Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/95a02c-df3b-40ba-bde5-262438e859e4/1/MtVgannnnT0Q_J5VO3Ffqbl7IR8.roa
File: MtVgannnnT0Q_J5VO3Ffqbl7IR8.roa (raw, json)
Hash identifier: mjIhtVZP2imvB2HtCyXEv+wV94v06EDkHC/FzBgBHU4=
Subject key identifier: 32:D5:60:6A:79:E7:9D:3D:10:FC:9E:55:3B:71:5F:A9:B9:7B:21:1F
Certificate issuer: /CN=47bbb74d41b298f59edd4da23d18b6bb5143f644
Certificate serial: 018CC6B9256D258F6FA0FCF302D8C1E02608
Authority key identifier: 47:BB:B7:4D:41:B2:98:F5:9E:DD:4D:A2:3D:18:B6:BB:51:43:F6:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7u3TUGymPWe3U2iPRi2u1FD9kQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/95a02c-df3b-40ba-bde5-262438e859e4/1/MtVgannnnT0Q_J5VO3Ffqbl7IR8.roa
Signing time: Mon 01 Jan 2024 20:31:11 +0000
ROA not before: Mon 01 Jan 2024 20:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198635
IP address blocks: 91.199.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/95a02c-df3b-40ba-bde5-262438e859e4/1/R7u3TUGymPWe3U2iPRi2u1FD9kQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/95a02c-df3b-40ba-bde5-262438e859e4/1/R7u3TUGymPWe3U2iPRi2u1FD9kQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R7u3TUGymPWe3U2iPRi2u1FD9kQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:25:6d:25:8f:6f:a0:fc:f3:02:d8:c1:e0:26:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47bbb74d41b298f59edd4da23d18b6bb5143f644
Validity
Not Before: Jan 1 20:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32d5606a79e79d3d10fc9e553b715fa9b97b211f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f6:41:e8:d7:fa:81:f1:3e:63:70:f2:10:af:
06:50:b3:a2:b6:8f:79:4a:23:a0:33:ec:55:23:71:
f4:0f:13:00:d1:22:fc:0b:67:da:7b:f7:30:24:2b:
17:4a:5d:ab:82:e7:5c:93:15:6f:cd:88:3f:39:40:
e1:18:5e:a1:be:e1:e1:95:4a:da:f7:7b:00:7c:fd:
5e:74:09:34:ba:b5:17:e7:e6:1a:2a:ef:93:7a:78:
6e:52:3b:d4:28:fb:49:9d:02:a1:a4:de:91:3e:4a:
86:8a:81:54:50:5e:d6:e1:83:e3:75:f1:7f:17:69:
26:2c:1e:09:7e:1b:bf:94:4b:49:12:5f:76:97:c3:
b4:6e:d1:3b:8c:29:4b:86:b3:3d:0e:4a:65:6e:fa:
4f:f4:0b:a4:8d:80:58:6b:c9:fc:0a:c8:c1:01:29:
30:96:88:35:53:69:15:d5:6b:c1:1b:fe:ac:0d:99:
54:ae:c7:62:ae:53:51:f1:3d:0e:ba:83:16:ea:d9:
7a:16:f5:19:ef:28:36:cc:65:c7:f2:55:87:5a:06:
f4:eb:fd:e9:2d:4e:2b:f3:f0:69:68:98:af:ab:ed:
da:1f:32:7d:06:ed:c7:be:f2:f5:62:ee:b0:5c:bc:
50:59:ce:7c:40:d4:de:4a:d6:95:34:3d:fc:c1:d3:
d3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D5:60:6A:79:E7:9D:3D:10:FC:9E:55:3B:71:5F:A9:B9:7B:21:1F
X509v3 Authority Key Identifier:
keyid:47:BB:B7:4D:41:B2:98:F5:9E:DD:4D:A2:3D:18:B6:BB:51:43:F6:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7u3TUGymPWe3U2iPRi2u1FD9kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/95a02c-df3b-40ba-bde5-262438e859e4/1/MtVgannnnT0Q_J5VO3Ffqbl7IR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/95a02c-df3b-40ba-bde5-262438e859e4/1/R7u3TUGymPWe3U2iPRi2u1FD9kQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.66.0/24
