Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/bgnMZHrZllWd0wsR6AKNZnO65Is.roa
File: bgnMZHrZllWd0wsR6AKNZnO65Is.roa (raw, json)
Hash identifier: rUxBvEScnXB57bDO1i1KocsQQ3b4nTzuL96BeokSjmU=
Subject key identifier: 6E:09:CC:64:7A:D9:96:55:9D:D3:0B:11:E8:02:8D:66:73:BA:E4:8B
Certificate issuer: /CN=2c6d66124362880f5e4c54852f8376d2b9d137f4
Certificate serial: 018CC424F49E3CBC4E5585F2998FB8633363
Authority key identifier: 2C:6D:66:12:43:62:88:0F:5E:4C:54:85:2F:83:76:D2:B9:D1:37:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LG1mEkNiiA9eTFSFL4N20rnRN_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/bgnMZHrZllWd0wsR6AKNZnO65Is.roa
Signing time: Mon 01 Jan 2024 08:30:05 +0000
ROA not before: Mon 01 Jan 2024 08:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 32787
IP address blocks: 195.191.28.0/23 maxlen: 24
185.101.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/LG1mEkNiiA9eTFSFL4N20rnRN_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:f4:9e:3c:bc:4e:55:85:f2:99:8f:b8:63:33:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c6d66124362880f5e4c54852f8376d2b9d137f4
Validity
Not Before: Jan 1 08:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e09cc647ad996559dd30b11e8028d6673bae48b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a9:7f:b7:f8:8f:d9:8f:6f:f1:7b:a4:97:e0:
ac:ab:96:38:b1:03:44:ae:fa:c3:29:e4:cb:89:d6:
47:01:24:2c:90:47:e9:e8:f0:19:07:33:5a:79:c2:
20:b6:fc:7e:c5:6f:be:41:fa:d7:74:84:9a:7d:6c:
95:09:b3:f0:ea:ad:5f:a9:51:04:ca:57:c0:73:7e:
13:27:17:af:79:cb:d7:ff:56:99:0d:81:fb:6a:d5:
ab:e8:98:28:c9:30:0f:a7:94:ba:80:e0:44:81:1d:
d3:e3:49:b7:48:36:c5:49:df:12:d9:61:4e:b8:ca:
60:0f:3c:cb:7f:7b:83:09:96:dc:dc:75:4e:4c:1c:
22:d1:53:22:c4:93:ff:b3:bc:33:33:2e:d5:31:fa:
ed:85:09:dd:9d:3e:5d:d3:79:2d:26:f9:9a:02:b8:
12:48:ab:aa:bd:97:fc:9f:35:4e:16:63:36:a4:8a:
0a:8f:ec:7a:00:db:d2:65:b2:c1:3f:c9:62:15:7c:
40:3d:f6:6e:59:d0:77:d3:a8:3c:38:59:a1:23:a0:
ed:db:ee:30:86:04:3f:d1:56:cc:cb:ed:16:b8:0d:
b8:56:d8:cd:d0:15:6b:7c:56:f0:ae:2a:5e:db:ae:
6f:76:b4:7b:c3:03:c4:0c:eb:44:9f:d9:f5:d2:a4:
32:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:09:CC:64:7A:D9:96:55:9D:D3:0B:11:E8:02:8D:66:73:BA:E4:8B
X509v3 Authority Key Identifier:
keyid:2C:6D:66:12:43:62:88:0F:5E:4C:54:85:2F:83:76:D2:B9:D1:37:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LG1mEkNiiA9eTFSFL4N20rnRN_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/bgnMZHrZllWd0wsR6AKNZnO65Is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.240.0/22
