Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/MNgDj5Gl6rJbEqdHTTu9kvi6k38.roa
File: MNgDj5Gl6rJbEqdHTTu9kvi6k38.roa (raw, json)
Hash identifier: fHJG5ppkxSSAYxzapTzzvuRJP/u/AsccBrHzbiUH36c=
Subject key identifier: 30:D8:03:8F:91:A5:EA:B2:5B:12:A7:47:4D:3B:BD:92:F8:BA:93:7F
Certificate issuer: /CN=5ad1116513c23d87aacbf5b1bbee39981c7631c1
Certificate serial: 018E374754290FA3C2B1932010E141C6CE07
Authority key identifier: 5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/MNgDj5Gl6rJbEqdHTTu9kvi6k38.roa
Signing time: Wed 13 Mar 2024 10:06:45 +0000
ROA not before: Wed 13 Mar 2024 10:06:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57732
IP address blocks: 195.60.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 04:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:37:47:54:29:0f:a3:c2:b1:93:20:10:e1:41:c6:ce:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad1116513c23d87aacbf5b1bbee39981c7631c1
Validity
Not Before: Mar 13 10:06:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=30d8038f91a5eab25b12a7474d3bbd92f8ba937f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:eb:26:60:01:7f:41:93:23:71:4d:16:d9:71:
49:76:c0:fd:5b:23:6f:8b:9d:d3:bb:75:96:33:74:
61:fd:82:c0:fb:82:6d:57:b6:08:22:5d:4b:c8:e3:
f5:42:c9:b5:ba:86:02:ba:a1:93:aa:78:86:28:94:
3a:76:6d:47:9f:bf:aa:d7:78:68:7e:08:dd:86:e6:
79:63:a7:6b:d1:2f:52:85:7d:4d:a6:d4:b1:a1:51:
fc:d3:4b:16:32:f8:3c:4c:1a:99:0a:8a:7c:1d:37:
6f:f8:41:7f:fd:8c:64:0e:25:d8:2e:b3:2a:2b:71:
2a:d4:c4:4d:4b:a7:ba:49:0f:27:07:45:3e:e6:84:
b1:63:d6:d9:aa:bd:ef:03:c9:22:33:87:ad:8e:88:
da:30:82:fd:4c:65:fd:47:ec:cb:04:e8:06:5a:9b:
36:27:00:f7:0e:c1:4a:e7:8f:7f:20:56:60:26:82:
a9:0f:27:f5:45:c9:55:2f:d3:82:35:58:ac:fd:75:
bc:f7:ff:50:a8:f7:c8:b9:74:44:0f:78:6d:34:bf:
ba:c8:8e:21:54:92:e1:ca:41:f0:01:28:67:75:cb:
f3:a8:cc:26:4d:d7:f6:59:20:16:b4:c8:0c:11:d8:
fe:4f:73:6f:36:c4:7e:ed:cf:b2:b9:ac:95:a1:e6:
78:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D8:03:8F:91:A5:EA:B2:5B:12:A7:47:4D:3B:BD:92:F8:BA:93:7F
X509v3 Authority Key Identifier:
keyid:5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/MNgDj5Gl6rJbEqdHTTu9kvi6k38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.60.204.0/22
Signature Algorithm: sha256WithRSAEncryption
df:2c:11:98:0e:50:77:89:79:cc:f2:81:fb:ca:f3:2c:4c:d3:
27:a9:9c:e2:0f:33:f4:7e:fd:e3:48:ad:c6:ec:be:83:e6:d3:
7b:0e:18:34:6d:ef:c9:96:d6:5a:28:38:30:9c:d9:ab:ff:a5:
32:b8:a7:d1:30:a5:ea:d7:be:27:a4:42:a5:9d:7e:28:f9:ed:
d0:24:ef:e8:62:8a:b8:98:12:83:57:49:29:f9:f7:23:ce:26:
1c:89:74:87:a4:dc:58:a2:21:60:fd:01:73:4c:d6:10:07:fc:
4e:14:03:80:cd:57:0a:a0:02:a4:16:af:42:24:19:4b:bb:61:
a8:40:f8:59:68:75:dd:35:3f:a3:a6:41:f6:67:4c:0f:71:8b:
20:49:e6:e6:18:d4:70:54:02:78:a6:a6:af:76:68:8b:05:0e:
e1:26:cf:83:97:44:51:3b:c3:ef:8b:de:51:00:47:78:cd:90:
f7:65:de:b9:fe:69:c8:90:cb:54:2d:6d:f8:21:2e:06:36:4d:
79:d6:57:90:71:5f:af:5e:24:4a:ef:ae:37:9d:3e:f0:1e:31:
d6:dd:22:df:83:ae:69:77:bd:d2:be:8b:42:b1:54:f1:6b:db:
d5:b1:91:5f:4f:20:ef:e9:d6:7d:6b:ee:a7:34:95:03:4c:2f:
d0:4d:06:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY43R1QpD6PCsZMgEOFBxs4HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZDExMTY1MTNjMjNkODdhYWNiZjViMWJiZWUzOTk4MWM3
NjMxYzEwHhcNMjQwMzEzMTAwNjQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMGQ4MDM4ZjkxYTVlYWIyNWIxMmE3NDc0ZDNiYmQ5MmY4YmE5MzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9usmYAF/QZMjcU0W2XFJdsD9WyNv
i53Tu3WWM3Rh/YLA+4JtV7YIIl1LyOP1Qsm1uoYCuqGTqniGKJQ6dm1Hn7+q13ho
fgjdhuZ5Y6dr0S9ShX1NptSxoVH800sWMvg8TBqZCop8HTdv+EF//YxkDiXYLrMq
K3Eq1MRNS6e6SQ8nB0U+5oSxY9bZqr3vA8kiM4etjojaMIL9TGX9R+zLBOgGWps2
JwD3DsFK549/IFZgJoKpDyf1RclVL9OCNVis/XW89/9QqPfIuXRED3htNL+6yI4h
VJLhykHwAShndcvzqMwmTdf2WSAWtMgMEdj+T3NvNsR+7c+yuayVoeZ4YQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDDYA4+RpeqyWxKnR007vZL4upN/MB8GA1UdIwQY
MBaAFFrREWUTwj2Hqsv1sbvuOZgcdjHBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3RFUlpSUENQWWVxeV9XeHUtNDVtQngyTWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iMWNjOGQtODgwOC00YzFlLTgxZjAt
MjNhYzk3OWQ0MWFkLzEvTU5nRGo1R2w2ckpiRXFkSFRUdTlrdmk2azM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9iMWNjOGQtODgwOC00YzFlLTgxZjAtMjNhYzk3OWQ0MWFk
LzEvV3RFUlpSUENQWWVxeV9XeHUtNDVtQngyTWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwzzMMA0G
CSqGSIb3DQEBCwUAA4IBAQDfLBGYDlB3iXnM8oH7yvMsTNMnqZziDzP0fv3jSK3G
7L6D5tN7Dhg0be/JltZaKDgwnNmr/6UyuKfRMKXq174npEKlnX4o+e3QJO/oYoq4
mBKDV0kp+fcjziYciXSHpNxYoiFg/QFzTNYQB/xOFAOAzVcKoAKkFq9CJBlLu2Go
QPhZaHXdNT+jpkH2Z0wPcYsgSebmGNRwVAJ4pqavdmiLBQ7hJs+Dl0RRO8Pvi95R
AEd4zZD3Zd65/mnIkMtULW34IS4GNk151leQcV+vXiRK7643nT7wHjHW3SLfg65p
d73SvotCsVTxa9vVsZFfTyDv6dZ9a+6nNJUDTC/QTQZB
-----END CERTIFICATE-----
Generated at Sat Jun 15 15:22:33 2024 by rpki-client on console-ams.rpki-client.org