Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/mJuJL0HYDOCWRezggzc2YK-AtiE.roa
File: mJuJL0HYDOCWRezggzc2YK-AtiE.roa (raw, json)
Hash identifier: q3e5daI24vL6ph0Wc3MqKhecKQlQW1I74atRWiuHkio=
Subject key identifier: 98:9B:89:2F:41:D8:0C:E0:96:45:EC:E0:83:37:36:60:AF:80:B6:21
Certificate issuer: /CN=9436da805aeda0a3a50ffc66251dcbfb42f0f35e
Certificate serial: 018CC94D7AA3FE3914BCA7C519F6626D735B
Authority key identifier: 94:36:DA:80:5A:ED:A0:A3:A5:0F:FC:66:25:1D:CB:FB:42:F0:F3:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/mJuJL0HYDOCWRezggzc2YK-AtiE.roa
Signing time: Tue 02 Jan 2024 08:32:27 +0000
ROA not before: Tue 02 Jan 2024 08:32:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48602
IP address blocks: 185.140.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.mft
rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 Nov 2024 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:7a:a3:fe:39:14:bc:a7:c5:19:f6:62:6d:73:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9436da805aeda0a3a50ffc66251dcbfb42f0f35e
Validity
Not Before: Jan 2 08:32:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=989b892f41d80ce09645ece083373660af80b621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:af:ae:97:14:14:0d:14:f8:a6:f8:b0:10:5a:
bd:89:96:59:07:cf:46:58:d3:a7:35:79:f8:ad:7a:
dd:9a:ac:44:70:08:44:a0:fd:4c:04:fd:67:06:be:
43:72:d9:07:58:46:04:a7:fe:e4:36:5a:26:e9:f0:
55:b2:41:29:e6:f7:b3:ce:00:ea:ea:03:42:4c:fa:
26:3c:23:8a:07:00:22:df:29:01:4d:cd:8e:1e:ff:
63:3c:94:14:76:b7:39:d6:0e:04:c1:3b:14:46:ba:
9c:9b:ac:65:5c:7e:be:d5:40:67:14:b5:26:7e:92:
2c:e3:1f:6a:a6:be:27:6b:48:97:88:5c:f8:ee:09:
97:86:52:d1:30:60:39:3f:ec:40:e1:3e:37:3e:9f:
e8:1b:94:c5:7e:58:43:a3:86:9a:ea:46:c2:f2:9d:
03:5f:97:f1:52:39:55:f8:78:4a:e6:66:08:a4:cc:
84:2a:60:08:19:99:7a:48:0c:b1:26:07:cc:df:c0:
52:40:d8:70:01:70:7a:60:d1:6d:0a:99:48:0a:f5:
05:ee:37:11:59:46:c1:f7:15:cf:c8:1b:54:bf:08:
cb:6b:a8:d2:27:ea:94:d1:43:91:4d:8d:6e:d6:61:
76:14:98:03:4a:fb:1b:2d:b7:93:68:9b:31:9e:b3:
64:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9B:89:2F:41:D8:0C:E0:96:45:EC:E0:83:37:36:60:AF:80:B6:21
X509v3 Authority Key Identifier:
keyid:94:36:DA:80:5A:ED:A0:A3:A5:0F:FC:66:25:1D:CB:FB:42:F0:F3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDbagFrtoKOlD_xmJR3L-0Lw814.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/mJuJL0HYDOCWRezggzc2YK-AtiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e6250-5420-4318-9284-2c2771e8e177/1/lDbagFrtoKOlD_xmJR3L-0Lw814.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.244.0/22
