Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/MwDNe3rLHRg6OUdlloenNnJbsVE.roa
File: MwDNe3rLHRg6OUdlloenNnJbsVE.roa (raw, json)
Hash identifier: 9T5PGPICoFYtLQC7R4giuRcMSiGcWgrQD96f0oOsoVo=
Subject key identifier: 33:00:CD:7B:7A:CB:1D:18:3A:39:47:65:96:87:A7:36:72:5B:B1:51
Certificate issuer: /CN=a3513d288dabde7dee069bdb636573ce9c3ecb60
Certificate serial: 018CCA96DFB170975D73FB6E3B2E3F3E0C10
Authority key identifier: A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/MwDNe3rLHRg6OUdlloenNnJbsVE.roa
Signing time: Tue 02 Jan 2024 14:32:14 +0000
ROA not before: Tue 02 Jan 2024 14:32:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397423
IP address blocks: 88.214.59.0/24 maxlen: 24
185.249.196.0/24 maxlen: 24
194.156.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:96:df:b1:70:97:5d:73:fb:6e:3b:2e:3f:3e:0c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3513d288dabde7dee069bdb636573ce9c3ecb60
Validity
Not Before: Jan 2 14:32:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3300cd7b7acb1d183a3947659687a736725bb151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:19:ac:7c:27:81:c7:9d:8f:c2:32:ee:6b:74:
a9:67:f4:10:e5:cb:45:ee:3b:4c:b1:f3:7e:0e:88:
af:54:03:7d:c1:e9:05:8e:54:da:9c:bf:98:d9:dd:
3c:34:f8:31:f9:d1:6f:cf:30:b7:fb:55:59:ce:9c:
f1:1f:95:e5:de:7e:4d:f5:ae:1c:48:2d:fd:e4:31:
41:bc:f5:43:60:f9:b4:01:e3:5d:4c:b6:36:9b:84:
33:9c:e5:03:9e:56:07:f3:46:77:18:81:5a:6e:6c:
08:d1:2e:3e:64:3d:e6:28:ad:0d:88:99:58:2c:01:
1d:32:54:ae:4d:d9:1c:33:a2:cb:7d:80:ed:cb:16:
72:60:cc:09:44:af:a2:f0:93:95:ef:e2:80:8d:10:
cc:68:a4:4c:75:5e:a2:81:66:a9:d1:7f:66:e4:90:
ae:3b:32:47:45:7c:14:d5:40:b3:cc:e9:ef:aa:f7:
58:ec:92:73:60:03:84:6f:e0:02:33:fd:a2:72:3b:
37:9a:0c:72:82:e5:6c:dd:41:27:34:20:e2:eb:b4:
7f:85:27:70:cc:a5:34:54:8b:e7:b2:a9:3d:62:85:
cc:bf:af:a7:5e:1d:79:04:5a:8c:cc:76:5a:fc:4c:
16:28:dd:ba:30:51:f7:99:b8:4a:77:fa:22:68:5b:
66:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:00:CD:7B:7A:CB:1D:18:3A:39:47:65:96:87:A7:36:72:5B:B1:51
X509v3 Authority Key Identifier:
keyid:A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/MwDNe3rLHRg6OUdlloenNnJbsVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.59.0/24
185.249.196.0/24
194.156.89.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:02:2b:b3:c9:a2:5b:17:34:ed:58:56:bf:85:19:0f:e5:4e:
c1:8d:48:a4:87:9d:4f:df:b9:1a:f6:9b:7d:d8:07:fa:f4:7c:
75:07:52:0f:29:81:b2:eb:a0:39:fa:78:86:30:cd:b0:16:e1:
fa:0d:c4:86:99:52:9d:79:6f:f7:04:d8:4c:33:b8:ed:9a:5c:
49:a6:fb:52:7f:4a:71:fc:43:71:0d:94:05:12:dd:5d:60:23:
4c:00:ff:33:09:f1:44:c1:23:24:bc:9d:4b:3a:cc:a6:4a:e1:
f7:d0:d3:00:36:b5:ce:27:4e:29:0b:77:31:ae:44:31:55:5a:
64:b3:e1:6b:79:fd:e8:4d:bd:8e:fc:74:95:19:b8:6b:ff:d6:
d3:ff:79:4b:41:88:cc:5d:78:ef:b9:36:a7:47:7c:30:6e:02:
07:7a:6e:31:7e:cc:ea:b4:a7:e4:1b:36:1e:59:af:bc:9e:83:
ce:bf:20:e9:c1:f4:85:99:9c:7d:ab:76:be:ba:41:cb:c6:5e:
c0:eb:34:f7:e9:8b:25:f6:e3:9f:0f:66:d4:16:de:56:d3:84:
e0:34:d5:8a:98:b9:bb:9d:4c:cb:bf:67:96:7b:e1:c5:ec:8f:
a0:4d:da:bd:12:a3:bf:e9:69:51:17:34:35:32:53:ac:23:a9:
7a:07:9c:a1
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzKlt+xcJddc/tuOy4/PgwQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNTEzZDI4OGRhYmRlN2RlZTA2OWJkYjYzNjU3M2NlOWMz
ZWNiNjAwHhcNMjQwMTAyMTQzMjE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzAwY2Q3YjdhY2IxZDE4M2EzOTQ3NjU5Njg3YTczNjcyNWJiMTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBmsfCeBx52PwjLua3SpZ/QQ5ctF
7jtMsfN+DoivVAN9wekFjlTanL+Y2d08NPgx+dFvzzC3+1VZzpzxH5Xl3n5N9a4c
SC395DFBvPVDYPm0AeNdTLY2m4QznOUDnlYH80Z3GIFabmwI0S4+ZD3mKK0NiJlY
LAEdMlSuTdkcM6LLfYDtyxZyYMwJRK+i8JOV7+KAjRDMaKRMdV6igWap0X9m5JCu
OzJHRXwU1UCzzOnvqvdY7JJzYAOEb+ACM/2icjs3mgxyguVs3UEnNCDi67R/hSdw
zKU0VIvnsqk9YoXMv6+nXh15BFqMzHZa/EwWKN26MFH3mbhKd/oiaFtmHwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDMAzXt6yx0YOjlHZZaHpzZyW7FRMB8GA1UdIwQY
MBaAFKNRPSiNq9597gab22Nlc86cPstgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzFFOUtJMnIzbjN1QnB2YlkyVnp6cHcteTJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83OTIxMTMtZTEzYy00M2VlLTg0ZDct
ZTBkN2RkNWUyZTZmLzEvTXdETmUzckxIUmc2T1VkbGxvZW5Obkpic1ZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS83OTIxMTMtZTEzYy00M2VlLTg0ZDctZTBkN2RkNWUyZTZm
LzEvbzFFOUtJMnIzbjN1QnB2YlkyVnp6cHcteTJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWNY7AwQA
ufnEAwQAwpxZMA0GCSqGSIb3DQEBCwUAA4IBAQCOAiuzyaJbFzTtWFa/hRkP5U7B
jUikh51P37ka9pt92Af69Hx1B1IPKYGy66A5+niGMM2wFuH6DcSGmVKdeW/3BNhM
M7jtmlxJpvtSf0px/ENxDZQFEt1dYCNMAP8zCfFEwSMkvJ1LOsymSuH30NMANrXO
J04pC3cxrkQxVVpks+Fref3oTb2O/HSVGbhr/9bT/3lLQYjMXXjvuTanR3wwbgIH
em4xfszqtKfkGzYeWa+8noPOvyDpwfSFmZx9q3a+ukHLxl7A6zT36Ysl9uOfD2bU
Ft5W04TgNNWKmLm7nUzLv2eWe+HF7I+gTdq9EqO/6WlRFzQ1MlOsI6l6B5yh
-----END CERTIFICATE-----
Generated at Sat May 4 04:46:43 2024 by rpki-client on console-ams.rpki-client.org