Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/dmLiwEpvfrY6Z9i4_KinR-Aoou0.roa
File: dmLiwEpvfrY6Z9i4_KinR-Aoou0.roa (raw, json)
Hash identifier: a1S2GLZwjBXR8sLHZd3qDQmTj/qfDCoAF4+fLZwqhZc=
Subject key identifier: 76:62:E2:C0:4A:6F:7E:B6:3A:67:D8:B8:FC:A8:A7:47:E0:28:A2:ED
Certificate issuer: /CN=0759f6ac173f75ed9e585ec7d872a5865cef2835
Certificate serial: 018FAA0802825B34CB020F618BA397160F39
Authority key identifier: 07:59:F6:AC:17:3F:75:ED:9E:58:5E:C7:D8:72:A5:86:5C:EF:28:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1n2rBc_de2eWF7H2HKlhlzvKDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/dmLiwEpvfrY6Z9i4_KinR-Aoou0.roa
Signing time: Fri 24 May 2024 09:56:42 +0000
ROA not before: Fri 24 May 2024 09:56:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62353
IP address blocks: 185.22.12.0/22 maxlen: 24
185.22.12.0/23 maxlen: 24
185.22.14.0/23 maxlen: 24
185.81.8.0/22 maxlen: 24
185.81.8.0/23 maxlen: 24
185.81.8.0/24 maxlen: 24
185.81.10.0/23 maxlen: 24
185.81.11.0/24 maxlen: 24
213.159.16.0/21 maxlen: 24
213.159.16.0/22 maxlen: 24
213.159.20.0/22 maxlen: 24
2a00:5d60::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1n2rBc_de2eWF7H2HKlhlzvKDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:aa:08:02:82:5b:34:cb:02:0f:61:8b:a3:97:16:0f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0759f6ac173f75ed9e585ec7d872a5865cef2835
Validity
Not Before: May 24 09:56:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7662e2c04a6f7eb63a67d8b8fca8a747e028a2ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:be:39:78:3c:79:37:cf:5b:e8:1b:54:4b:bb:
c7:44:2e:4f:a0:ab:59:ad:04:d6:11:37:2c:92:b8:
ac:6f:cb:89:a1:53:14:16:43:23:0e:e0:26:6d:72:
fd:e4:cf:eb:42:08:56:17:9b:d1:d8:98:be:98:74:
d9:79:9e:1d:3b:2b:cc:b4:1f:68:f4:17:31:81:48:
6d:4d:f3:e6:b8:ca:0e:50:00:0f:14:ca:4f:3f:c4:
b4:c0:d6:8c:b3:62:4b:4c:95:51:84:15:5d:38:3c:
25:06:64:e3:71:75:79:de:39:1d:69:66:79:78:e6:
14:39:69:9a:ac:1c:81:e1:08:f1:c9:0c:e8:52:9d:
17:ea:8e:81:29:6d:6e:2c:f2:bc:83:8e:97:73:f6:
0a:bd:ee:e6:2d:0e:8e:43:dd:60:74:c3:be:2c:42:
ac:a0:bc:b5:d8:7c:e7:3d:70:9a:98:bd:4d:e0:8d:
77:fc:6a:85:28:5e:bc:ac:78:cd:c9:51:3e:1a:ff:
26:28:67:4b:32:e0:f2:14:cf:f9:cc:65:b4:e2:91:
ed:76:07:34:69:f0:03:dd:1b:11:77:be:62:6f:f3:
d6:77:10:85:c1:ac:49:f7:60:76:2e:20:55:d8:93:
8e:46:f7:a1:64:2a:06:13:1c:d5:16:f8:98:1d:35:
c9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:62:E2:C0:4A:6F:7E:B6:3A:67:D8:B8:FC:A8:A7:47:E0:28:A2:ED
X509v3 Authority Key Identifier:
keyid:07:59:F6:AC:17:3F:75:ED:9E:58:5E:C7:D8:72:A5:86:5C:EF:28:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1n2rBc_de2eWF7H2HKlhlzvKDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/dmLiwEpvfrY6Z9i4_KinR-Aoou0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.12.0/22