Signature Algorithm: sha256WithRSAEncryption
cd:ae:e9:c0:fd:ce:dd:61:a1:9a:c8:60:89:d1:9e:d2:10:2f:
9b:b7:3c:74:1a:e6:e3:bf:f0:f2:c3:54:32:8d:0a:f9:50:ac:
a2:52:42:05:15:5f:95:79:70:58:dc:ee:bd:00:52:2a:b9:5f:
9a:d7:31:e3:f9:9e:27:5f:94:4e:02:9a:82:1c:ac:83:e8:43:
43:7b:e6:28:5f:54:e6:1d:d2:5c:66:ec:37:e9:33:67:83:bd:
15:54:e1:91:5b:58:69:28:4e:4a:b0:37:8c:be:c2:ad:70:eb:
19:de:e3:f0:13:62:08:6d:cb:32:f9:7f:e9:2e:53:94:a4:70:
e5:4c:d7:fb:e6:a0:36:2b:32:92:35:c6:66:95:17:3b:d2:f1:
9d:72:76:3f:af:8a:bd:68:2b:6e:3e:d9:9b:cf:94:98:4d:e7:
8f:e0:37:2d:2d:f4:2c:37:5f:63:76:a2:14:1e:df:51:40:df:
97:e4:07:04:48:0d:58:48:a2:55:20:b0:41:7c:53:20:e0:3f:
55:62:6b:1d:cb:61:6f:d4:db:9d:de:82:4f:e5:8e:d2:14:1a:
a5:a0:91:37:4e:bb:24:2d:6d:63:49:87:59:cc:b3:2c:16:1a:
87:68:e4:85:3b:6c:92:ba:6b:89:ca:f5:9b:af:44:42:4e:4a:
d4:1e:8a:05
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJTXqj/jkUvKfFGfZibXNbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MzZkYTgwNWFlZGEwYTNhNTBmZmM2NjI1MWRjYmZiNDJm
MGYzNWUwHhcNMjQwMTAyMDgzMjI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODliODkyZjQxZDgwY2UwOTY0NWVjZTA4MzM3MzY2MGFmODBiNjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6+ulxQUDRT4pviwEFq9iZZZB89G
WNOnNXn4rXrdmqxEcAhEoP1MBP1nBr5DctkHWEYEp/7kNlom6fBVskEp5vezzgDq
6gNCTPomPCOKBwAi3ykBTc2OHv9jPJQUdrc51g4EwTsURrqcm6xlXH6+1UBnFLUm
fpIs4x9qpr4na0iXiFz47gmXhlLRMGA5P+xA4T43Pp/oG5TFflhDo4aa6kbC8p0D
X5fxUjlV+HhK5mYIpMyEKmAIGZl6SAyxJgfM38BSQNhwAXB6YNFtCplICvUF7jcR
WUbB9xXPyBtUvwjLa6jSJ+qU0UORTY1u1mF2FJgDSvsbLbeTaJsxnrNkwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJibiS9B2AzglkXs4IM3NmCvgLYhMB8GA1UdIwQY
MBaAFJQ22oBa7aCjpQ/8ZiUdy/tC8PNeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbERiYWdGcnRvS09sRF94bUpSM0wtMEx3ODE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wZTYyNTAtNTQyMC00MzE4LTkyODQt
MmMyNzcxZThlMTc3LzEvbUp1SkwwSFlET0NXUmV6Z2d6YzJZSy1BdGlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8wZTYyNTAtNTQyMC00MzE4LTkyODQtMmMyNzcxZThlMTc3
LzEvbERiYWdGcnRvS09sRF94bUpSM0wtMEx3ODE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYz0MA0G
CSqGSIb3DQEBCwUAA4IBAQDNrunA/c7dYaGayGCJ0Z7SEC+btzx0Gubjv/Dyw1Qy
jQr5UKyiUkIFFV+VeXBY3O69AFIquV+a1zHj+Z4nX5ROApqCHKyD6ENDe+YoX1Tm
HdJcZuw36TNng70VVOGRW1hpKE5KsDeMvsKtcOsZ3uPwE2IIbcsy+X/pLlOUpHDl
TNf75qA2KzKSNcZmlRc70vGdcnY/r4q9aCtuPtmbz5SYTeeP4DctLfQsN19jdqIU
Ht9RQN+X5AcESA1YSKJVILBBfFMg4D9VYmsdy2Fv1Nud3oJP5Y7SFBqloJE3Trsk
LW1jSYdZzLMsFhqHaOSFO2ySumuJyvWbr0RCTkrUHooF
-----END CERTIFICATE-----
Generated at Fri Nov 15 19:43:10 2024 by rpki-client on console-fra.rpki-client.org