Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/mN5HvgHDSMsjQ3JQeXiqxNVw__Y.roa
File: mN5HvgHDSMsjQ3JQeXiqxNVw__Y.roa (raw, json)
Hash identifier: GzXi/yty6xfitFLpzCWCIzkQ50z5BlIdwFr66DnjJcQ=
Subject key identifier: 98:DE:47:BE:01:C3:48:CB:23:43:72:50:79:78:AA:C4:D5:70:FF:F6
Certificate issuer: /CN=129462d45b8ab95d4c35c40265b31b52bf1e8dbd
Certificate serial: 018CC94E194C8E748A562B244212047C176A
Authority key identifier: 12:94:62:D4:5B:8A:B9:5D:4C:35:C4:02:65:B3:1B:52:BF:1E:8D:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/mN5HvgHDSMsjQ3JQeXiqxNVw__Y.roa
Signing time: Tue 02 Jan 2024 08:33:07 +0000
ROA not before: Tue 02 Jan 2024 08:33:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 329272
IP address blocks: 213.148.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:19:4c:8e:74:8a:56:2b:24:42:12:04:7c:17:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=129462d45b8ab95d4c35c40265b31b52bf1e8dbd
Validity
Not Before: Jan 2 08:33:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=98de47be01c348cb234372507978aac4d570fff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:92:e1:a8:66:ce:f3:56:d4:6c:b3:c8:e2:d9:
23:57:4d:97:06:a7:53:40:8f:07:48:6d:ae:78:12:
48:d2:51:f4:2e:c6:5b:25:5f:1c:d3:b1:3a:ca:32:
4d:1b:2d:e4:e3:2e:c6:88:97:13:49:2e:33:04:11:
59:f2:53:df:d4:73:61:c1:f9:26:0d:0f:da:bd:b3:
7a:19:86:23:f5:66:de:05:dc:95:51:7e:fe:67:3f:
19:04:1b:e8:89:34:08:5d:10:11:ad:b0:83:a2:19:
f8:da:b5:26:85:99:24:45:aa:ad:df:c1:e0:6b:73:
23:04:dd:6d:c6:2b:1e:b5:9f:bb:bb:6c:e8:53:da:
f6:b5:8a:13:ec:6a:ce:49:a0:de:7e:39:57:a2:5c:
59:1b:91:de:9a:1e:4f:83:8c:93:80:b4:4f:a8:b3:
99:07:c3:53:ff:46:b5:f1:f4:be:a5:51:80:c8:f8:
17:6a:fa:bc:8a:18:29:0c:83:30:e5:06:19:62:6c:
8c:f9:ad:fc:84:2f:25:7b:e1:e6:7d:d2:2b:4c:80:
8a:d1:eb:92:ea:8f:b7:8e:e7:24:aa:5d:e0:78:66:
85:37:6d:19:99:c0:0b:82:28:9a:36:7a:b1:41:1e:
c9:43:c8:7e:79:79:d1:a8:e0:50:9e:9d:a0:4e:92:
15:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DE:47:BE:01:C3:48:CB:23:43:72:50:79:78:AA:C4:D5:70:FF:F6
X509v3 Authority Key Identifier:
keyid:12:94:62:D4:5B:8A:B9:5D:4C:35:C4:02:65:B3:1B:52:BF:1E:8D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/mN5HvgHDSMsjQ3JQeXiqxNVw__Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.148.16.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:e6:fa:60:c0:dc:d3:ef:36:69:4f:f5:4f:15:19:5a:b9:26:
27:f3:08:86:69:8e:5c:50:4b:bb:96:b7:aa:5c:5a:d9:d6:45:
