Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a092dd-590b-4fbe-89b7-e48c933c16ce/1/MQs7PCCBLuvNzOPZy0YcVTwSHFY.roa
File: MQs7PCCBLuvNzOPZy0YcVTwSHFY.roa (raw, json)
Hash identifier: WFiB3jTcHHDYGKVg7I64slQaE3Bh4GT60HM2g+VqA3A=
Subject key identifier: 31:0B:3B:3C:20:81:2E:EB:CD:CC:E3:D9:CB:46:1C:55:3C:12:1C:56
Certificate issuer: /CN=1c6208ce6d91d6b8dade58e5291bb1929d5e3933
Certificate serial: 01905F518D80C2B83973A406748D8C04EC5A
Authority key identifier: 1C:62:08:CE:6D:91:D6:B8:DA:DE:58:E5:29:1B:B1:92:9D:5E:39:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGIIzm2R1rja3ljlKRuxkp1eOTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/a092dd-590b-4fbe-89b7-e48c933c16ce/1/MQs7PCCBLuvNzOPZy0YcVTwSHFY.roa
Signing time: Fri 28 Jun 2024 14:48:18 +0000
ROA not before: Fri 28 Jun 2024 14:48:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200845
IP address blocks: 46.234.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/a092dd-590b-4fbe-89b7-e48c933c16ce/1/HGIIzm2R1rja3ljlKRuxkp1eOTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/a092dd-590b-4fbe-89b7-e48c933c16ce/1/HGIIzm2R1rja3ljlKRuxkp1eOTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGIIzm2R1rja3ljlKRuxkp1eOTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 18:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5f:51:8d:80:c2:b8:39:73:a4:06:74:8d:8c:04:ec:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6208ce6d91d6b8dade58e5291bb1929d5e3933
Validity
Not Before: Jun 28 14:48:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=310b3b3c20812eebcdcce3d9cb461c553c121c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:fb:5d:a1:80:83:29:07:33:93:26:67:c1:8e:
4a:92:4f:d7:28:80:2b:65:d0:62:23:0a:cf:ea:0e:
4c:5e:70:ef:ee:e8:a0:65:97:af:d7:48:89:27:8c:
11:77:4b:66:c7:45:c9:78:62:51:e9:50:e8:34:d9:
47:e6:6f:84:78:8b:9c:1c:a1:f6:62:56:dd:93:11:
e5:f3:59:4c:70:cb:ab:ba:67:df:86:d2:64:c4:33:
99:1b:5e:cf:a2:80:38:ba:97:61:bb:60:3f:1d:c1:
7e:f7:08:ff:26:3f:49:a8:70:a4:39:64:71:9c:e2:
bd:53:af:2c:c2:2e:51:95:f1:82:8b:c5:eb:1c:68:
8a:4c:e1:ae:49:fe:eb:54:23:17:17:0c:58:4d:4e:
d6:a1:f9:58:3e:09:dd:81:16:06:f3:f9:fc:51:f2:
f0:22:4f:cd:e2:aa:c6:31:c4:bb:36:4c:bc:ed:b8:
fc:c9:b0:65:de:4a:a4:de:c6:3f:0b:7c:f9:e4:84:
de:0d:7d:97:56:a7:9e:e6:47:9e:b9:ae:7a:ca:07:
fa:cc:b3:9a:a0:63:6e:07:4b:a1:24:96:36:fb:8d:
22:c0:12:18:c1:b6:27:ee:7b:4e:93:4d:8c:66:bd:
5f:cf:f6:62:04:d2:75:b5:83:c0:3b:f1:ad:47:c7:
1f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0B:3B:3C:20:81:2E:EB:CD:CC:E3:D9:CB:46:1C:55:3C:12:1C:56
X509v3 Authority Key Identifier:
keyid:1C:62:08:CE:6D:91:D6:B8:DA:DE:58:E5:29:1B:B1:92:9D:5E:39:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGIIzm2R1rja3ljlKRuxkp1eOTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a092dd-590b-4fbe-89b7-e48c933c16ce/1/MQs7PCCBLuvNzOPZy0YcVTwSHFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a092dd-590b-4fbe-89b7-e48c933c16ce/1/HGIIzm2R1rja3ljlKRuxkp1eOTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.234.128.0/19
