Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/M6CsgFTPQZBwH-Owq8mFGLyYpKQ.roa
File: M6CsgFTPQZBwH-Owq8mFGLyYpKQ.roa (raw, json)
Hash identifier: MbZXIt51Xym8OjJOADsETG2/dtiDsK7Vp3i08sf8Ddc=
Subject key identifier: 33:A0:AC:80:54:CF:41:90:70:1F:E3:B0:AB:C9:85:18:BC:98:A4:A4
Certificate issuer: /CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
Certificate serial: 018CC86FE15378C60B86B87331E27B7B4B82
Authority key identifier: A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/M6CsgFTPQZBwH-Owq8mFGLyYpKQ.roa
Signing time: Tue 02 Jan 2024 04:30:24 +0000
ROA not before: Tue 02 Jan 2024 04:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211668
IP address blocks: 80.249.132.0/24 maxlen: 24
2a10:b5c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:e1:53:78:c6:0b:86:b8:73:31:e2:7b:7b:4b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
Validity
Not Before: Jan 2 04:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33a0ac8054cf4190701fe3b0abc98518bc98a4a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f2:27:39:e4:d3:21:9d:fc:fb:90:97:c2:b1:
ad:b6:5c:e5:53:f3:ef:24:35:44:df:ac:52:8f:82:
80:09:65:89:6b:d0:f9:48:db:59:b1:e9:d4:70:d4:
5a:3b:5d:00:0c:be:a3:2e:8e:c0:f6:be:f3:9b:34:
a6:d1:26:92:f5:67:07:3b:b6:80:72:ef:fa:5d:18:
df:63:52:61:c6:60:5e:4b:ab:bf:50:08:80:38:1b:
01:58:af:08:33:86:0c:02:94:f0:1a:f8:d7:3f:9a:
8d:bb:06:df:fa:a8:7f:a7:76:b4:24:f5:51:0b:d1:
48:e5:ba:2d:99:77:58:d7:ec:80:05:18:b4:da:72:
55:1f:d2:1b:89:99:cf:7f:bc:9c:91:72:d8:d6:aa:
11:f7:36:29:c4:1e:8c:e7:a7:f1:72:2a:91:4d:4f:
8e:b4:26:3a:bb:c0:25:db:73:49:49:e9:a4:89:a6:
5b:86:b4:ff:b9:10:b3:94:bf:c3:b7:9e:85:ba:be:
51:a4:5d:c9:fe:f0:1d:c2:60:82:00:94:d2:0b:d7:
ef:bf:8d:84:2c:1e:61:ce:a9:ed:74:14:c9:8b:28:
15:41:cf:04:1a:a6:1a:ac:27:8e:3c:e6:d2:26:6a:
c6:63:18:ab:af:17:85:e8:bf:e4:2f:f6:e9:f8:10:
4e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A0:AC:80:54:CF:41:90:70:1F:E3:B0:AB:C9:85:18:BC:98:A4:A4
X509v3 Authority Key Identifier:
keyid:A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/M6CsgFTPQZBwH-Owq8mFGLyYpKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.249.132.0/24
IPv6:
2a10:b5c0::/29
Signature Algorithm: sha256WithRSAEncryption
2a:96:2a:f5:a5:79:b4:40:e0:8b:10:a7:5c:6c:e9:62:63:53:
c4:46:4d:b4:1d:c5:81:3e:ad:f7:ea:d5:16:4f:8b:44:59:09:
3d:c7:b8:0b:74:3d:43:21:af:9f:b5:bc:56:4a:82:72:4d:9f:
19:bc:15:2f:5a:c1:1d:06:10:ec:5b:10:d7:c3:56:56:1c:4d:
65:93:e6:82:5d:9d:c1:f4:80:cd:d6:5f:60:46:1c:2e:ff:2b:
21:0e:8a:b5:a1:e0:4a:09:2f:9d:1b:ba:42:fe:13:fe:a9:da:
a8:d8:56:2e:88:89:df:e8:3d:9f:0b:60:b3:c5:38:f8:4e:50:
69:de:44:96:7d:aa:26:1c:1b:fc:76:a2:72:09:c1:0c:15:40:
92:28:ff:4c:f5:dd:5f:02:27:15:fd:37:92:94:32:9d:94:d2:
01:1e:28:00:14:77:3c:14:d7:76:3b:6d:3a:f9:b5:bc:44:e4:
9f:67:65:3c:6e:31:83:70:0f:b9:28:2b:b3:4c:c4:55:7f:64:
b2:4f:da:6c:e4:e6:c2:5e:89:4e:9a:33:00:c6:8c:0f:4f:bd:
4b:3d:e8:f4:24:de:95:f7:13:f4:3d:c8:2d:ed:9a:a1:ff:12:
35:80:3e:99:e8:86:e9:92:81:fa:7a:7c:31:dc:d1:2c:61:76:
25:31:b9:a5
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzIb+FTeMYLhrhzMeJ7e0uCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyYWUzNTY5Njg5ZmY1NDJhOTExZDcwOThiODI0NjZlNmVh
OWZjODUwHhcNMjQwMTAyMDQzMDI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2EwYWM4MDU0Y2Y0MTkwNzAxZmUzYjBhYmM5ODUxOGJjOThhNGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPInOeTTIZ38+5CXwrGttlzlU/Pv
JDVE36xSj4KACWWJa9D5SNtZsenUcNRaO10ADL6jLo7A9r7zmzSm0SaS9WcHO7aA
cu/6XRjfY1JhxmBeS6u/UAiAOBsBWK8IM4YMApTwGvjXP5qNuwbf+qh/p3a0JPVR
C9FI5botmXdY1+yABRi02nJVH9IbiZnPf7yckXLY1qoR9zYpxB6M56fxciqRTU+O
tCY6u8Al23NJSemkiaZbhrT/uRCzlL/Dt56Fur5RpF3J/vAdwmCCAJTSC9fvv42E
LB5hzqntdBTJiygVQc8EGqYarCeOPObSJmrGYxirrxeF6L/kL/bp+BBOtQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFDOgrIBUz0GQcB/jsKvJhRi8mKSkMB8GA1UdIwQY
MBaAFKKuNWlon/VCqRHXCYuCRm5uqfyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3E0MWFXaWY5VUtwRWRjSmk0SkdibTZwX0lVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85ODg2N2MtODU2ZS00NmM5LTg5MjUt
NmVhNWQ4Yjc1NDExLzEvTTZDc2dGVFBRWkJ3SC1Pd3E4bUZHTHlZcEtRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS85ODg2N2MtODU2ZS00NmM5LTg5MjUtNmVhNWQ4Yjc1NDEx
LzEvb3E0MWFXaWY5VUtwRWRjSmk0SkdibTZwX0lVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAUPmEMA0E
AgACMAcDBQMqELXAMA0GCSqGSIb3DQEBCwUAA4IBAQAqlir1pXm0QOCLEKdcbOli
Y1PERk20HcWBPq336tUWT4tEWQk9x7gLdD1DIa+ftbxWSoJyTZ8ZvBUvWsEdBhDs
WxDXw1ZWHE1lk+aCXZ3B9IDN1l9gRhwu/yshDoq1oeBKCS+dG7pC/hP+qdqo2FYu
iInf6D2fC2CzxTj4TlBp3kSWfaomHBv8dqJyCcEMFUCSKP9M9d1fAicV/TeSlDKd
lNIBHigAFHc8FNd2O206+bW8ROSfZ2U8bjGDcA+5KCuzTMRVf2SyT9ps5ObCXolO
mjMAxowPT71LPej0JN6V9xP0Pcgt7Zqh/xI1gD6Z6IbpkoH6enwx3NEsYXYlMbml
-----END CERTIFICATE-----
Generated at Fri Jun 7 17:41:31 2024 by rpki-client on console-ams.rpki-client.org