Signature Algorithm: sha256WithRSAEncryption
17:8a:be:63:2c:be:f2:76:90:30:29:06:cb:68:12:d6:e5:f9:
f7:75:5d:55:f0:7c:93:f2:fa:68:64:4a:36:59:80:11:c5:32:
a9:5f:ff:17:e7:44:9c:38:43:98:64:fb:bf:76:62:b6:58:d3:
92:a3:f3:be:5d:8c:e9:a4:2f:5a:3f:0d:a6:ba:c9:d8:57:e7:
9d:c6:a9:bf:16:b4:51:fd:7f:a9:64:53:38:90:76:4d:d5:a8:
83:70:6a:93:61:60:ab:52:eb:44:fa:3f:9c:de:eb:17:29:a8:
a4:8a:ae:30:e3:92:1c:c0:80:02:11:2f:fb:84:5f:21:f9:4c:
0e:2d:66:e0:f8:6b:f6:23:e9:c2:6c:f6:29:f9:bb:7e:0c:81:
a1:19:18:d0:ee:f4:32:19:53:1b:d7:2a:7e:80:96:b4:33:fb:
3c:ee:ba:0f:a4:b1:c1:9f:af:63:fc:fa:ab:06:a9:09:5e:e5:
1d:ec:a6:cf:85:63:2b:60:a1:db:9d:05:0a:79:8c:b9:07:5a:
e6:47:36:15:dd:86:f6:02:ab:34:3c:99:89:1d:58:6d:2f:31:
75:3d:0e:0d:5f:fc:a9:eb:db:52:ac:3d:c8:bb:14:c1:36:84:
10:04:67:1d:87:8b:ad:ba:82:18:a4:89:41:a7:1b:9c:3e:bc:
e5:e8:e3:93
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGuSVtJY9voPzzAtjB4CYIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YmJiNzRkNDFiMjk4ZjU5ZWRkNGRhMjNkMThiNmJiNTE0
M2Y2NDQwHhcNMjQwMTAxMjAzMTExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmQ1NjA2YTc5ZTc5ZDNkMTBmYzllNTUzYjcxNWZhOWI5N2IyMTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvZB6Nf6gfE+Y3DyEK8GULOito95
SiOgM+xVI3H0DxMA0SL8C2fae/cwJCsXSl2rgudckxVvzYg/OUDhGF6hvuHhlUra
93sAfP1edAk0urUX5+YaKu+TenhuUjvUKPtJnQKhpN6RPkqGioFUUF7W4YPjdfF/
F2kmLB4Jfhu/lEtJEl92l8O0btE7jClLhrM9DkplbvpP9AukjYBYa8n8CsjBASkw
log1U2kV1WvBG/6sDZlUrsdirlNR8T0OuoMW6tl6FvUZ7yg2zGXH8lWHWgb06/3p
LU4r8/BpaJivq+3aHzJ9Bu3HvvL1Yu6wXLxQWc58QNTeStaVND38wdPTHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDLVYGp55509EPyeVTtxX6m5eyEfMB8GA1UdIwQY
MBaAFEe7t01Bspj1nt1Noj0YtrtRQ/ZEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjd1M1RVR3ltUFdlM1UyaVBSaTJ1MUZEOWtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS85NWEwMmMtZGYzYi00MGJhLWJkZTUt
MjYyNDM4ZTg1OWU0LzEvTXRWZ2Fubm5uVDBRX0o1Vk8zRmZxYmw3SVI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS85NWEwMmMtZGYzYi00MGJhLWJkZTUtMjYyNDM4ZTg1OWU0
LzEvUjd1M1RVR3ltUFdlM1UyaVBSaTJ1MUZEOWtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8dCMA0G
CSqGSIb3DQEBCwUAA4IBAQAXir5jLL7ydpAwKQbLaBLW5fn3dV1V8HyT8vpoZEo2
WYARxTKpX/8X50ScOEOYZPu/dmK2WNOSo/O+XYzppC9aPw2musnYV+edxqm/FrRR
/X+pZFM4kHZN1aiDcGqTYWCrUutE+j+c3usXKaikiq4w45IcwIACES/7hF8h+UwO
LWbg+Gv2I+nCbPYp+bt+DIGhGRjQ7vQyGVMb1yp+gJa0M/s87roPpLHBn69j/Pqr
BqkJXuUd7KbPhWMrYKHbnQUKeYy5B1rmRzYV3Yb2Aqs0PJmJHVhtLzF1PQ4NX/yp
69tSrD3IuxTBNoQQBGcdh4utuoIYpIlBpxucPrzl6OOT
-----END CERTIFICATE-----
Generated at Sat Jun 8 03:32:13 2024 by rpki-client on console-ams.rpki-client.org