185.81.8.0/22
213.159.16.0/21
IPv6:
2a00:5d60::/32
Signature Algorithm: sha256WithRSAEncryption
24:19:8e:60:8c:47:7c:b7:f4:54:24:b3:8a:de:c8:f6:96:39:
61:7c:3d:4b:ed:6e:5c:ec:66:7a:81:b9:16:6a:4c:b5:e6:73:
ca:2d:f0:02:d2:a0:51:65:0e:19:bf:c2:44:bb:db:d3:d6:57:
99:e4:64:bb:52:54:e2:38:67:d0:56:70:7a:76:47:68:77:48:
f7:70:9a:7a:37:ae:85:7a:ee:34:05:f4:73:85:a1:07:8d:2a:
4f:f4:8e:1c:8d:92:07:6c:0e:ca:58:2d:5a:26:71:90:7e:b1:
d2:93:0c:c0:52:35:0b:6a:31:8a:d2:3d:1f:d6:6c:81:e9:a1:
c0:39:0e:91:63:46:a0:a6:b0:a4:5a:42:53:3d:9f:e2:67:3f:
5e:32:57:df:75:d1:73:58:89:1e:b2:64:9e:1d:ac:97:e3:2b:
29:a8:1e:13:44:5e:98:4c:15:d5:dc:bc:6b:d3:42:c8:1a:66:
44:93:d1:55:63:c4:ec:7a:44:89:58:42:d4:cc:8a:af:e0:21:
78:d8:d6:c4:7b:d7:a0:2d:a9:7c:48:92:c1:d5:72:1a:65:a5:
2b:14:f6:74:54:d2:17:b7:df:59:cb:1a:cd:7a:d5:e7:44:e2:
d1:28:2b:fa:51:b9:4d:16:f0:cf:11:cd:b7:99:f8:97:f6:71:
42:e4:ea:df
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAY+qCAKCWzTLAg9hi6OXFg85MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NTlmNmFjMTczZjc1ZWQ5ZTU4NWVjN2Q4NzJhNTg2NWNl
ZjI4MzUwHhcNMjQwNTI0MDk1NjQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjYyZTJjMDRhNmY3ZWI2M2E2N2Q4YjhmY2E4YTc0N2UwMjhhMmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt745eDx5N89b6BtUS7vHRC5PoKtZ
rQTWETcskrisb8uJoVMUFkMjDuAmbXL95M/rQghWF5vR2Ji+mHTZeZ4dOyvMtB9o
9BcxgUhtTfPmuMoOUAAPFMpPP8S0wNaMs2JLTJVRhBVdODwlBmTjcXV53jkdaWZ5
eOYUOWmarByB4QjxyQzoUp0X6o6BKW1uLPK8g46Xc/YKve7mLQ6OQ91gdMO+LEKs
oLy12HznPXCamL1N4I13/GqFKF68rHjNyVE+Gv8mKGdLMuDyFM/5zGW04pHtdgc0
afAD3RsRd75ib/PWdxCFwaxJ92B2LiBV2JOORvehZCoGExzVFviYHTXJbwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFHZi4sBKb362OmfYuPyop0fgKKLtMB8GA1UdIwQY
MBaAFAdZ9qwXP3Xtnlhex9hypYZc7yg1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjFuMnJCY19kZTJlV0Y3SDJIS2xobHp2S0RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9kMmNkMWMtMDRiNS00NGQwLTgxZDUt
N2JlM2JkYTA1OTI3LzEvZG1MaXdFcHZmclk2WjlpNF9LaW5SLUFvb3UwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9kMmNkMWMtMDRiNS00NGQwLTgxZDUtN2JlM2JkYTA1OTI3
LzEvQjFuMnJCY19kZTJlV0Y3SDJIS2xobHp2S0RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuRYMAwQC
uVEIAwQD1Z8QMA0EAgACMAcDBQAqAF1gMA0GCSqGSIb3DQEBCwUAA4IBAQAkGY5g
jEd8t/RUJLOK3sj2ljlhfD1L7W5c7GZ6gbkWaky15nPKLfAC0qBRZQ4Zv8JEu9vT
1leZ5GS7UlTiOGfQVnB6dkdod0j3cJp6N66Feu40BfRzhaEHjSpP9I4cjZIHbA7K
WC1aJnGQfrHSkwzAUjULajGK0j0f1myB6aHAOQ6RY0agprCkWkJTPZ/iZz9eMlff
ddFzWIkesmSeHayX4yspqB4TRF6YTBXV3Lxr00LIGmZEk9FVY8TsekSJWELUzIqv
4CF42NbEe9egLal8SJLB1XIaZaUrFPZ0VNIXt99ZyxrNetXnROLRKCv6UblNFvDP
Ec23mfiX9nFC5Orf
-----END CERTIFICATE-----
Generated at Sun Jun 23 01:33:48 2024 by rpki-client on console-ams.rpki-client.org