Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/M9nff6rqOfW_F5-d8XqNimSmlyM.roa
File: M9nff6rqOfW_F5-d8XqNimSmlyM.roa (raw, json)
Hash identifier: 2Kua/npKL3Ky+/8yUDSv1DQYfot////6/LybqRmfz4c=
Subject key identifier: 33:D9:DF:7F:AA:EA:39:F5:BF:17:9F:9D:F1:7A:8D:8A:64:A6:97:23
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018FD0AECD984A39941B0323046F42F0B64C
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/M9nff6rqOfW_F5-d8XqNimSmlyM.roa
Signing time: Fri 31 May 2024 22:04:27 +0000
ROA not before: Fri 31 May 2024 22:04:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 212.115.126.0/24 maxlen: 24
212.115.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 14:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d0:ae:cd:98:4a:39:94:1b:03:23:04:6f:42:f0:b6:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: May 31 22:04:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33d9df7faaea39f5bf179f9df17a8d8a64a69723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a5:b1:2f:c4:c3:12:6d:73:08:d3:d7:c6:41:
82:8a:d1:b3:0e:1f:8b:d6:77:32:65:8d:8e:3b:40:
c0:eb:0d:05:73:ec:81:62:2c:ea:7a:b7:61:84:d6:
af:6d:7c:fa:fe:7e:e2:cd:dd:84:67:0c:9e:d7:cc:
81:7d:80:9b:89:c6:a3:e9:b4:5e:4b:21:3d:cf:60:
2e:9e:8b:22:54:2a:4c:13:ed:e0:44:2c:3d:b1:a5:
cf:02:5e:d7:6c:51:bd:e1:e9:7b:eb:c4:15:66:bc:
f0:a5:79:6c:6d:e1:93:2b:d0:51:bc:52:50:a5:31:
5d:7f:41:5d:0e:33:19:39:87:8e:2d:b5:ee:b3:2e:
99:4f:2c:db:21:99:ae:c1:aa:95:ed:32:c4:64:df:
31:d3:8e:b9:2b:bf:31:c4:04:99:1c:64:c9:2b:7b:
5b:51:23:dc:66:a8:ad:19:1c:7b:e7:da:72:b8:7f:
a9:f2:03:1f:64:1e:86:b0:b8:36:a5:7e:37:48:71:
a0:a0:10:72:29:52:02:96:78:6e:d0:3e:74:84:7d:
ef:31:0b:df:ef:97:d2:41:51:49:33:ce:11:4f:ff:
9e:4a:5d:15:4c:ab:36:ed:36:23:0a:70:2d:f8:36:
49:7c:85:62:f2:d0:49:06:53:34:36:a6:ae:19:e5:
88:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D9:DF:7F:AA:EA:39:F5:BF:17:9F:9D:F1:7A:8D:8A:64:A6:97:23
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/M9nff6rqOfW_F5-d8XqNimSmlyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.115.126.0/23
Signature Algorithm: sha256WithRSAEncryption
22:04:c8:c0:e7:3d:86:85:2f:f6:97:70:79:d1:cf:be:b7:db:
66:05:53:6a:3f:e1:1f:17:5b:7a:42:4f:11:5d:b1:52:4e:17:
fd:d4:09:1f:1e:d7:b4:70:91:95:4f:3b:95:53:a7:c6:bd:b1:
b8:7b:18:1a:d9:e8:f8:cf:2a:9b:45:6b:ca:ce:ff:10:7a:26:
33:11:cb:05:f9:31:f8:4e:6a:25:5a:31:2e:1e:b9:b3:98:cc:
31:d3:39:16:01:ef:a8:76:34:3b:7c:ad:5c:4c:9d:be:94:bf:
b6:54:75:a4:a6:07:bb:c3:2e:ea:ca:2d:ce:c8:39:b5:73:8f:
ce:b1:8a:e0:a9:a1:a1:ba:1d:e8:a6:cc:76:43:26:34:cd:1b:
d3:67:02:fc:4d:5c:2e:75:9c:55:18:26:4e:60:23:a7:6d:91:
a5:f8:6f:d4:2c:d3:cc:b9:e2:0d:3f:d5:f6:4c:fd:8a:bd:80:
74:4f:92:da:b4:fe:ca:cc:e4:b7:08:70:a2:a3:c5:ae:59:4d:
60:95:97:77:ed:34:11:0c:f4:3a:5f:65:d0:38:2a:f7:6b:50:
97:ea:9c:89:f3:18:52:9d:1b:41:22:76:6a:b7:3b:5f:d4:10:
34:51:73:b7:7a:62:83:87:c7:ee:7a:11:55:27:e5:a7:82:92:
b2:61:2f:66
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY/Qrs2YSjmUGwMjBG9C8LZMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGMwZDA0MjI1NTY2ZGI5NWU5YWQzYjJlZjYwNTAxNDk3
NWFhYTIwHhcNMjQwNTMxMjIwNDI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2Q5ZGY3ZmFhZWEzOWY1YmYxNzlmOWRmMTdhOGQ4YTY0YTY5NzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqWxL8TDEm1zCNPXxkGCitGzDh+L
1ncyZY2OO0DA6w0Fc+yBYizqerdhhNavbXz6/n7izd2EZwye18yBfYCbicaj6bRe
SyE9z2AunosiVCpME+3gRCw9saXPAl7XbFG94el768QVZrzwpXlsbeGTK9BRvFJQ
pTFdf0FdDjMZOYeOLbXusy6ZTyzbIZmuwaqV7TLEZN8x0465K78xxASZHGTJK3tb
USPcZqitGRx759pyuH+p8gMfZB6GsLg2pX43SHGgoBByKVIClnhu0D50hH3vMQvf
75fSQVFJM84RT/+eSl0VTKs27TYjCnAt+DZJfIVi8tBJBlM0NqauGeWI/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDPZ33+q6jn1vxefnfF6jYpkppcjMB8GA1UdIwQY
MBaAFJsMDQQiVWbblemtOy72BQFJdaqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMt
ZThlZjJmMDk1OThlLzEvTTluZmY2cnFPZldfRjUtZDhYcU5pbVNtbHlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMtZThlZjJmMDk1OThl
LzEvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1HN+MA0G
CSqGSIb3DQEBCwUAA4IBAQAiBMjA5z2GhS/2l3B50c++t9tmBVNqP+EfF1t6Qk8R
XbFSThf91AkfHte0cJGVTzuVU6fGvbG4exga2ej4zyqbRWvKzv8QeiYzEcsF+TH4
TmolWjEuHrmzmMwx0zkWAe+odjQ7fK1cTJ2+lL+2VHWkpge7wy7qyi3OyDm1c4/O
sYrgqaGhuh3opsx2QyY0zRvTZwL8TVwudZxVGCZOYCOnbZGl+G/ULNPMueINP9X2
TP2KvYB0T5LatP7KzOS3CHCio8WuWU1glZd37TQRDPQ6X2XQOCr3a1CX6pyJ8xhS
nRtBInZqtztf1BA0UXO3emKDh8fuehFVJ+WngpKyYS9m
-----END CERTIFICATE-----
Generated at Tue Oct 22 21:48:03 2024 by rpki-client on console-fra.rpki-client.org