Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/MDGnWAKN_DKikxddSvKYysZrkqs.roa
File: MDGnWAKN_DKikxddSvKYysZrkqs.roa (raw, json)
Hash identifier: eMxnd20rdGr2jdEXrIh0WXJiseeNgTel+jL/C//IvQ4=
Subject key identifier: 30:31:A7:58:02:8D:FC:32:A2:93:17:5D:4A:F2:98:CA:C6:6B:92:AB
Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial: 0192E23E3830FD1FC6CD3D03F561917E825D
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/MDGnWAKN_DKikxddSvKYysZrkqs.roa
Signing time: Thu 31 Oct 2024 11:03:01 +0000
ROA not before: Thu 31 Oct 2024 11:03:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204548
IP address blocks: 45.83.41.0/24 maxlen: 24
63.250.59.0/24 maxlen: 24
63.250.60.0/24 maxlen: 24
81.28.6.0/24 maxlen: 24
83.229.84.0/24 maxlen: 24
83.229.85.0/24 maxlen: 24
83.229.86.0/24 maxlen: 24
83.229.87.0/24 maxlen: 24
103.13.211.0/24 maxlen: 24
103.240.144.0/24 maxlen: 24
185.47.174.0/24 maxlen: 24
185.53.210.0/24 maxlen: 24
185.139.230.0/24 maxlen: 24
185.181.10.0/24 maxlen: 24
185.227.108.0/24 maxlen: 24
185.227.111.0/24 maxlen: 24
185.237.14.0/24 maxlen: 24
185.237.15.0/24 maxlen: 24
185.237.96.0/24 maxlen: 24
185.237.97.0/24 maxlen: 24
185.247.118.0/24 maxlen: 24
194.36.88.0/24 maxlen: 24
194.37.80.0/24 maxlen: 24
195.238.122.0/24 maxlen: 24
2a06:c5c0:1100::/48 maxlen: 48
2a07:3b80:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e2:3e:38:30:fd:1f:c6:cd:3d:03:f5:61:91:7e:82:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Validity
Not Before: Oct 31 11:03:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3031a758028dfc32a293175d4af298cac66b92ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2e:76:73:f6:00:90:d1:3d:d0:56:54:cf:fe:
1a:8f:bb:3d:4d:54:a5:d3:03:29:73:54:4f:0b:a7:
d1:1d:45:3c:44:7d:39:6e:30:a9:f0:49:4b:d1:15:
a4:96:c9:31:f9:ed:6f:b2:ae:e0:b1:da:53:9a:a5:
8b:c2:f5:ee:ae:69:f4:34:bb:65:d8:a3:a2:73:27:
2f:d8:4b:cc:13:a6:9a:81:88:20:1d:61:a6:bb:ab:
c6:86:a4:45:c9:56:5a:ca:6b:84:7f:74:c7:cc:94:
99:f8:10:d9:26:34:27:49:dd:ca:c9:9a:7f:7e:cc:
a9:a9:c5:44:39:15:18:2c:4b:e8:e1:9b:a5:d7:ab:
59:d9:1b:e3:39:d4:df:09:eb:eb:f8:a7:5c:5c:ab:
b9:67:21:41:4e:14:60:c4:c5:52:4d:de:8a:ef:70:
e5:2f:61:fa:a8:1e:f4:cc:c1:48:45:43:01:2e:66:
a9:2b:14:04:a8:26:31:d1:79:9e:fe:dd:92:ff:13:
92:bc:94:8f:a2:5f:20:63:41:0d:d6:80:53:66:08:
5a:16:2e:44:d3:49:51:99:f0:e8:f1:67:8f:a0:f9:
c6:2e:62:33:07:66:68:eb:2e:53:a5:be:d0:bb:44:
9a:e6:6e:52:79:20:1d:1f:b1:92:64:b9:dc:59:3f:
63:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:31:A7:58:02:8D:FC:32:A2:93:17:5D:4A:F2:98:CA:C6:6B:92:AB
X509v3 Authority Key Identifier:
keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/MDGnWAKN_DKikxddSvKYysZrkqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.41.0/24
63.250.59.0-63.250.60.255
81.28.6.0/24
83.229.84.0/22
103.13.211.0/24
103.240.144.0/24
185.47.174.0/24
185.53.210.0/24
185.139.230.0/24
185.181.10.0/24
185.227.108.0/24
185.227.111.0/24
185.237.14.0/23
