Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/MFJP6kljlBi2CgU-HHfOuiv2eiw.roa
File: MFJP6kljlBi2CgU-HHfOuiv2eiw.roa (raw, json)
Hash identifier: ZZ6HxlDIwyAB1Ba4lXIArpNhGTXHZYR4j/CZahTRpWw=
Subject key identifier: 30:52:4F:EA:49:63:94:18:B6:0A:05:3E:1C:77:CE:BA:2B:F6:7A:2C
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 018CC4938543D652AC640EE54C409F3901D1
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/MFJP6kljlBi2CgU-HHfOuiv2eiw.roa
Signing time: Mon 01 Jan 2024 10:30:51 +0000
ROA not before: Mon 01 Jan 2024 10:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 192.145.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:85:43:d6:52:ac:64:0e:e5:4c:40:9f:39:01:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 1 10:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30524fea49639418b60a053e1c77ceba2bf67a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:74:fb:e5:b6:2f:77:d2:db:9c:a2:3d:5c:b3:
dd:9f:0b:ab:d1:55:fd:36:92:4e:fe:e7:62:6e:2d:
56:6f:32:15:22:45:55:50:b6:74:a2:0e:a2:dc:96:
5a:43:42:d6:8b:ab:94:4b:5f:7d:13:61:ef:42:f3:
fe:a2:77:3f:4d:cb:36:0f:21:d7:f6:82:3c:42:60:
e1:82:6b:2f:98:3e:02:31:11:39:42:55:c6:13:7a:
64:6a:2f:05:9b:fa:76:30:74:8c:82:00:d9:e0:88:
d5:84:ab:f3:e6:1e:2b:d3:a2:2d:da:ee:13:b5:1a:
a0:23:10:a5:60:b3:86:f7:1f:0b:2e:00:51:fa:99:
c5:e3:4a:d4:c0:4f:99:da:aa:47:6d:91:4c:fa:c4:
0c:e2:1c:80:5f:f4:49:9e:72:68:54:04:2a:6f:e0:
ac:07:95:b0:01:37:52:50:bb:d2:ac:00:bf:a0:9e:
6f:7e:9c:f5:9d:67:1f:2a:34:37:1a:fd:68:8c:33:
58:3f:36:d6:19:e7:41:7d:97:92:37:ef:5b:2d:84:
8a:a1:7a:07:6c:c3:1a:74:bc:85:37:11:a1:75:6b:
9f:79:30:67:91:38:eb:89:45:53:c0:1c:ae:12:7c:
18:73:14:56:bf:0f:6f:1a:3a:a3:8a:57:06:4b:4a:
c0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:52:4F:EA:49:63:94:18:B6:0A:05:3E:1C:77:CE:BA:2B:F6:7A:2C
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/MFJP6kljlBi2CgU-HHfOuiv2eiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.69.0/24
Signature Algorithm: sha256WithRSAEncryption
15:bb:9e:60:1e:1c:46:08:23:36:89:35:5d:6a:0a:2c:4f:11:
3a:a0:18:ed:89:4e:97:48:cd:67:14:a8:8d:81:29:1c:d5:1d:
fc:22:b9:77:9e:1a:c6:88:54:54:2e:fd:a3:a1:12:6b:3c:55:
2f:2c:26:7e:a0:1c:cb:b9:d3:5f:e2:7e:21:d1:37:8e:73:8a:
79:57:35:b8:1f:cf:66:96:35:fb:e7:98:e5:83:19:aa:7d:a9:
bf:92:a4:ec:fc:bf:77:d9:2d:f5:ba:a3:ad:f2:0e:bc:81:81:
22:b0:dd:c7:28:e7:f4:dd:4e:82:6d:d3:40:87:0e:37:ae:78:
84:d8:54:a8:d0:26:b4:a7:09:33:21:2c:a9:23:fa:40:9b:ce:
93:90:ab:33:87:fc:ea:0f:bb:00:52:51:d4:c5:7a:13:7e:9b:
0f:ef:83:f3:d9:98:e8:be:68:7c:e6:8f:23:dd:f1:01:e8:e6:
82:a4:74:c6:49:65:8a:4a:1f:5e:f3:3b:3c:e4:74:08:b2:1c:
38:5e:44:ec:2d:11:96:6b:94:5f:9d:fe:7f:07:c2:7b:ed:1f:
c2:f6:76:49:b7:06:19:ef:72:c7:04:07:7d:49:d3:e0:ca:f4:
09:20:6f:db:66:56:37:1a:92:42:e2:c4:0a:f0:fd:80:32:02:
f4:93:df:87
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEk4VD1lKsZA7lTECfOQHRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy
ZGJmMDcwHhcNMjQwMTAxMTAzMDUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDUyNGZlYTQ5NjM5NDE4YjYwYTA1M2UxYzc3Y2ViYTJiZjY3YTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHT75bYvd9LbnKI9XLPdnwur0VX9
NpJO/udibi1WbzIVIkVVULZ0og6i3JZaQ0LWi6uUS199E2HvQvP+onc/Tcs2DyHX
9oI8QmDhgmsvmD4CMRE5QlXGE3pkai8Fm/p2MHSMggDZ4IjVhKvz5h4r06It2u4T
tRqgIxClYLOG9x8LLgBR+pnF40rUwE+Z2qpHbZFM+sQM4hyAX/RJnnJoVAQqb+Cs
B5WwATdSULvSrAC/oJ5vfpz1nWcfKjQ3Gv1ojDNYPzbWGedBfZeSN+9bLYSKoXoH
bMMadLyFNxGhdWufeTBnkTjriUVTwByuEnwYcxRWvw9vGjqjilcGS0rAoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDBST+pJY5QYtgoFPhx3zror9nosMB8GA1UdIwQY
MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt
ZjNlNTA2YWVhYTAxLzEvTUZKUDZrbGpsQmkyQ2dVLUhIZk91aXYyZWl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx
LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJFFMA0G
CSqGSIb3DQEBCwUAA4IBAQAVu55gHhxGCCM2iTVdagosTxE6oBjtiU6XSM1nFKiN
gSkc1R38Irl3nhrGiFRULv2joRJrPFUvLCZ+oBzLudNf4n4h0TeOc4p5VzW4H89m
ljX755jlgxmqfam/kqTs/L932S31uqOt8g68gYEisN3HKOf03U6CbdNAhw43rniE
2FSo0Ca0pwkzISypI/pAm86TkKszh/zqD7sAUlHUxXoTfpsP74Pz2Zjovmh85o8j
3fEB6OaCpHTGSWWKSh9e8zs85HQIshw4XkTsLRGWa5Rfnf5/B8J77R/C9nZJtwYZ
73LHBAd9SdPgyvQJIG/bZlY3GpJC4sQK8P2AMgL0k9+H
-----END CERTIFICATE-----
Generated at Thu May 2 21:27:42 2024 by rpki-client on console-fra.rpki-client.org