Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/Mm_XdrH4nyMlaGLv8APe1Fgmcjk.roa
File: Mm_XdrH4nyMlaGLv8APe1Fgmcjk.roa (raw, json)
Hash identifier: 6z+7XIlSVeMFnBOIGgdn4ECINAxNM38sbKBLhLaX1NM=
Subject key identifier: 32:6F:D7:76:B1:F8:9F:23:25:68:62:EF:F0:03:DE:D4:58:26:72:39
Certificate issuer: /CN=845d042f65e1b1303a44e43e0e02748a75837b44
Certificate serial: 018CC6B802E6D32B50F2EAECC5E21BF83008
Authority key identifier: 84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/Mm_XdrH4nyMlaGLv8APe1Fgmcjk.roa
Signing time: Mon 01 Jan 2024 20:29:57 +0000
ROA not before: Mon 01 Jan 2024 20:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201789
IP address blocks: 185.54.163.0/24 maxlen: 24
185.54.162.0/24 maxlen: 24
185.54.161.0/24 maxlen: 24
185.54.160.0/24 maxlen: 24
185.241.213.0/24 maxlen: 24
185.241.214.0/24 maxlen: 24
185.119.88.0/24 maxlen: 24
185.119.91.0/24 maxlen: 24
2a0c:bf80:1b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Dec 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:02:e6:d3:2b:50:f2:ea:ec:c5:e2:1b:f8:30:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845d042f65e1b1303a44e43e0e02748a75837b44
Validity
Not Before: Jan 1 20:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=326fd776b1f89f23256862eff003ded458267239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:62:0c:63:6d:45:90:8b:fd:88:35:c4:74:36:
94:51:97:b2:52:6e:39:3c:bb:02:cb:23:49:c4:82:
cd:27:12:b2:51:e5:e9:fb:ef:71:c2:16:17:82:83:
9a:2f:0e:df:8b:f1:9a:56:88:1d:4e:9f:ab:e1:a3:
36:73:38:10:5d:9e:4f:e7:55:35:ef:a0:71:cf:c2:
90:5a:c9:b3:c3:5f:c5:5b:aa:e3:90:a7:82:30:17:
87:ad:7c:9d:b1:96:ea:e5:30:b9:e1:d7:d9:6d:c2:
6f:7e:77:2f:37:da:b7:90:d9:16:9b:68:17:6b:67:
01:43:6b:e0:25:f3:37:ca:54:39:2d:78:d1:c0:f7:
95:3c:96:33:18:ae:ae:f1:41:42:59:86:ba:60:7d:
21:fe:52:26:df:72:9b:d7:cc:97:38:5c:18:78:fb:
e5:09:be:0e:b3:5e:4e:ea:0a:32:a1:86:01:8b:a3:
d3:ca:0c:b2:59:de:93:50:53:31:6e:4a:6a:5d:d4:
91:61:d7:47:0d:b2:31:8f:bc:6f:fd:db:95:95:4e:
23:1f:75:c4:9d:a3:65:6b:b4:98:1c:85:d1:2a:b7:
29:4c:7f:fd:64:be:7a:1a:b4:3b:f0:11:95:bc:b7:
fe:40:7e:97:d6:27:8b:b3:c2:13:b6:67:ab:fa:d9:
90:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6F:D7:76:B1:F8:9F:23:25:68:62:EF:F0:03:DE:D4:58:26:72:39
X509v3 Authority Key Identifier:
keyid:84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/Mm_XdrH4nyMlaGLv8APe1Fgmcjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.160.0/22
185.119.88.0/24
185.119.91.0/24
185.241.213.0-185.241.214.255
IPv6:
2a0c:bf80:1b::/48
Signature Algorithm: sha256WithRSAEncryption