185.237.96.0/23
185.247.118.0/24
194.36.88.0/24
194.37.80.0/24
195.238.122.0/24
IPv6:
2a06:c5c0:1100::/48
2a07:3b80:1::/48
Signature Algorithm: sha256WithRSAEncryption
b2:03:c2:35:51:52:9d:8a:ae:7d:75:61:b1:ab:31:28:97:9d:
2e:54:29:8b:ee:14:aa:f1:fd:06:db:51:82:54:b8:33:9b:95:
4c:fe:7b:7d:69:a1:55:2a:4e:b9:2e:62:16:d0:7a:cb:b6:7c:
c8:5b:cf:f6:0e:6b:27:f9:8f:06:37:8f:0d:c3:eb:be:a2:a8:
96:39:e8:22:72:2f:e4:3a:f4:dd:99:bc:03:bb:23:93:c3:99:
2d:78:9a:c1:59:72:5b:4c:14:ea:81:2f:f1:a7:d8:05:c7:70:
26:79:da:fe:94:a3:83:64:e8:2d:ee:0f:a5:7b:2f:69:0c:19:
19:64:69:56:db:14:8f:95:74:02:0f:e7:87:50:da:eb:ea:1e:
26:01:45:69:2b:9d:15:e0:7a:aa:7e:69:7a:84:9b:c1:da:7c:
9e:ba:5a:68:f1:ae:55:69:f5:2e:26:b6:f4:45:52:09:4c:6a:
a6:56:18:90:be:23:55:b8:51:a5:02:15:ed:4e:c5:fe:47:f0:
2a:90:28:a9:d6:f3:27:88:6e:18:b0:86:2c:92:4d:6b:c7:ea:
9c:58:a8:0e:6f:56:bc:2a:5a:21:9d:08:01:2d:2f:e0:cb:d7:
34:ef:94:19:8a:bc:af:c5:a8:ab:5a:91:8e:dc:dd:33:87:6e:
12:80:3b:95
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgISAZLiPjgw/R/GzT0D9WGRfoJdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YmQ3OTIzYWZkYmFlODdkMDdiMjMwOGRkMzg5ZDljZjA4
MmVkNmQwHhcNMjQxMDMxMTEwMzAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDMxYTc1ODAyOGRmYzMyYTI5MzE3NWQ0YWYyOThjYWM2NmI5MmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkC52c/YAkNE90FZUz/4aj7s9TVSl
0wMpc1RPC6fRHUU8RH05bjCp8ElL0RWklskx+e1vsq7gsdpTmqWLwvXurmn0NLtl
2KOicycv2EvME6aagYggHWGmu6vGhqRFyVZaymuEf3THzJSZ+BDZJjQnSd3KyZp/
fsypqcVEORUYLEvo4Zul16tZ2RvjOdTfCevr+KdcXKu5ZyFBThRgxMVSTd6K73Dl
L2H6qB70zMFIRUMBLmapKxQEqCYx0Xme/t2S/xOSvJSPol8gY0EN1oBTZghaFi5E
00lRmfDo8WePoPnGLmIzB2Zo6y5Tpb7Qu0Sa5m5SeSAdH7GSZLncWT9joQIDAQAB
o4IClDCCApAwHQYDVR0OBBYEFDAxp1gCjfwyopMXXUrymMrGa5KrMB8GA1UdIwQY
MBaAFOW9eSOv266H0HsjCN04nZzwgu1tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWIxNUk2X2Jyb2ZRZXlNSTNUaWRuUENDN1cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8yNjkyMjktMjBlYi00ZjFjLWExM2Ut
MjZkMWU1NDU3OGYxLzEvTURHbldBS05fREtpa3hkZFN2S1l5c1pya3FzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8yNjkyMjktMjBlYi00ZjFjLWExM2UtMjZkMWU1NDU3OGYx
LzEvNWIxNUk2X2Jyb2ZRZXlNSTNUaWRuUENDN1cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGpBggrBgEFBQcBBwEB/wSBmTCBljB6BAIAATB0AwQALVMp
MAwDBAA/+jsDBAA/+jwDBABRHAYDBAJT5VQDBABnDdMDBABn8JADBAC5L64DBAC5
NdIDBAC5i+YDBAC5tQoDBAC542wDBAC5428DBAG57Q4DBAG57WADBAC593YDBADC
JFgDBADCJVADBADD7nowGAQCAAIwEgMHACoGxcARAAMHACoHO4AAATANBgkqhkiG
9w0BAQsFAAOCAQEAsgPCNVFSnYqufXVhsasxKJedLlQpi+4UqvH9BttRglS4M5uV
TP57fWmhVSpOuS5iFtB6y7Z8yFvP9g5rJ/mPBjePDcPrvqKoljnoInIv5Dr03Zm8
A7sjk8OZLXiawVlyW0wU6oEv8afYBcdwJnna/pSjg2ToLe4PpXsvaQwZGWRpVtsU
j5V0Ag/nh1Da6+oeJgFFaSudFeB6qn5peoSbwdp8nrpaaPGuVWn1Lia29EVSCUxq
plYYkL4jVbhRpQIV7U7F/kfwKpAoqdbzJ4huGLCGLJJNa8fqnFioDm9WvCpaIZ0I
AS0v4MvXNO+UGYq8r8Woq1qRjtzdM4duEoA7lQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:41:07 2024 by rpki-client on console-fra.rpki-client.org