Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/CnMwex29OsXOjgAIS47x7lHUIuk.roa
File: CnMwex29OsXOjgAIS47x7lHUIuk.roa (raw, json)
Hash identifier: L19y5kKx3SY7q1YnTE4ZlE0p32dIndpwnjka+O4rAEM=
Subject key identifier: 0A:73:30:7B:1D:BD:3A:C5:CE:8E:00:08:4B:8E:F1:EE:51:D4:22:E9
Certificate issuer: /CN=01626ffd800eafa336bdf343141f03f7c393c364
Certificate serial: 018CC5DC913A499A6D4F69B94F1510A2C6BD
Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/CnMwex29OsXOjgAIS47x7lHUIuk.roa
Signing time: Mon 01 Jan 2024 16:30:15 +0000
ROA not before: Mon 01 Jan 2024 16:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205839
IP address blocks: 89.18.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 May 2024 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:91:3a:49:9a:6d:4f:69:b9:4f:15:10:a2:c6:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364
Validity
Not Before: Jan 1 16:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a73307b1dbd3ac5ce8e00084b8ef1ee51d422e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e3:76:00:ee:14:23:7b:9b:e2:a8:4e:6b:51:
85:88:63:e1:b8:8e:86:2c:07:44:5e:85:2f:a1:96:
b8:06:91:f6:7c:da:04:36:be:f8:07:9b:e6:70:29:
17:25:13:e8:99:d3:19:1b:64:1a:77:0b:84:83:27:
14:80:87:68:0f:70:45:6a:45:0e:1d:1f:98:2f:67:
c0:8e:2e:c5:30:0e:27:a0:1b:0e:4e:40:76:eb:d2:
88:f3:17:0c:7e:1f:70:64:be:11:fe:3b:8c:0f:72:
c7:a1:0e:c2:25:8a:74:f4:e0:cf:f3:62:4b:79:9f:
19:69:e5:7b:fc:34:4e:df:d1:c4:17:03:2f:7c:fe:
92:d2:7a:74:d1:d1:59:e9:9b:38:11:69:81:48:17:
cf:f5:d1:76:d0:10:99:1d:4d:44:2e:20:30:a6:3f:
60:f4:bd:a6:2d:ed:46:96:ed:65:70:c9:73:56:94:
c8:1f:39:38:11:d6:54:f5:ac:ae:9b:58:d2:47:e1:
19:f3:52:6d:26:35:be:0f:84:bd:99:56:33:7a:b0:
df:37:49:f8:3d:34:ab:22:dd:aa:36:ae:93:ee:94:
c5:73:4e:8e:6d:e7:29:f8:2d:8b:fb:ea:a9:f4:59:
6f:bd:1c:9c:a5:27:54:2c:ff:de:c7:9d:4a:31:3f:
47:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:73:30:7B:1D:BD:3A:C5:CE:8E:00:08:4B:8E:F1:EE:51:D4:22:E9
X509v3 Authority Key Identifier:
keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/CnMwex29OsXOjgAIS47x7lHUIuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.18.183.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:04:5a:cf:c1:9a:a1:a7:8b:1b:c4:36:13:42:74:3b:a6:cf:
34:f7:85:64:5b:98:78:ce:72:51:2a:db:fe:9b:2a:74:24:07:
08:2e:2f:78:5d:c4:9f:1f:13:81:ed:f9:b7:86:b6:6f:5f:da:
86:dd:f0:f6:95:ee:9f:32:f7:2d:82:3a:66:9b:47:ec:53:5f:
1e:d4:a9:0f:0b:bc:e6:71:9e:28:22:d8:31:14:14:e7:93:3f:
4e:19:e5:1b:04:8c:db:d8:e4:96:fa:17:2c:c8:d8:3a:0f:98:
c5:5f:cd:01:40:59:06:05:d5:db:ae:62:e9:c3:32:27:0a:f1:
8a:ef:00:69:e1:73:d8:07:0e:70:45:31:ba:9a:59:86:e5:fe:
f7:6e:33:01:91:ae:b7:7d:8e:fe:07:44:1f:95:1e:1c:a0:6c:
2e:fe:4b:2c:90:6c:0b:05:51:a3:90:df:7f:f5:4c:24:24:7e:
2d:03:77:86:20:ff:d5:fb:b3:1e:4f:81:31:05:f7:82:eb:9b:
c3:96:d5:58:5e:a4:e0:6d:2b:70:f6:fe:ae:d0:5c:44:23:5b:
6c:41:72:d7:4a:de:30:67:80:ab:4b:6b:c5:13:65:26:66:b4:
ee:3b:5f:38:b0:c3:3e:3b:6d:d4:67:a1:df:90:db:50:8b:a9:
38:3a:02:18
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3JE6SZptT2m5TxUQosa9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNjI2ZmZkODAwZWFmYTMzNmJkZjM0MzE0MWYwM2Y3YzM5
M2MzNjQwHhcNMjQwMTAxMTYzMDE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTczMzA3YjFkYmQzYWM1Y2U4ZTAwMDg0YjhlZjFlZTUxZDQyMmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjON2AO4UI3ub4qhOa1GFiGPhuI6G
LAdEXoUvoZa4BpH2fNoENr74B5vmcCkXJRPomdMZG2QadwuEgycUgIdoD3BFakUO
HR+YL2fAji7FMA4noBsOTkB269KI8xcMfh9wZL4R/juMD3LHoQ7CJYp09ODP82JL
eZ8ZaeV7/DRO39HEFwMvfP6S0np00dFZ6Zs4EWmBSBfP9dF20BCZHU1ELiAwpj9g
9L2mLe1Glu1lcMlzVpTIHzk4EdZU9ayum1jSR+EZ81JtJjW+D4S9mVYzerDfN0n4
PTSrIt2qNq6T7pTFc06Obecp+C2L++qp9FlvvRycpSdULP/ex51KMT9HDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFApzMHsdvTrFzo4ACEuO8e5R1CLpMB8GA1UdIwQY
MBaAFAFib/2ADq+jNr3zQxQfA/fDk8NkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVdKdl9ZQU9yNk0ydmZOREZCOEQ5OE9UdzJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jNGU1YTAtODIxOS00ZmY5LTgyODct
MWY0YmVhMjNlNGM3LzEvQ25Nd2V4MjlPc1hPamdBSVM0N3g3bEhVSXVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9jNGU1YTAtODIxOS00ZmY5LTgyODctMWY0YmVhMjNlNGM3
LzEvQVdKdl9ZQU9yNk0ydmZOREZCOEQ5OE9UdzJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRK3MA0G
CSqGSIb3DQEBCwUAA4IBAQAcBFrPwZqhp4sbxDYTQnQ7ps8094VkW5h4znJRKtv+
myp0JAcILi94XcSfHxOB7fm3hrZvX9qG3fD2le6fMvctgjpmm0fsU18e1KkPC7zm
cZ4oItgxFBTnkz9OGeUbBIzb2OSW+hcsyNg6D5jFX80BQFkGBdXbrmLpwzInCvGK
7wBp4XPYBw5wRTG6mlmG5f73bjMBka63fY7+B0QflR4coGwu/ksskGwLBVGjkN9/
9UwkJH4tA3eGIP/V+7MeT4ExBfeC65vDltVYXqTgbStw9v6u0FxEI1tsQXLXSt4w
Z4CrS2vFE2UmZrTuO184sMM+O23UZ6HfkNtQi6k4OgIY
-----END CERTIFICATE-----
Generated at Sun May 26 12:52:12 2024 by rpki-client on console-ams.rpki-client.org