Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/Mboz4lPf0Brv_Mbgyxh8M0TnJiU.roa
File: Mboz4lPf0Brv_Mbgyxh8M0TnJiU.roa (raw, json)
Hash identifier: Iy6h+VOptAcm93eBwlJDyY963X9SfW0CK6BMuZVZEtw=
Subject key identifier: 31:BA:33:E2:53:DF:D0:1A:EF:FC:C6:E0:CB:18:7C:33:44:E7:26:25
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 0190FEDB04DAE5AD3B505D655F537700E7ED
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/Mboz4lPf0Brv_Mbgyxh8M0TnJiU.roa
Signing time: Mon 29 Jul 2024 14:18:04 +0000
ROA not before: Mon 29 Jul 2024 14:18:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48584
IP address blocks: 176.241.178.0/23 maxlen: 24
176.241.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fe:db:04:da:e5:ad:3b:50:5d:65:5f:53:77:00:e7:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jul 29 14:18:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31ba33e253dfd01aeffcc6e0cb187c3344e72625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:33:1c:e6:4f:71:5b:07:ce:63:e1:ef:f9:5a:
45:3c:4f:84:b5:54:ec:ff:67:0e:17:1e:00:7e:c9:
e0:9b:f5:cb:80:17:64:04:b6:ff:55:f2:2b:ad:13:
9c:5f:56:33:af:0e:2e:1e:53:80:df:c9:cd:a3:19:
80:da:f9:38:2b:d5:51:87:0d:9a:5b:b8:d7:3b:6b:
e3:34:a7:da:ef:16:64:e1:af:e3:53:83:8a:27:ff:
cc:7e:6c:d8:15:14:05:62:9c:75:12:f0:33:1d:5b:
ac:bf:bb:fe:9c:24:31:fd:3e:48:5b:2d:8a:60:be:
0b:1c:16:9d:a5:18:e1:d8:bf:c5:7c:1d:cc:fa:c2:
8f:6d:98:b6:02:81:2c:ed:58:f6:ee:56:ca:b4:89:
d4:d2:a3:6d:92:6b:2e:e5:ea:88:3a:0e:e6:09:3a:
90:14:0f:a3:1f:56:c7:b3:f4:aa:a0:cf:cd:40:ae:
51:11:fb:2e:d8:7f:fc:3c:8f:00:7f:54:0e:2c:6f:
64:09:62:8c:4a:74:b5:69:25:84:6c:cb:cd:6c:27:
52:13:ac:e0:2b:85:58:62:79:0a:96:55:80:08:23:
16:13:02:64:f6:21:ca:1d:54:a2:ae:e7:6d:e3:69:
b8:5f:0f:ec:b8:2f:05:e1:a7:a0:b5:8c:2f:34:25:
42:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BA:33:E2:53:DF:D0:1A:EF:FC:C6:E0:CB:18:7C:33:44:E7:26:25
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/Mboz4lPf0Brv_Mbgyxh8M0TnJiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.241.178.0-176.241.183.255
Signature Algorithm: sha256WithRSAEncryption
c7:bc:e9:37:83:af:d7:43:9f:7c:c6:fc:3b:9b:78:3a:35:b4:
60:39:2b:32:6d:de:0c:16:ea:fb:89:70:9b:e8:4e:97:4b:7b:
7b:6a:c5:e0:62:cd:3b:f3:fc:7a:1c:66:bc:74:77:93:bb:ef:
c8:e7:02:9c:87:b2:b6:be:92:25:01:73:66:55:46:14:7e:e7:
96:3e:b8:34:71:a2:7c:97:1e:2f:dd:7f:a0:f9:10:5c:31:dd:
b4:49:d3:33:c3:8a:8d:ef:40:a5:5f:72:62:47:2d:3f:b1:a1:
52:2c:3c:f5:74:70:4d:be:4d:b8:65:92:a7:d5:b1:21:cc:c5:
e5:cd:79:73:60:45:a2:0d:46:96:5f:71:74:e6:a4:55:c1:f9:
4e:0b:4a:74:21:4d:91:ab:42:b0:dd:90:05:2c:dc:6c:1f:55:
e0:2b:0f:6e:a1:0a:1c:82:06:b1:48:8a:e4:bf:1f:35:e8:94:
0d:35:d2:63:76:f8:09:d5:42:22:17:1a:f7:b0:e7:5a:3d:2e:
d6:73:9d:5b:25:34:ab:87:64:fa:23:6b:79:d4:3d:9f:ed:7a:
ae:6c:a0:22:74:2c:99:0d:e8:82:5c:bf:73:97:f3:72:40:80:
24:78:04:70:1c:39:59:b4:02:e2:88:b7:08:bb:50:d8:16:ca:
52:4a:1b:c9
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZD+2wTa5a07UF1lX1N3AOftMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1
Y2IyYWEwHhcNMjQwNzI5MTQxODA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMWJhMzNlMjUzZGZkMDFhZWZmY2M2ZTBjYjE4N2MzMzQ0ZTcyNjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzMc5k9xWwfOY+Hv+VpFPE+EtVTs
/2cOFx4Afsngm/XLgBdkBLb/VfIrrROcX1Yzrw4uHlOA38nNoxmA2vk4K9VRhw2a
W7jXO2vjNKfa7xZk4a/jU4OKJ//MfmzYFRQFYpx1EvAzHVusv7v+nCQx/T5IWy2K
YL4LHBadpRjh2L/FfB3M+sKPbZi2AoEs7Vj27lbKtInU0qNtkmsu5eqIOg7mCTqQ
FA+jH1bHs/SqoM/NQK5REfsu2H/8PI8Af1QOLG9kCWKMSnS1aSWEbMvNbCdSE6zg
K4VYYnkKllWACCMWEwJk9iHKHVSirudt42m4Xw/suC8F4aegtYwvNCVCjQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFDG6M+JT39Aa7/zG4MsYfDNE5yYlMB8GA1UdIwQY
MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt
ZGFjYjVmMzU2ZWEzLzEvTWJvejRsUGYwQnJ2X01iZ3l4aDhNMFRuSmlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz
LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGw8bID
BAOw8bAwDQYJKoZIhvcNAQELBQADggEBAMe86TeDr9dDn3zG/DubeDo1tGA5KzJt
3gwW6vuJcJvoTpdLe3tqxeBizTvz/HocZrx0d5O778jnApyHsra+kiUBc2ZVRhR+
55Y+uDRxonyXHi/df6D5EFwx3bRJ0zPDio3vQKVfcmJHLT+xoVIsPPV0cE2+Tbhl
kqfVsSHMxeXNeXNgRaINRpZfcXTmpFXB+U4LSnQhTZGrQrDdkAUs3GwfVeArD26h
ChyCBrFIiuS/HzXolA010mN2+AnVQiIXGvew51o9LtZznVslNKuHZPoja3nUPZ/t
eq5soCJ0LJkN6IJcv3OX83JAgCR4BHAcOVm0AuKItwi7UNgWylJKG8k=
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:03:51 2024 by rpki-client on console-fra.rpki-client.org