Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/mpoHhPowZKzbLZge-EfaNJ9_9AE.roa
File: mpoHhPowZKzbLZge-EfaNJ9_9AE.roa (raw, json)
Hash identifier: ekEfBALtsNjzj6knWl3YPrScJiiebHllVzcKQtl4X2c=
Subject key identifier: 9A:9A:07:84:FA:30:64:AC:DB:2D:98:1E:F8:47:DA:34:9F:7F:F4:01
Certificate issuer: /CN=745dba56cf1ffc2cfc1d05f4fa833117efd7c78a
Certificate serial: 018D9D5619A0CFCB8F7709C2DEC9B020834D
Authority key identifier: 74:5D:BA:56:CF:1F:FC:2C:FC:1D:05:F4:FA:83:31:17:EF:D7:C7:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/mpoHhPowZKzbLZge-EfaNJ9_9AE.roa
Signing time: Mon 12 Feb 2024 12:41:22 +0000
ROA not before: Mon 12 Feb 2024 12:41:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 91.242.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9d:56:19:a0:cf:cb:8f:77:09:c2:de:c9:b0:20:83:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745dba56cf1ffc2cfc1d05f4fa833117efd7c78a
Validity
Not Before: Feb 12 12:41:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a9a0784fa3064acdb2d981ef847da349f7ff401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cd:1b:d8:79:93:6b:a2:be:47:f5:26:3d:0d:
98:93:21:cc:27:52:76:c8:8d:ac:86:8f:9a:bf:58:
77:7c:76:d3:23:9a:ca:03:82:3a:50:97:fb:1d:6f:
17:2f:6d:1f:d9:f5:f9:fa:19:1a:02:e2:64:c4:e4:
a2:bc:5b:9b:48:c7:a6:00:2e:ae:0b:d3:a0:2c:e3:
27:7e:60:07:54:7b:d5:ed:57:d4:ab:3d:fb:16:a9:
11:6f:ad:81:6d:f4:7d:4a:34:e8:53:03:af:02:a4:
a2:c7:cd:98:f7:1b:a6:46:e9:52:4a:35:d7:db:67:
b9:dc:98:61:c1:ba:38:a9:29:fb:3d:15:53:24:b1:
53:f8:3b:98:d5:dd:de:ca:c5:c2:da:d1:b4:0c:01:
cc:49:9f:33:8c:e4:a2:40:98:89:bf:20:30:0d:bb:
a5:58:09:2c:7e:6e:be:f6:44:22:78:40:33:c5:1f:
58:50:44:ad:be:ad:66:ae:ff:d5:1b:75:28:be:c3:
f5:25:ee:bd:0e:c0:c7:e2:11:ec:64:99:4c:5d:0a:
74:46:fb:85:13:e2:88:7d:67:0e:7d:1e:01:9e:66:
9c:e2:55:dc:5f:4e:03:4c:52:e0:4e:96:ad:18:da:
a5:92:4f:b9:1b:c8:55:a2:d6:cf:e8:12:f8:53:94:
ae:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9A:07:84:FA:30:64:AC:DB:2D:98:1E:F8:47:DA:34:9F:7F:F4:01
X509v3 Authority Key Identifier:
keyid:74:5D:BA:56:CF:1F:FC:2C:FC:1D:05:F4:FA:83:31:17:EF:D7:C7:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/mpoHhPowZKzbLZge-EfaNJ9_9AE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/dF26Vs8f_Cz8HQX0-oMxF-_Xx4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.222.0/24
Signature Algorithm: sha256WithRSAEncryption
95:64:93:0a:60:8d:7c:f3:db:34:e0:1b:90:fa:29:27:1a:e9:
63:ba:be:3d:50:73:ef:e9:e5:be:45:5c:bd:6d:49:69:8a:5e:
