8j+a56P8/k6IMLN5kjmAginFm1Y
EzLkliGBpstuGWDJJhtTlFRfXr+kV0/Yyo5D0SDZSJo2lHWZq/di0TN/n1O0SyEy
8HBSkFNFsXLbN1fqNE11Ez0WZRsQOcHOtW80X0/a4dXc3zs8E5OSac1RLQIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFD1/ivjDAxgWxaFeubiZKI3D8b8hMB8GA1UdIwQY
MBaAFNALN7b0tEVkXmmTqcXsYISSQl8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEFzM3R2UzBSV1JlYVpPcHhleGdoSkpDWHc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83MzBmYzUtNzMwMS00YTYwLTg2ZDEt
N2RiNjg2OGQ4NDc0LzEvUFgtSy1NTURHQmJGb1Y2NXVKa29qY1B4dnlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC83MzBmYzUtNzMwMS00YTYwLTg2ZDEtN2RiNjg2OGQ4NDc0
LzEvMEFzM3R2UzBSV1JlYVpPcHhleGdoSkpDWHc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmDUwDQYJ
KoZIhvcNAQELBQADggEBAE24KSQrc1DfRg246fJoyq1Whpt+R/6xGByxP1vzxBa7
kf6Fk7xsTUjcBtu96Wo06rexgd7tbXyuRHyP5KuWJZY/6yNiXQkFGs8jN7+kZZI4
Y0DXYVvvkhCj37QhdmCgfXNOHzFq0gKJ0TSYDEn08Wg6CiF7qwWxxtF5qf6dZS6e
ert9g+i+EE/rT0z6RWpozhvFPSu/8wo0nLRl4Cz/A63BuuToFo+KXN71ib+Z3oC3
0RhdS5CraCgKi/8azpVTbNrh81I+5dEHXbpULpTSt8vDUVPD6lecL0AjWYjcsyAY
HKEo84INPO2qYb0D0RZEFtaIsZlGQPlEfSo2aDs3AwI=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:55:16 2024 by rpki-client on console-ams.rpki-client.org