b2:af:e2:23:3a:43:44:39:4b:bd:81:0a:2b:0e:65:12:66:04:
c0:e1:65:5e:d3:7d:0a:4e:9b:74:c8:ca:cd:6c:45:8d:f6:07:
00:90:53:ad:2e:63:89:a6:ea:0f:12:ed:b0:a0:8e:3e:ba:90:
69:c4:f9:95:e5:69:65:db:ad:d6:a2:d9:c7:79:0b:81:64:f9:
84:ba:16:cd:5a:80:8f:c0:d8:aa:32:f7:36:36:c8:86:e7:b6:
21:9e:07:ab:8c:e9:b6:17:a9:7b:18:c7:32:5d:a7:fd:ff:db:
66:d9:5d:44:3f:48:66:e9:f8:f1:4d:50:47:4e:09:11:ca:e0:
2c:ca:fc:d0:47:e6:6c:31:b6:45:f6:b6:28:c2:c0:0b:9e:74:
da:13:f6:0f:e6:4d:c7:4c:02:8c:e0:00:cb:c5:67:a4:91:67:
cd:83:bd:67:b6:51:e9:7b:76:d9:c6:d8:a3:fe:f8:79:5f:99:
15:8c:e0:23:ea:3b:e6:07:52:f3:dd:7a:f1:18:3e:d9:f6:b6:
94:c1:82:b2:2f:a6:8b:06:f3:c5:dc:2c:b5:ff:2d:35:b5:d8:
9a:df:bf:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJThlMjnSKViskQhIEfBdqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyOTQ2MmQ0NWI4YWI5NWQ0YzM1YzQwMjY1YjMxYjUyYmYx
ZThkYmQwHhcNMjQwMTAyMDgzMzA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGRlNDdiZTAxYzM0OGNiMjM0MzcyNTA3OTc4YWFjNGQ1NzBmZmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZLhqGbO81bUbLPI4tkjV02XBqdT
QI8HSG2ueBJI0lH0LsZbJV8c07E6yjJNGy3k4y7GiJcTSS4zBBFZ8lPf1HNhwfkm
DQ/avbN6GYYj9WbeBdyVUX7+Zz8ZBBvoiTQIXRARrbCDohn42rUmhZkkRaqt38Hg
a3MjBN1txisetZ+7u2zoU9r2tYoT7GrOSaDefjlXolxZG5Hemh5Pg4yTgLRPqLOZ
B8NT/0a18fS+pVGAyPgXavq8ihgpDIMw5QYZYmyM+a38hC8le+HmfdIrTICK0euS
6o+3juckql3geGaFN20ZmcALgiiaNnqxQR7JQ8h+eXnRqOBQnp2gTpIViQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJjeR74Bw0jLI0NyUHl4qsTVcP/2MB8GA1UdIwQY
MBaAFBKUYtRbirldTDXEAmWzG1K/Ho29MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXBSaTFGdUt1VjFNTmNRQ1piTWJVcjhlamIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85OTk1MDktYmRjMC00ZTA3LTg3NzQt
M2EzODkzMzJmNzlmLzEvbU41SHZnSERTTXNqUTNKUWVYaXF4TlZ3X19ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC85OTk1MDktYmRjMC00ZTA3LTg3NzQtM2EzODkzMzJmNzlm
LzEvRXBSaTFGdUt1VjFNTmNRQ1piTWJVcjhlamIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1ZQQMA0G
CSqGSIb3DQEBCwUAA4IBAQCf5vpgwNzT7zZpT/VPFRlauSYn8wiGaY5cUEu7lreq
XFrZ1kWyr+IjOkNEOUu9gQorDmUSZgTA4WVe030KTpt0yMrNbEWN9gcAkFOtLmOJ
puoPEu2woI4+upBpxPmV5Wll263WotnHeQuBZPmEuhbNWoCPwNiqMvc2NsiG57Yh
ngerjOm2F6l7GMcyXaf9/9tm2V1EP0hm6fjxTVBHTgkRyuAsyvzQR+ZsMbZF9rYo
wsALnnTaE/YP5k3HTAKM4ADLxWekkWfNg71ntlHpe3bZxtij/vh5X5kVjOAj6jvm
B1Lz3XrxGD7Z9raUwYKyL6aLBvPF3Cy1/y01tdia379Z
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:53:45 2024 by rpki-client on console-fra.rpki-client.org