Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/MHk9tnAsGAkTqheavgh8KpZhses.roa
File: MHk9tnAsGAkTqheavgh8KpZhses.roa (raw, json)
Hash identifier: frt4hqfW89P8KPzn/ij04Lp2LApVzFkeI6N50tcaFBk=
Subject key identifier: 30:79:3D:B6:70:2C:18:09:13:AA:17:9A:BE:08:7C:2A:96:61:B1:EB
Certificate issuer: /CN=ee6f421c253096280347dc2e92ca10cc398c134f
Certificate serial: 018CCA29CB36C40D5DD0DC8A0DC8F32AEAE3
Authority key identifier: EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/MHk9tnAsGAkTqheavgh8KpZhses.roa
Signing time: Tue 02 Jan 2024 12:33:05 +0000
ROA not before: Tue 02 Jan 2024 12:33:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44991
IP address blocks: 195.230.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:cb:36:c4:0d:5d:d0:dc:8a:0d:c8:f3:2a:ea:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee6f421c253096280347dc2e92ca10cc398c134f
Validity
Not Before: Jan 2 12:33:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30793db6702c180913aa179abe087c2a9661b1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e7:a0:d1:14:6c:f4:6c:b2:12:7e:94:12:f5:
36:23:26:03:cc:3e:da:77:ea:6d:eb:be:11:eb:90:
8f:13:6b:a2:55:4a:f1:18:81:23:99:05:f5:f1:85:
4e:0e:4d:7d:d3:24:32:52:e0:2f:5a:67:55:a3:35:
4c:6f:e5:40:dc:09:21:51:e4:e1:17:1e:7b:c3:ae:
83:d3:b2:09:09:45:23:fd:8b:21:0c:0e:3b:9b:51:
7b:f9:7e:a5:2f:19:f7:03:39:38:99:b5:75:94:cd:
c8:24:43:ba:c3:c2:6a:d0:ef:d7:4d:7b:74:4e:08:
a7:21:67:81:45:84:e3:dd:02:95:2d:fc:b8:0c:bb:
87:26:f4:68:60:93:5b:dc:07:be:ef:14:4e:97:37:
ea:72:f5:46:75:4d:cd:db:95:54:ad:b6:2c:21:c7:
d7:f7:c5:56:61:91:b2:f4:eb:57:08:08:57:9e:b5:
00:df:6d:1b:03:4c:39:21:e9:a1:89:80:17:72:98:
f6:14:2b:46:06:07:d2:ea:36:db:75:8b:29:6c:fb:
8b:90:65:af:c9:ff:71:76:94:46:9d:62:51:68:46:
62:fc:25:8a:28:f1:3f:55:78:b6:d7:20:45:ff:3d:
bf:f0:49:95:1e:7a:32:67:95:f9:c1:84:07:41:0a:
fa:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:79:3D:B6:70:2C:18:09:13:AA:17:9A:BE:08:7C:2A:96:61:B1:EB
X509v3 Authority Key Identifier:
keyid:EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/MHk9tnAsGAkTqheavgh8KpZhses.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.230.106.0/24
Signature Algorithm: sha256WithRSAEncryption
85:01:23:32:8f:07:0c:bf:ea:bf:a0:43:9a:bc:9c:3d:35:a9:
fc:8f:86:aa:d2:ef:7a:6f:0f:70:f8:bd:0c:27:99:26:dc:4a:
5f:a9:de:90:cb:6d:a7:84:e8:41:e0:36:6d:a8:fc:a8:47:7a:
82:02:3b:f9:25:e2:fa:6a:c7:53:14:e1:b2:ca:2e:33:cb:f0:
f9:9b:a0:46:0d:a8:fc:04:85:c0:c7:20:d0:c6:a5:4c:df:03:
25:02:3e:e6:3f:4b:39:e2:18:90:fa:66:67:83:b3:a8:b9:ce:
38:64:2c:76:77:44:0d:1f:e2:cb:6e:8d:fa:68:91:fe:9e:07:
3e:86:e0:68:77:e8:90:72:1b:b9:e7:b5:53:6b:93:61:19:f7:
5e:f3:d5:2d:7a:45:f0:78:da:9d:6a:fd:d5:79:df:2e:23:43:
c1:3d:73:b2:1b:05:2e:48:55:6a:10:75:ff:70:6d:84:4e:29:
c0:6c:2d:90:04:e4:01:d3:80:04:11:a4:e4:f0:66:80:f8:2a:
6d:8d:70:95:36:51:ad:41:2f:3f:aa:5f:1c:77:93:af:3a:54:
a7:51:e3:5f:a1:74:98:41:83:a9:13:b0:de:41:02:88:0a:7c:
1e:49:89:42:ce:c3:b6:1d:b9:8b:70:f4:6b:83:b9:20:46:18:
ed:4a:4d:88
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKcs2xA1d0NyKDcjzKurjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlNmY0MjFjMjUzMDk2MjgwMzQ3ZGMyZTkyY2ExMGNjMzk4
YzEzNGYwHhcNMjQwMTAyMTIzMzA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDc5M2RiNjcwMmMxODA5MTNhYTE3OWFiZTA4N2MyYTk2NjFiMWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkueg0RRs9GyyEn6UEvU2IyYDzD7a
d+pt674R65CPE2uiVUrxGIEjmQX18YVODk190yQyUuAvWmdVozVMb+VA3AkhUeTh
Fx57w66D07IJCUUj/YshDA47m1F7+X6lLxn3Azk4mbV1lM3IJEO6w8Jq0O/XTXt0
TginIWeBRYTj3QKVLfy4DLuHJvRoYJNb3Ae+7xROlzfqcvVGdU3N25VUrbYsIcfX
98VWYZGy9OtXCAhXnrUA320bA0w5IemhiYAXcpj2FCtGBgfS6jbbdYspbPuLkGWv
yf9xdpRGnWJRaEZi/CWKKPE/VXi21yBF/z2/8EmVHnoyZ5X5wYQHQQr6swIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDB5PbZwLBgJE6oXmr4IfCqWYbHrMB8GA1UdIwQY
MBaAFO5vQhwlMJYoA0fcLpLKEMw5jBNPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN205Q0hDVXdsaWdEUjl3dWtzb1F6RG1NRTA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zZTA5MzUtNmE5NS00N2E0LWFkNGMt
MzU0MmY5OWJlNjNiLzEvTUhrOXRuQXNHQWtUcWhlYXZnaDhLcFpoc2VzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zZTA5MzUtNmE5NS00N2E0LWFkNGMtMzU0MmY5OWJlNjNi
LzEvN205Q0hDVXdsaWdEUjl3dWtzb1F6RG1NRTA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+ZqMA0G
CSqGSIb3DQEBCwUAA4IBAQCFASMyjwcMv+q/oEOavJw9Nan8j4aq0u96bw9w+L0M
J5km3Epfqd6Qy22nhOhB4DZtqPyoR3qCAjv5JeL6asdTFOGyyi4zy/D5m6BGDaj8
BIXAxyDQxqVM3wMlAj7mP0s54hiQ+mZng7Oouc44ZCx2d0QNH+LLbo36aJH+ngc+
huBod+iQchu557VTa5NhGfde89UtekXweNqdav3Ved8uI0PBPXOyGwUuSFVqEHX/
cG2ETinAbC2QBOQB04AEEaTk8GaA+CptjXCVNlGtQS8/ql8cd5OvOlSnUeNfoXSY
QYOpE7DeQQKICnweSYlCzsO2HbmLcPRrg7kgRhjtSk2I
-----END CERTIFICATE-----
Generated at Sat May 18 02:54:51 2024 by rpki-client on console-ams.rpki-client.org