Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/MEoiG9AzykvXuJkkflpfDL1Ikjk.roa
File: MEoiG9AzykvXuJkkflpfDL1Ikjk.roa (raw, json)
Hash identifier: h2VnqgGAlOYt81jfZVXRsqlTm4HD5+9wPd9uMG3yOgs=
Subject key identifier: 30:4A:22:1B:D0:33:CA:4B:D7:B8:99:24:7E:5A:5F:0C:BD:48:92:39
Certificate issuer: /CN=60c44dff71879863ea71442023b7f354dc3dad7c
Certificate serial: 0193499F80302FFCAA97F05CF3E720A156E0
Authority key identifier: 60:C4:4D:FF:71:87:98:63:EA:71:44:20:23:B7:F3:54:DC:3D:AD:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/MEoiG9AzykvXuJkkflpfDL1Ikjk.roa
Signing time: Wed 20 Nov 2024 12:50:09 +0000
ROA not before: Wed 20 Nov 2024 12:50:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49882
IP address blocks: 91.92.196.0/24 maxlen: 24
185.88.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:49:9f:80:30:2f:fc:aa:97:f0:5c:f3:e7:20:a1:56:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c44dff71879863ea71442023b7f354dc3dad7c
Validity
Not Before: Nov 20 12:50:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=304a221bd033ca4bd7b899247e5a5f0cbd489239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d9:16:16:9d:27:d2:7e:94:21:c4:87:d5:17:
23:92:a3:0c:76:13:11:02:a3:2d:99:b0:0d:5e:41:
c3:6b:61:39:8e:99:7d:c1:ac:a7:4a:71:3c:43:2c:
c3:14:ce:8d:85:e0:4e:4e:f7:92:de:4e:1d:db:f0:
a7:42:f9:ef:5a:e5:53:fd:61:48:b9:b7:00:ff:de:
a1:89:2b:43:09:66:92:ae:5e:2b:d0:99:f8:9f:7b:
78:d5:95:98:b0:7b:74:64:c5:37:94:46:a9:74:74:
ee:95:ef:00:93:f2:1f:e1:53:49:fa:34:5f:97:f9:
33:26:c5:72:0e:34:a5:78:c5:fe:6a:03:1f:8f:5a:
91:e2:c6:51:9d:6b:8f:e3:71:8f:f3:75:2d:b9:3d:
82:8a:77:68:dc:df:c9:25:2c:e2:a0:b9:f3:87:12:
49:72:d8:26:80:2d:73:cc:6a:3e:0a:3f:ef:5b:19:
46:1a:ec:f6:40:36:85:34:eb:85:b3:fb:07:00:b3:
6c:e6:9b:d1:3d:a8:a6:b9:33:8b:50:2d:2c:80:ca:
d1:a5:45:10:ad:68:90:b6:ba:ed:c5:ef:c6:f7:e7:
6f:3d:e0:c0:2f:02:e1:42:fd:8e:63:be:f3:a2:17:
88:e7:97:57:21:bb:e7:f1:1f:b4:df:5b:34:e7:d7:
9c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4A:22:1B:D0:33:CA:4B:D7:B8:99:24:7E:5A:5F:0C:BD:48:92:39
X509v3 Authority Key Identifier:
keyid:60:C4:4D:FF:71:87:98:63:EA:71:44:20:23:B7:F3:54:DC:3D:AD:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/MEoiG9AzykvXuJkkflpfDL1Ikjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.196.0/24
185.88.184.0/22
Signature Algorithm: sha256WithRSAEncryption
84:0a:2d:b3:86:b4:a5:31:f2:e2:c6:8a:4f:9f:61:df:14:ba:
4c:83:0e:2b:30:38:e3:7c:7d:b1:53:8b:8b:ae:8e:f9:c8:18:
c9:11:ab:ef:59:b3:44:ac:d4:4a:bc:3a:1c:37:9a:1d:14:d8:
c7:f6:c1:bb:20:ca:8d:84:ea:15:a5:dc:0e:a3:60:bc:4e:93:
57:ba:2b:02:e9:f3:32:2d:f6:96:46:8f:4a:c6:65:26:b6:9f:
b8:04:1f:f9:7d:af:a1:3c:2b:6b:22:aa:ae:f5:37:65:df:bc:
29:86:d0:95:63:9d:96:56:4a:1a:eb:11:ac:9c:3c:17:68:77:
7e:6c:2b:f8:ba:9a:2b:b6:d8:0e:dc:d1:28:54:e6:e3:54:07:
5a:18:19:87:86:63:90:86:be:25:6f:dd:92:b4:7c:ca:3b:a8:
54:a3:f1:f7:06:ea:37:19:ac:32:46:f4:13:b3:77:97:49:0f:
64:05:71:c9:12:d7:72:f4:5f:21:17:98:58:34:29:5b:bf:3e:
9f:5a:ec:f5:0e:80:7b:5b:ba:77:98:b0:0d:8a:71:8d:84:27:
64:4b:59:4d:f3:11:cb:28:e7:71:c7:69:99:c2:1e:64:44:5f:
44:2d:a1:ab:66:61:71:ca:73:27:6d:5f:2c:d3:a8:5b:89:ea:
0c:22:00:11
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZNJn4AwL/yql/Bc8+cgoVbgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwYzQ0ZGZmNzE4Nzk4NjNlYTcxNDQyMDIzYjdmMzU0ZGMz
ZGFkN2MwHhcNMjQxMTIwMTI1MDA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDRhMjIxYmQwMzNjYTRiZDdiODk5MjQ3ZTVhNWYwY2JkNDg5MjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tkWFp0n0n6UIcSH1RcjkqMMdhMR
AqMtmbANXkHDa2E5jpl9waynSnE8QyzDFM6NheBOTveS3k4d2/CnQvnvWuVT/WFI
ubcA/96hiStDCWaSrl4r0Jn4n3t41ZWYsHt0ZMU3lEapdHTule8Ak/If4VNJ+jRf
l/kzJsVyDjSleMX+agMfj1qR4sZRnWuP43GP83UtuT2Cindo3N/JJSzioLnzhxJJ
ctgmgC1zzGo+Cj/vWxlGGuz2QDaFNOuFs/sHALNs5pvRPaimuTOLUC0sgMrRpUUQ
rWiQtrrtxe/G9+dvPeDALwLhQv2OY77zoheI55dXIbvn8R+031s059ecmQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDBKIhvQM8pL17iZJH5aXwy9SJI5MB8GA1UdIwQY
MBaAFGDETf9xh5hj6nFEICO381TcPa18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU1STl8zR0htR1BxY1VRZ0k3ZnpWTnc5clh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC82Y2U5OTQtOGU5OS00MGY5LWE0ZWIt
YjJkNzM2Nzg3MjdiLzEvTUVvaUc5QXp5a3ZYdUpra2ZscGZETDFJa2prLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC82Y2U5OTQtOGU5OS00MGY5LWE0ZWItYjJkNzM2Nzg3Mjdi
LzEvWU1STl8zR0htR1BxY1VRZ0k3ZnpWTnc5clh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW1zEAwQC
uVi4MA0GCSqGSIb3DQEBCwUAA4IBAQCECi2zhrSlMfLixopPn2HfFLpMgw4rMDjj
fH2xU4uLro75yBjJEavvWbNErNRKvDocN5odFNjH9sG7IMqNhOoVpdwOo2C8TpNX
uisC6fMyLfaWRo9KxmUmtp+4BB/5fa+hPCtrIqqu9Tdl37wphtCVY52WVkoa6xGs
nDwXaHd+bCv4uporttgO3NEoVObjVAdaGBmHhmOQhr4lb92StHzKO6hUo/H3Buo3
GawyRvQTs3eXSQ9kBXHJEtdy9F8hF5hYNClbvz6fWuz1DoB7W7p3mLANinGNhCdk
S1lN8xHLKOdxx2mZwh5kRF9ELaGrZmFxynMnbV8s06hbieoMIgAR
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:53:19 2024 by rpki-client on console-fra.rpki-client.org