Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/MKp5wxptpR0jJY0hTpFdY1ioOBU.roa
File: MKp5wxptpR0jJY0hTpFdY1ioOBU.roa (raw, json)
Hash identifier: 9OUXIgnVMmGWdUFeLmTLMwINc/5biMcv0tYgped8Pv4=
Subject key identifier: 30:AA:79:C3:1A:6D:A5:1D:23:25:8D:21:4E:91:5D:63:58:A8:38:15
Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47
Certificate serial: 018CC6B911211F063683CEB980DB6EAC105C
Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/MKp5wxptpR0jJY0hTpFdY1ioOBU.roa
Signing time: Mon 01 Jan 2024 20:31:06 +0000
ROA not before: Mon 01 Jan 2024 20:31:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209835
IP address blocks: 158.172.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 12:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:11:21:1f:06:36:83:ce:b9:80:db:6e:ac:10:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47
Validity
Not Before: Jan 1 20:31:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30aa79c31a6da51d23258d214e915d6358a83815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b5:87:bd:e1:87:57:43:62:f1:be:53:bc:21:
fc:77:a5:8d:1a:a5:b3:f6:d3:4e:21:29:94:9f:40:
a6:41:e4:6b:b2:bc:69:82:33:31:94:07:55:f0:3a:
01:8d:cb:49:e7:6f:f6:8e:b9:a9:44:3a:7a:3d:00:
4e:39:4a:4e:a4:35:ac:b0:3d:91:2d:6b:6d:7e:3f:
bb:b2:f5:38:0c:47:17:a3:ef:b5:09:e6:f7:7d:43:
a7:58:e8:00:30:47:c7:4c:d4:d0:b2:fd:50:00:d8:
91:39:45:11:3d:1d:12:37:84:14:8e:c1:b2:d1:37:
d6:3d:a3:5e:86:d2:cf:9e:b2:c6:b1:e1:e1:d6:5a:
b3:94:e1:69:62:b4:77:b5:6a:3f:49:26:7b:cd:51:
7e:f4:67:43:15:56:f8:9c:13:61:40:49:18:40:0c:
13:cc:12:89:e9:57:f0:a4:3f:87:4c:93:ef:9d:86:
06:9f:1c:72:c9:b1:f4:aa:f8:23:f3:80:e7:dd:bb:
e7:4b:83:18:95:2d:03:71:14:e9:a9:ec:61:59:91:
33:f7:f4:6f:39:3b:5c:9d:f9:8f:10:52:e8:22:61:
89:31:b1:00:7c:ad:0c:d9:b4:c0:4a:03:32:b4:62:
d2:4a:7f:bd:5e:2a:c7:f8:81:f1:71:32:fe:66:69:
15:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AA:79:C3:1A:6D:A5:1D:23:25:8D:21:4E:91:5D:63:58:A8:38:15
X509v3 Authority Key Identifier:
keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/MKp5wxptpR0jJY0hTpFdY1ioOBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.172.143.0/24
Signature Algorithm: sha256WithRSAEncryption
44:cd:ab:38:42:78:d4:24:11:a9:7f:35:3a:fe:50:18:23:f5:
d4:14:cb:2f:81:7c:79:a6:b9:0c:b4:ab:75:df:05:43:8a:77:
00:50:6c:5a:2a:8f:29:85:a3:db:83:5c:9b:13:d8:7e:2c:51:
f1:df:2c:6e:d8:12:cb:37:e7:87:cc:fc:96:52:e8:bd:59:dd:
53:4c:ff:70:93:21:75:29:00:4b:b1:45:c6:22:60:44:56:08:
31:9f:d2:28:3a:49:35:27:16:1b:e6:a7:63:63:97:1e:57:1c:
30:79:55:61:75:28:14:5c:f7:2f:a9:79:d4:8c:28:de:86:ba:
63:3c:e9:55:f7:ed:99:81:9b:a1:49:e6:4e:da:88:05:0b:84:
e1:d4:14:f4:d8:93:3e:c7:40:0a:f6:1e:6c:c1:22:ad:a2:1a:
37:01:33:29:ac:a1:7f:28:83:93:a6:73:34:bb:78:6e:26:93:
06:06:30:d1:be:d3:f3:5c:a4:0c:48:e3:0c:ca:8a:e8:38:4d:
1f:6b:09:f6:fb:80:7b:d5:f8:ab:74:72:cf:c9:6d:c4:47:64:
6f:1e:80:e0:4c:8e:3f:d2:2b:8a:ac:77:7b:71:0c:e9:4e:5b:
dc:ff:9a:1e:81:5b:86:14:f2:e9:09:13:23:9b:0d:dc:e4:55:
f6:1c:f8:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGuREhHwY2g865gNturBBcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NTNjMDYyOTBhMzcxOTk0ZDc1NzczMTg2ODVmNWJjNGE1
MzhkNDcwHhcNMjQwMTAxMjAzMTA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMGFhNzljMzFhNmRhNTFkMjMyNThkMjE0ZTkxNWQ2MzU4YTgzODE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrWHveGHV0Ni8b5TvCH8d6WNGqWz
9tNOISmUn0CmQeRrsrxpgjMxlAdV8DoBjctJ52/2jrmpRDp6PQBOOUpOpDWssD2R
LWttfj+7svU4DEcXo++1Ceb3fUOnWOgAMEfHTNTQsv1QANiROUURPR0SN4QUjsGy
0TfWPaNehtLPnrLGseHh1lqzlOFpYrR3tWo/SSZ7zVF+9GdDFVb4nBNhQEkYQAwT
zBKJ6VfwpD+HTJPvnYYGnxxyybH0qvgj84Dn3bvnS4MYlS0DcRTpqexhWZEz9/Rv
OTtcnfmPEFLoImGJMbEAfK0M2bTASgMytGLSSn+9XirH+IHxcTL+ZmkViQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDCqecMabaUdIyWNIU6RXWNYqDgVMB8GA1UdIwQY
MBaAFFdTwGKQo3GZTXV3MYaF9bxKU41HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2It
MWVkMTA5NTRiZDk2LzEvTUtwNXd4cHRwUjBqSlkwaFRwRmRZMWlvT0JVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2ItMWVkMTA5NTRiZDk2
LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnqyPMA0G
CSqGSIb3DQEBCwUAA4IBAQBEzas4QnjUJBGpfzU6/lAYI/XUFMsvgXx5prkMtKt1
3wVDincAUGxaKo8phaPbg1ybE9h+LFHx3yxu2BLLN+eHzPyWUui9Wd1TTP9wkyF1
KQBLsUXGImBEVggxn9IoOkk1JxYb5qdjY5ceVxwweVVhdSgUXPcvqXnUjCjehrpj
POlV9+2ZgZuhSeZO2ogFC4Th1BT02JM+x0AK9h5swSKtoho3ATMprKF/KIOTpnM0
u3huJpMGBjDRvtPzXKQMSOMMyoroOE0fawn2+4B71firdHLPyW3ER2RvHoDgTI4/
0iuKrHd7cQzpTlvc/5oegVuGFPLpCRMjmw3c5FX2HPiq
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:32:37 2024 by rpki-client on console-fra.rpki-client.org