Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/MvIi3tv5UQL-lumr2vl08Fg7XMM.roa
File: MvIi3tv5UQL-lumr2vl08Fg7XMM.roa (raw, json)
Hash identifier: U0i5Y5G0rdkLJR7dbWdu2KjZXsAqVKo0nendc3MID84=
Subject key identifier: 32:F2:22:DE:DB:F9:51:02:FE:96:E9:AB:DA:F9:74:F0:58:3B:5C:C3
Certificate issuer: /CN=87ae0af282dd4e9bc1b82194aed3b19693d87298
Certificate serial: 018CC5DC4A7B0B623D7D80A0C0F16AA0F7F4
Authority key identifier: 87:AE:0A:F2:82:DD:4E:9B:C1:B8:21:94:AE:D3:B1:96:93:D8:72:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h64K8oLdTpvBuCGUrtOxlpPYcpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/MvIi3tv5UQL-lumr2vl08Fg7XMM.roa
Signing time: Mon 01 Jan 2024 16:29:57 +0000
ROA not before: Mon 01 Jan 2024 16:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 78.108.124.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/h64K8oLdTpvBuCGUrtOxlpPYcpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/h64K8oLdTpvBuCGUrtOxlpPYcpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/h64K8oLdTpvBuCGUrtOxlpPYcpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 13:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:4a:7b:0b:62:3d:7d:80:a0:c0:f1:6a:a0:f7:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87ae0af282dd4e9bc1b82194aed3b19693d87298
Validity
Not Before: Jan 1 16:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32f222dedbf95102fe96e9abdaf974f0583b5cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:75:17:8a:69:05:56:58:07:33:9b:a6:51:b1:
58:f0:9d:4c:f2:0c:f6:01:8b:67:15:09:82:13:41:
e2:b7:0e:5e:0b:a6:dd:f5:44:2b:33:3a:4b:07:cd:
43:4d:7f:33:cb:b0:de:92:01:6c:60:ed:16:bd:55:
8c:82:bb:f2:03:35:30:32:0f:13:a4:83:c9:b2:99:
40:24:ae:a0:cc:74:b5:ef:67:16:bf:7a:9a:6c:81:
0c:ee:8d:df:6d:80:b8:e9:7b:df:a7:73:e6:28:0b:
94:31:f7:f6:58:8f:c5:e4:02:dc:84:8a:6b:49:5d:
66:92:8b:7a:b3:13:30:e0:2b:36:9f:c9:e5:41:fc:
8d:32:67:1b:f4:60:f0:cb:6d:ce:60:bc:25:c9:a6:
fe:d2:32:2a:bb:ce:0b:c7:8e:e4:7a:f9:5b:1a:2a:
e1:30:b8:83:a2:c8:b7:6d:15:08:ea:0e:18:79:7a:
53:fe:4b:1f:7a:ec:af:70:19:e9:8b:db:0a:86:ed:
9b:47:5c:cc:db:c7:9e:53:50:c0:9c:b3:1b:a3:87:
b8:dd:a3:70:fe:13:01:0d:ce:47:a2:6a:3b:9e:5a:
e0:5a:6e:2a:1a:21:ad:6d:48:0c:a4:7f:b9:f8:5c:
61:e2:05:5a:9f:a0:82:d9:b7:2a:f6:4a:49:55:fd:
e0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F2:22:DE:DB:F9:51:02:FE:96:E9:AB:DA:F9:74:F0:58:3B:5C:C3
X509v3 Authority Key Identifier:
keyid:87:AE:0A:F2:82:DD:4E:9B:C1:B8:21:94:AE:D3:B1:96:93:D8:72:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h64K8oLdTpvBuCGUrtOxlpPYcpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/MvIi3tv5UQL-lumr2vl08Fg7XMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/h64K8oLdTpvBuCGUrtOxlpPYcpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.124.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:cb:17:88:97:fe:ab:12:d9:76:ff:17:2e:5f:f4:d4:6a:85:
d3:f2:2c:2f:40:df:53:f6:7d:6b:11:c0:22:6f:0b:2d:c5:bc:
65:8b:b7:fa:df:56:54:69:9a:e9:47:8e:b1:d7:6c:7b:4c:db:
33:c3:8b:e1:e4:5c:ac:6e:d9:3f:4a:9b:ba:84:91:64:27:2d:
20:45:45:e8:6f:06:1b:69:23:b5:d5:98:2b:ee:76:c9:0d:b1:
27:e4:be:e0:a8:3e:24:1b:81:8d:7d:cf:da:2e:c1:ea:0b:0b:
fa:9f:eb:5b:4c:8c:96:c8:47:20:49:31:08:be:7a:13:5e:04:
d6:2a:9d:be:b3:aa:19:60:19:c7:b1:1b:67:55:1f:b7:54:b4:
36:29:17:90:4a:f2:28:6c:8c:11:91:62:32:ed:fe:d7:83:ac:
0e:8b:0d:dc:8c:31:1d:64:37:fd:ab:60:89:d9:98:8d:fb:cc:
ae:0e:c3:c7:a7:11:a9:97:d7:a3:dc:83:24:29:dd:b3:74:42:
f1:3e:35:db:79:78:ab:30:67:3d:44:33:f0:50:1c:0d:c4:83:
e2:c7:63:42:0f:76:b5:e8:c0:b2:7a:b5:63:10:9c:dd:6b:7d:
ca:85:4d:6f:ba:a8:3d:17:0e:80:ee:41:d0:12:01:bd:b6:41:
ac:c8:1d:b9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3Ep7C2I9fYCgwPFqoPf0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3YWUwYWYyODJkZDRlOWJjMWI4MjE5NGFlZDNiMTk2OTNk
ODcyOTgwHhcNMjQwMTAxMTYyOTU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmYyMjJkZWRiZjk1MTAyZmU5NmU5YWJkYWY5NzRmMDU4M2I1Y2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXUXimkFVlgHM5umUbFY8J1M8gz2
AYtnFQmCE0Hitw5eC6bd9UQrMzpLB81DTX8zy7DekgFsYO0WvVWMgrvyAzUwMg8T
pIPJsplAJK6gzHS172cWv3qabIEM7o3fbYC46Xvfp3PmKAuUMff2WI/F5ALchIpr
SV1mkot6sxMw4Cs2n8nlQfyNMmcb9GDwy23OYLwlyab+0jIqu84Lx47kevlbGirh
MLiDosi3bRUI6g4YeXpT/ksfeuyvcBnpi9sKhu2bR1zM28eeU1DAnLMbo4e43aNw
/hMBDc5Homo7nlrgWm4qGiGtbUgMpH+5+Fxh4gVan6CC2bcq9kpJVf3gqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDLyIt7b+VEC/pbpq9r5dPBYO1zDMB8GA1UdIwQY
MBaAFIeuCvKC3U6bwbghlK7TsZaT2HKYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDY0SzhvTGRUcHZCdUNHVXJ0T3hscFBZY3BnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS81Y2ZjNDctMjIxMC00NzM5LWE5NjQt
Y2VmMDEzNjJjNGE4LzEvTXZJaTN0djVVUUwtbHVtcjJ2bDA4Rmc3WE1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS81Y2ZjNDctMjIxMC00NzM5LWE5NjQtY2VmMDEzNjJjNGE4
LzEvaDY0SzhvTGRUcHZCdUNHVXJ0T3hscFBZY3BnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTmx8MA0G
CSqGSIb3DQEBCwUAA4IBAQBbyxeIl/6rEtl2/xcuX/TUaoXT8iwvQN9T9n1rEcAi
bwstxbxli7f631ZUaZrpR46x12x7TNszw4vh5Fysbtk/Spu6hJFkJy0gRUXobwYb
aSO11Zgr7nbJDbEn5L7gqD4kG4GNfc/aLsHqCwv6n+tbTIyWyEcgSTEIvnoTXgTW
Kp2+s6oZYBnHsRtnVR+3VLQ2KReQSvIobIwRkWIy7f7Xg6wOiw3cjDEdZDf9q2CJ
2ZiN+8yuDsPHpxGpl9ej3IMkKd2zdELxPjXbeXirMGc9RDPwUBwNxIPix2NCD3a1
6MCyerVjEJzda33KhU1vuqg9Fw6A7kHQEgG9tkGsyB25
-----END CERTIFICATE-----
Generated at Thu May 2 21:26:47 2024 by rpki-client on console-ams.rpki-client.org