195.191.28.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:29:bb:71:20:16:e0:ea:64:7a:55:a4:47:24:54:05:f8:42:
98:79:ae:60:7d:9a:7e:38:97:24:ec:4e:e8:6f:41:75:39:f8:
56:c4:ba:19:90:b3:ff:06:d1:d9:70:a7:81:15:92:d1:db:6a:
8e:66:1b:3f:d0:47:f0:65:aa:36:5b:6b:24:e8:93:ad:1a:94:
fe:e0:47:6c:e6:58:ef:3b:6e:08:f7:77:c2:0c:6b:b7:b1:ff:
07:ce:e9:e5:ac:e0:d1:0a:df:99:4b:78:3a:60:df:e8:7f:bb:
28:21:3c:c7:02:10:b2:6a:af:3b:e6:91:2c:8e:50:10:7d:3d:
5c:a0:13:db:5e:bd:08:31:15:e1:a1:fb:7f:69:a2:51:76:a6:
2b:d4:a0:32:3d:8f:f1:ba:75:86:e0:1e:6a:67:39:7e:9e:db:
53:bd:31:95:d9:09:59:61:32:3e:82:da:32:3c:2d:ba:a7:04:
58:da:a6:a2:79:e8:16:6f:8c:96:3d:95:a0:05:cc:28:21:22:
a7:0f:78:a0:82:0e:52:81:04:11:d5:33:bb:2e:e1:cf:d7:58:
ae:a9:fb:5f:9f:f6:99:d4:f5:19:dc:c3:16:a4:5a:1d:15:f0:
ed:75:8a:35:78:77:69:ec:6b:66:e4:c9:5c:7a:6f:57:e4:b9:
58:d2:7e:77
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzEJPSePLxOVYXymY+4YzNjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjNmQ2NjEyNDM2Mjg4MGY1ZTRjNTQ4NTJmODM3NmQyYjlk
MTM3ZjQwHhcNMjQwMTAxMDgzMDA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTA5Y2M2NDdhZDk5NjU1OWRkMzBiMTFlODAyOGQ2NjczYmFlNDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6l/t/iP2Y9v8Xukl+Csq5Y4sQNE
rvrDKeTLidZHASQskEfp6PAZBzNaecIgtvx+xW++QfrXdISafWyVCbPw6q1fqVEE
ylfAc34TJxevecvX/1aZDYH7atWr6JgoyTAPp5S6gOBEgR3T40m3SDbFSd8S2WFO
uMpgDzzLf3uDCZbc3HVOTBwi0VMixJP/s7wzMy7VMfrthQndnT5d03ktJvmaArgS
SKuqvZf8nzVOFmM2pIoKj+x6ANvSZbLBP8liFXxAPfZuWdB306g8OFmhI6Dt2+4w
hgQ/0VbMy+0WuA24VtjN0BVrfFbwripe265vdrR7wwPEDOtEn9n10qQyTQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFG4JzGR62ZZVndMLEegCjWZzuuSLMB8GA1UdIwQY
MBaAFCxtZhJDYogPXkxUhS+DdtK50Tf0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEcxbUVrTmlpQTllVEZTRkw0TjIwcm5STl9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS83MWZlYTEtMzkxOS00MmY3LTllMDMt
ZTQwMzBmYTFiMDRhLzEvYmduTVpIclpsbFdkMHdzUjZBS05abk82NUlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS83MWZlYTEtMzkxOS00MmY3LTllMDMtZTQwMzBmYTFiMDRh
LzEvTEcxbUVrTmlpQTllVEZTRkw0TjIwcm5STl9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuWXwAwQB
w78cMA0GCSqGSIb3DQEBCwUAA4IBAQCLKbtxIBbg6mR6VaRHJFQF+EKYea5gfZp+
OJck7E7ob0F1OfhWxLoZkLP/BtHZcKeBFZLR22qOZhs/0EfwZao2W2sk6JOtGpT+
4Eds5ljvO24I93fCDGu3sf8HzunlrODRCt+ZS3g6YN/of7soITzHAhCyaq875pEs
jlAQfT1coBPbXr0IMRXhoft/aaJRdqYr1KAyPY/xunWG4B5qZzl+nttTvTGV2QlZ
YTI+gtoyPC26pwRY2qaieegWb4yWPZWgBcwoISKnD3iggg5SgQQR1TO7LuHP11iu
qftfn/aZ1PUZ3MMWpFodFfDtdYo1eHdp7Gtm5Mlcem9X5LlY0n53
-----END CERTIFICATE-----
Generated at Sat May 18 22:40:09 2024 by rpki-client on console-fra.rpki-client.org