d1:ac:ca:d2:0c:c6:e9:6b:46:d9:79:84:87:ac:35:ed:90:03:
b4:85:37:91:4a:06:36:4d:07:ba:df:27:9b:73:c4:ac:de:40:
77:7f:f8:aa:9c:cc:98:96:f1:44:91:75:9e:ce:66:4c:b8:cc:
d4:a0:c7:57:9e:ef:3f:bc:05:6b:19:a6:93:5c:38:fe:f3:6a:
51:55:7f:e8:de:01:6f:2a:fe:c9:f8:49:f6:80:77:2b:80:b1:
35:0f:3d:44:89:17:31:46:54:2c:ee:45:a0:ed:ec:f2:bb:f5:
fb:5c:f4:f9:91:30:99:ad:2a:69:6c:a6:6e:6c:9e:7a:d7:eb:
c8:42:ba:90:3f:0b:f3:d5:dc:69:8e:60:92:8a:86:f0:b6:74:
ae:4f:a6:7a:92:55:d7:5a:db:ac:00:a3:c1:00:46:d2:7f:4c:
2b:46:df:2c:6d:dd:0b:8e:45:69:2a:bd:88:18:ec:1d:4c:25:
80:fd:01:e1:25:3a:37:ed:cc:06:f6:5f:c8:ce:bb:b1:4f:5c:
8e:f3:31:0c:c0:be:bd:61:10:ab:54:98:5b:48:bc:cc:ae:82:
b8:f8:e1:f1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY2dVhmgz8uPdwnC3smwIINNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NWRiYTU2Y2YxZmZjMmNmYzFkMDVmNGZhODMzMTE3ZWZk
N2M3OGEwHhcNMjQwMjEyMTI0MTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTlhMDc4NGZhMzA2NGFjZGIyZDk4MWVmODQ3ZGEzNDlmN2ZmNDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM0b2HmTa6K+R/UmPQ2YkyHMJ1J2
yI2sho+av1h3fHbTI5rKA4I6UJf7HW8XL20f2fX5+hkaAuJkxOSivFubSMemAC6u
C9OgLOMnfmAHVHvV7VfUqz37FqkRb62BbfR9SjToUwOvAqSix82Y9xumRulSSjXX
22e53Jhhwbo4qSn7PRVTJLFT+DuY1d3eysXC2tG0DAHMSZ8zjOSiQJiJvyAwDbul
WAksfm6+9kQieEAzxR9YUEStvq1mrv/VG3UovsP1Je69DsDH4hHsZJlMXQp0RvuF
E+KIfWcOfR4Bnmac4lXcX04DTFLgTpatGNqlkk+5G8hVotbP6BL4U5Su+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJqaB4T6MGSs2y2YHvhH2jSff/QBMB8GA1UdIwQY
MBaAFHRdulbPH/ws/B0F9PqDMRfv18eKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEYyNlZzOGZfQ3o4SFFYMC1vTXhGLV9YeDRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82NWQzYTQtNWNjYy00MDM3LWE4Zjgt
MGEzMjcxMTY2NWFkLzEvbXBvSGhQb3daS3piTFpnZS1FZmFOSjlfOUFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi82NWQzYTQtNWNjYy00MDM3LWE4ZjgtMGEzMjcxMTY2NWFk
LzEvZEYyNlZzOGZfQ3o4SFFYMC1vTXhGLV9YeDRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/LeMA0G
CSqGSIb3DQEBCwUAA4IBAQCVZJMKYI1889s04BuQ+iknGuljur49UHPv6eW+RVy9
bUlpil7RrMrSDMbpa0bZeYSHrDXtkAO0hTeRSgY2TQe63yebc8Ss3kB3f/iqnMyY
lvFEkXWezmZMuMzUoMdXnu8/vAVrGaaTXDj+82pRVX/o3gFvKv7J+En2gHcrgLE1
Dz1EiRcxRlQs7kWg7ezyu/X7XPT5kTCZrSppbKZubJ561+vIQrqQPwvz1dxpjmCS
iobwtnSuT6Z6klXXWtusAKPBAEbSf0wrRt8sbd0LjkVpKr2IGOwdTCWA/QHhJTo3
7cwG9l/IzruxT1yO8zEMwL69YRCrVJhbSLzMroK4+OHx
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:44:20 2024 by rpki-client on console-fra.rpki-client.org