3f:bf:da:02:20:0d:a5:ec:91:e7:7c:8c:b9:54:e6:be:db:dc:
a1:34:02:cb:c4:37:3b:c9:eb:b6:a5:ed:b1:4c:10:4b:60:5c:
5f:78:de:4b:ed:e2:cd:1f:b9:06:29:24:2a:91:87:45:e9:c0:
de:78:1d:2d:2b:f8:c6:82:cf:06:29:a4:8e:48:0c:c4:9c:f5:
45:31:11:56:b2:b1:c3:83:e0:b0:47:50:e2:71:e4:89:23:29:
7f:90:e4:17:7c:81:f4:e4:21:60:a2:80:4d:86:f3:97:51:95:
40:6f:06:28:cf:0d:71:03:18:c5:0c:f4:56:9b:40:9f:ac:76:
cb:cc:99:97:f0:c9:07:4e:46:ad:89:29:79:70:6f:06:d1:91:
e1:00:70:6e:69:a3:ac:85:ce:da:2b:8e:d4:20:32:ce:e8:ef:
28:7c:b2:d3:67:51:69:cd:43:21:0f:da:2b:bf:03:7e:5b:73:
11:28:74:93:32:e8:57:30:a4:d2:8d:6b:b2:1e:a7:56:52:6d:
b4:00:db:9a:e6:60:4d:bd:de:b0:9e:5c:8d:2d:36:22:12:66:
60:1a:25:f3:ca:4b:d6:e7:fa:38:d1:8c:8e:76:6b:6c:00:26:
ca:b4:73:4e:07:ef:dd:9a:bc:09:9c:e7:8a:dc:68:5c:e4:66:
01:c3:c9:3d
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgISAYzGuALm0ytQ8ursxeIb+DAIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NWQwNDJmNjVlMWIxMzAzYTQ0ZTQzZTBlMDI3NDhhNzU4
MzdiNDQwHhcNMjQwMTAxMjAyOTU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjZmZDc3NmIxZjg5ZjIzMjU2ODYyZWZmMDAzZGVkNDU4MjY3MjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2IMY21FkIv9iDXEdDaUUZeyUm45
PLsCyyNJxILNJxKyUeXp++9xwhYXgoOaLw7fi/GaVogdTp+r4aM2czgQXZ5P51U1
76Bxz8KQWsmzw1/FW6rjkKeCMBeHrXydsZbq5TC54dfZbcJvfncvN9q3kNkWm2gX
a2cBQ2vgJfM3ylQ5LXjRwPeVPJYzGK6u8UFCWYa6YH0h/lIm33Kb18yXOFwYePvl
Cb4Os15O6goyoYYBi6PTygyyWd6TUFMxbkpqXdSRYddHDbIxj7xv/duVlU4jH3XE
naNla7SYHIXRKrcpTH/9ZL56GrQ78BGVvLf+QH6X1ieLs8ITtmer+tmQIwIDAQAB
o4ICNDCCAjAwHQYDVR0OBBYEFDJv13ax+J8jJWhi7/AD3tRYJnI5MB8GA1UdIwQY
MBaAFIRdBC9l4bEwOkTkPg4CdIp1g3tEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEYwRUwyWGhzVEE2Uk9RLURnSjBpbldEZTBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS85NmRiY2QtNmEzOS00YzIwLTkxMjgt
ZDhjMzUxZDkzZWM2LzEvTW1fWGRySDRueU1sYUdMdjhBUGUxRmdtY2prLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS85NmRiY2QtNmEzOS00YzIwLTkxMjgtZDhjMzUxZDkzZWM2
LzEvaEYwRUwyWGhzVEE2Uk9RLURnSjBpbldEZTBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTAmBAIAATAgAwQCuTagAwQA
uXdYAwQAuXdbMAwDBAC58dUDBAC58dYwDwQCAAIwCQMHACoMv4AAGzANBgkqhkiG
9w0BAQsFAAOCAQEAP7/aAiANpeyR53yMuVTmvtvcoTQCy8Q3O8nrtqXtsUwQS2Bc
X3jeS+3izR+5BikkKpGHRenA3ngdLSv4xoLPBimkjkgMxJz1RTERVrKxw4PgsEdQ
4nHkiSMpf5DkF3yB9OQhYKKATYbzl1GVQG8GKM8NcQMYxQz0VptAn6x2y8yZl/DJ
B05GrYkpeXBvBtGR4QBwbmmjrIXO2iuO1CAyzujvKHyy02dRac1DIQ/aK78Dfltz
ESh0kzLoVzCk0o1rsh6nVlJttADbmuZgTb3esJ5cjS02IhJmYBol88pL1uf6ONGM
jnZrbAAmyrRzTgfv3Zq8CZznitxoXORmAcPJPQ==
-----END CERTIFICATE-----
Generated at Tue Dec 3 18:15:38 2024 by rpki-client on console-fra.rpki-client.org