Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MWxJmS0pRLVZE6EDmf2FTThEfaw.roa
File: MWxJmS0pRLVZE6EDmf2FTThEfaw.roa (raw, json)
Hash identifier: T6wlEzjJICKYZC1Wj6jNpFSe2I8+CP2jriIYGIRSaXo=
Subject key identifier: 31:6C:49:99:2D:29:44:B5:59:13:A1:03:99:FD:85:4D:38:44:7D:AC
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 018D3054AB1846512512B9FF7886ED038018
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MWxJmS0pRLVZE6EDmf2FTThEfaw.roa
Signing time: Mon 22 Jan 2024 08:41:11 +0000
ROA not before: Mon 22 Jan 2024 08:41:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49934
IP address blocks: 195.77.132.0/22 maxlen: 22
195.77.132.0/23 maxlen: 23
195.77.132.0/24 maxlen: 24
195.77.133.0/24 maxlen: 24
195.77.134.0/23 maxlen: 23
195.77.134.0/24 maxlen: 24
195.77.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 09:39:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:30:54:ab:18:46:51:25:12:b9:ff:78:86:ed:03:80:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 22 08:41:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=316c49992d2944b55913a10399fd854d38447dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a4:01:1c:9b:0f:1e:93:44:80:5d:3d:6c:6b:
ef:be:57:f2:43:09:86:47:ab:fe:24:04:ba:f6:df:
2f:68:ec:e2:47:0d:00:3f:db:52:f9:a1:78:af:7e:
47:db:14:9e:36:d8:82:52:2a:6b:a4:aa:16:fd:d8:
f2:73:27:29:8d:2a:bb:ef:19:c7:a3:8d:cf:d0:73:
f3:57:51:6b:26:75:52:99:d6:2f:5b:53:0a:d2:e1:
fb:bd:38:2b:e5:63:3a:b1:ea:17:68:ab:ef:60:9f:
b2:98:ff:d4:7a:3c:f4:ea:86:a9:1a:e9:69:af:e6:
29:84:d1:f7:46:2a:da:f6:4a:4b:1e:ca:4f:c5:80:
99:2a:f9:65:e9:88:16:73:06:2c:03:67:d6:d7:95:
4f:6a:6b:da:7d:45:e7:3e:96:39:25:bf:f5:fc:5d:
e5:ae:fa:f1:b3:35:96:dc:7b:e1:99:87:95:b8:07:
e7:30:ec:db:5e:ee:3a:54:28:5f:f3:6b:3e:4d:43:
03:db:a5:8b:be:b9:b2:b8:03:10:03:bd:36:d9:fc:
65:e7:5b:bb:db:86:dc:6b:fd:6b:5e:99:f0:ce:fe:
d1:71:a6:27:6e:0b:f2:d2:e2:d4:f2:ce:ec:3f:5f:
1a:0f:bb:67:70:cd:e7:9a:46:a3:6d:38:0f:24:e3:
90:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:6C:49:99:2D:29:44:B5:59:13:A1:03:99:FD:85:4D:38:44:7D:AC
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MWxJmS0pRLVZE6EDmf2FTThEfaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.77.132.0/22
Signature Algorithm: sha256WithRSAEncryption
27:da:2d:97:fc:f7:e7:8e:ee:b2:88:88:08:a8:1b:b2:79:5b:
65:28:cb:c5:1f:2a:84:ae:0d:47:8e:ed:1e:db:fd:dc:e7:27:
36:99:1b:49:0b:53:b8:37:49:6f:52:96:42:a2:bc:4b:b9:1b:
74:84:33:4a:48:6e:44:8f:db:72:ec:4d:14:8d:4d:6a:51:4b:
26:13:cd:aa:32:f0:95:67:38:41:30:d0:6b:b9:7a:7b:2c:f5:
ae:d2:8e:6c:78:f1:f4:6f:fe:6e:4b:7c:8c:a3:9b:49:88:61:
18:a5:79:bc:f5:2f:5c:92:58:32:d8:6d:ae:9d:90:8f:0a:08:
f0:0b:f2:86:be:b8:54:42:2d:57:25:9d:8b:17:24:c0:af:55:
51:e8:23:2b:76:95:79:b5:fa:e8:fd:04:7e:73:a0:8c:a7:5b:
37:0d:24:f1:f4:91:41:72:d1:99:6b:8e:e0:3a:ce:1c:a3:a7:
f5:a3:6a:a4:76:66:e6:aa:2c:98:73:da:9e:5b:b8:1f:2a:91:
dc:68:25:eb:df:ec:ee:ce:ae:e9:eb:49:21:64:51:91:c9:f4:
23:a1:67:91:d5:0e:58:86:cc:af:8c:da:14:71:58:20:54:42:
52:72:79:db:58:84:29:c0:b3:08:a4:e5:ec:44:0c:b6:b4:92:
39:8e:63:20
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY0wVKsYRlElErn/eIbtA4AYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwN2Y1ZmUyNzQwYTJiNmRlNGMzNzA5ZDI5NjQxMTViM2M5
NjdkYTEwHhcNMjQwMTIyMDg0MTExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTZjNDk5OTJkMjk0NGI1NTkxM2ExMDM5OWZkODU0ZDM4NDQ3ZGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaQBHJsPHpNEgF09bGvvvlfyQwmG
R6v+JAS69t8vaOziRw0AP9tS+aF4r35H2xSeNtiCUiprpKoW/djycycpjSq77xnH
o43P0HPzV1FrJnVSmdYvW1MK0uH7vTgr5WM6seoXaKvvYJ+ymP/Uejz06oapGulp
r+YphNH3Rira9kpLHspPxYCZKvll6YgWcwYsA2fW15VPamvafUXnPpY5Jb/1/F3l
rvrxszWW3HvhmYeVuAfnMOzbXu46VChf82s+TUMD26WLvrmyuAMQA7022fxl51u7
24bca/1rXpnwzv7RcaYnbgvy0uLU8s7sP18aD7tncM3nmkajbTgPJOOQKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDFsSZktKUS1WROhA5n9hU04RH2sMB8GA1UdIwQY
MBaAFDB/X+J0Citt5MNwnSlkEVs8ln2hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQt
NGJhMmY4ZjFmODNiLzEvTVd4Sm1TMHBSTFZaRTZFRG1mMkZUVGhFZmF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9kY2ZkNDgtYzU0YS00Yzc4LWE0ZWQtNGJhMmY4ZjFmODNi
LzEvTUg5ZjRuUUtLMjNrdzNDZEtXUVJXenlXZmFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw02EMA0G
CSqGSIb3DQEBCwUAA4IBAQAn2i2X/Pfnju6yiIgIqBuyeVtlKMvFHyqErg1Hju0e
2/3c5yc2mRtJC1O4N0lvUpZCorxLuRt0hDNKSG5Ej9ty7E0UjU1qUUsmE82qMvCV
ZzhBMNBruXp7LPWu0o5sePH0b/5uS3yMo5tJiGEYpXm89S9cklgy2G2unZCPCgjw
C/KGvrhUQi1XJZ2LFyTAr1VR6CMrdpV5tfro/QR+c6CMp1s3DSTx9JFBctGZa47g
Os4co6f1o2qkdmbmqiyYc9qeW7gfKpHcaCXr3+zuzq7p60khZFGRyfQjoWeR1Q5Y
hsyvjNoUcVggVEJScnnbWIQpwLMIpOXsRAy2tJI5jmMg
-----END CERTIFICATE-----
Generated at Mon Jun 17 14:47:43 2024 by rpki-client on console-fra.rpki-client.org