Signature Algorithm: sha256WithRSAEncryption
83:25:b2:74:61:a8:0c:b4:00:6e:8d:c7:64:9b:81:81:19:3f:
81:e7:c3:77:ed:58:8e:c4:9c:19:12:6f:71:fb:c4:f6:0e:14:
50:68:c3:ea:f7:14:c5:14:d5:d2:b9:07:46:d2:5f:e8:93:17:
77:4e:21:cd:90:8e:97:e2:78:eb:16:c5:9e:51:0b:2c:4c:46:
17:5e:01:7f:2c:32:de:6f:0c:e0:4f:d0:20:52:8c:f5:76:a9:
58:a2:fc:5c:f7:e9:9d:81:e3:d1:61:38:37:78:af:6b:87:7b:
7c:58:3a:88:25:b5:92:d9:50:d2:70:d3:89:54:0a:3a:7a:ea:
85:b6:71:de:bf:4d:b6:76:c9:fa:09:50:bc:bf:d6:23:54:38:
bc:8b:34:d7:c1:9f:9c:dd:33:69:be:26:e5:32:86:8a:44:71:
d0:15:1f:d3:5f:91:77:22:39:64:1d:06:de:ed:50:23:27:3e:
d0:6b:4d:0a:06:1e:62:0e:f0:b4:44:2d:07:62:47:92:03:15:
b3:91:2c:9b:6f:3e:7a:bc:fb:73:8e:0c:52:71:30:a2:a8:92:
6f:3e:21:ca:26:24:02:bf:6e:51:5e:f2:25:0c:77:53:f6:3d:
9c:70:33:d1:a3:00:4d:1c:20:73:ca:40:40:c3:11:b0:61:a0:
f2:e9:e0:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZBfUY2Awrg5c6QGdI2MBOxaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjNjIwOGNlNmQ5MWQ2YjhkYWRlNThlNTI5MWJiMTkyOWQ1
ZTM5MzMwHhcNMjQwNjI4MTQ0ODE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTBiM2IzYzIwODEyZWViY2RjY2UzZDljYjQ2MWM1NTNjMTIxYzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9PtdoYCDKQczkyZnwY5Kkk/XKIAr
ZdBiIwrP6g5MXnDv7uigZZev10iJJ4wRd0tmx0XJeGJR6VDoNNlH5m+EeIucHKH2
YlbdkxHl81lMcMurumffhtJkxDOZG17PooA4updhu2A/HcF+9wj/Jj9JqHCkOWRx
nOK9U68swi5RlfGCi8XrHGiKTOGuSf7rVCMXFwxYTU7WoflYPgndgRYG8/n8UfLw
Ik/N4qrGMcS7Nky87bj8ybBl3kqk3sY/C3z55ITeDX2XVqee5keeua56ygf6zLOa
oGNuB0uhJJY2+40iwBIYwbYn7ntOk02MZr1fz/ZiBNJ1tYPAO/GtR8cfbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDELOzwggS7rzczj2ctGHFU8EhxWMB8GA1UdIwQY
MBaAFBxiCM5tkda42t5Y5SkbsZKdXjkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEdJSXptMlIxcmphM2xqbEtSdXhrcDFlT1RNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9hMDkyZGQtNTkwYi00ZmJlLTg5Yjct
ZTQ4YzkzM2MxNmNlLzEvTVFzN1BDQ0JMdXZOek9QWnkwWWNWVHdTSEZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9hMDkyZGQtNTkwYi00ZmJlLTg5YjctZTQ4YzkzM2MxNmNl
LzEvSEdJSXptMlIxcmphM2xqbEtSdXhrcDFlT1RNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLuqAMA0G
CSqGSIb3DQEBCwUAA4IBAQCDJbJ0YagMtABujcdkm4GBGT+B58N37ViOxJwZEm9x
+8T2DhRQaMPq9xTFFNXSuQdG0l/okxd3TiHNkI6X4njrFsWeUQssTEYXXgF/LDLe
bwzgT9AgUoz1dqlYovxc9+mdgePRYTg3eK9rh3t8WDqIJbWS2VDScNOJVAo6euqF
tnHev022dsn6CVC8v9YjVDi8izTXwZ+c3TNpviblMoaKRHHQFR/TX5F3IjlkHQbe
7VAjJz7Qa00KBh5iDvC0RC0HYkeSAxWzkSybbz56vPtzjgxScTCiqJJvPiHKJiQC
v25RXvIlDHdT9j2ccDPRowBNHCBzykBAwxGwYaDy6eB+
-----END CERTIFICATE-----
Generated at Wed Sep 18 23:57:20 2024 by rpki-client on console-fra.rpki-client.org