Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/dQMPF4Ni1dG0bcGLnXxZ3m8TnO8.roa
File: dQMPF4Ni1dG0bcGLnXxZ3m8TnO8.roa (raw, json)
Hash identifier: S2w+WOfKPnxJhD4Fh/eyxClyVh26XSRDSlB1L9Rorf4=
Subject key identifier: 75:03:0F:17:83:62:D5:D1:B4:6D:C1:8B:9D:7C:59:DE:6F:13:9C:EF
Certificate issuer: /CN=90ea6199755e6300f0402c2a08ed437a0a73001e
Certificate serial: 018CC94AD4FD676196F119874C6E94968088
Authority key identifier: 90:EA:61:99:75:5E:63:00:F0:40:2C:2A:08:ED:43:7A:0A:73:00:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kOphmXVeYwDwQCwqCO1DegpzAB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/dQMPF4Ni1dG0bcGLnXxZ3m8TnO8.roa
Signing time: Tue 02 Jan 2024 08:29:33 +0000
ROA not before: Tue 02 Jan 2024 08:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24961
IP address blocks: 109.68.216.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/kOphmXVeYwDwQCwqCO1DegpzAB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/kOphmXVeYwDwQCwqCO1DegpzAB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kOphmXVeYwDwQCwqCO1DegpzAB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Jun 2024 14:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:d4:fd:67:61:96:f1:19:87:4c:6e:94:96:80:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ea6199755e6300f0402c2a08ed437a0a73001e
Validity
Not Before: Jan 2 08:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75030f178362d5d1b46dc18b9d7c59de6f139cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:11:a7:91:63:9a:c2:fb:53:b7:3c:76:78:e3:
61:f0:8c:fd:53:02:83:97:ec:f3:19:65:ec:d4:98:
16:d8:d5:5c:9c:c6:94:05:cc:fb:b2:83:da:71:e1:
4d:96:c5:f0:5d:a1:73:04:87:67:9a:b8:1c:04:f4:
06:45:70:e2:7d:c3:cb:8f:1a:ce:fe:30:e9:5e:5b:
98:eb:41:1d:64:fd:17:c0:3b:a3:cb:87:57:31:ad:
de:26:f4:89:e8:9e:5b:ef:1d:27:3d:c0:06:19:08:
18:45:85:fe:f0:39:a1:08:d2:94:e1:e9:cf:7e:10:
f1:6c:e6:80:dd:08:4b:21:84:9d:91:d9:4b:1d:e7:
93:85:61:03:6e:e5:f3:ef:cd:c9:12:90:cb:1d:d8:
44:e5:e6:06:13:64:08:2b:05:a6:8f:85:c4:48:0d:
74:bd:28:10:31:f8:24:3e:5b:7c:28:34:2a:89:f8:
58:de:b9:62:88:57:6c:ca:67:5c:42:73:59:b6:d9:
c7:84:df:b1:20:ad:cc:6b:8d:d0:4c:59:f5:b8:ff:
0d:7e:a9:c2:03:b3:74:5c:50:44:2d:a3:19:39:0d:
92:a1:e7:96:b0:71:4e:3f:e3:fb:69:a3:23:9b:3a:
12:03:2f:53:13:d2:a7:12:9e:69:72:29:f2:08:4f:
36:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:03:0F:17:83:62:D5:D1:B4:6D:C1:8B:9D:7C:59:DE:6F:13:9C:EF
X509v3 Authority Key Identifier:
keyid:90:EA:61:99:75:5E:63:00:F0:40:2C:2A:08:ED:43:7A:0A:73:00:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kOphmXVeYwDwQCwqCO1DegpzAB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/dQMPF4Ni1dG0bcGLnXxZ3m8TnO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/kOphmXVeYwDwQCwqCO1DegpzAB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.68.216.0/21
Signature Algorithm: sha256WithRSAEncryption
84:0f:c6:59:f1:6a:73:45:d1:12:70:3e:b2:94:3a:09:42:fc:
54:e1:9b:95:3b:22:06:cb:db:1a:ea:e9:40:e2:fb:d3:be:6b:
9e:43:65:dc:07:9f:34:42:97:8d:23:55:6c:26:5e:08:41:bd:
6c:39:e8:2b:89:bb:ba:5b:58:c3:28:8a:87:50:ca:a4:dc:16:
f8:f1:de:23:c2:69:c1:5e:25:93:a7:32:36:fb:ba:ab:3d:b0:
29:94:43:d0:c6:27:db:d1:58:e5:a5:a3:30:96:fb:53:9e:da:
b3:65:d5:28:ec:eb:28:4a:86:f6:24:5a:d9:45:52:15:35:04:
f2:a0:66:bd:c9:2c:e6:fc:5a:72:62:24:87:bb:ad:04:97:44:
b7:c2:37:2e:bc:97:4a:d9:93:70:67:9f:3f:99:58:4f:14:60:
2b:a2:b4:d5:95:e1:0d:9f:86:02:63:a0:9c:cb:fa:d0:9d:b0:
b5:98:7a:14:df:1d:66:21:0b:52:f4:09:6d:ca:61:e6:68:f1:
30:0c:19:5c:d4:70:c6:11:f9:e4:b6:76:4d:9c:0b:69:0b:6a:
d5:5e:4c:10:15:32:c8:5f:15:1d:b3:ad:4b:8e:39:f1:5a:dc:
da:95:6d:fc:cb:6c:e2:b0:21:76:a0:a3:6a:9e:14:6c:1d:20:
ee:ff:21:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJStT9Z2GW8RmHTG6UloCIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZWE2MTk5NzU1ZTYzMDBmMDQwMmMyYTA4ZWQ0MzdhMGE3
MzAwMWUwHhcNMjQwMTAyMDgyOTMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTAzMGYxNzgzNjJkNWQxYjQ2ZGMxOGI5ZDdjNTlkZTZmMTM5Y2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hGnkWOawvtTtzx2eONh8Iz9UwKD
l+zzGWXs1JgW2NVcnMaUBcz7soPaceFNlsXwXaFzBIdnmrgcBPQGRXDifcPLjxrO
/jDpXluY60EdZP0XwDujy4dXMa3eJvSJ6J5b7x0nPcAGGQgYRYX+8DmhCNKU4enP
fhDxbOaA3QhLIYSdkdlLHeeThWEDbuXz783JEpDLHdhE5eYGE2QIKwWmj4XESA10
vSgQMfgkPlt8KDQqifhY3rliiFdsymdcQnNZttnHhN+xIK3Ma43QTFn1uP8NfqnC
A7N0XFBELaMZOQ2SoeeWsHFOP+P7aaMjmzoSAy9TE9KnEp5pcinyCE82VwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHUDDxeDYtXRtG3Bi518Wd5vE5zvMB8GA1UdIwQY
MBaAFJDqYZl1XmMA8EAsKgjtQ3oKcwAeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva09waG1YVmVZd0R3UUN3cUNPMURlZ3B6QUI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi82ZDJhOGYtY2Y5MC00NmZiLTgyNTkt
YzM5ODA4ZDAzYTE4LzEvZFFNUEY0TmkxZEcwYmNHTG5YeFozbThUbk84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi82ZDJhOGYtY2Y5MC00NmZiLTgyNTktYzM5ODA4ZDAzYTE4
LzEva09waG1YVmVZd0R3UUN3cUNPMURlZ3B6QUI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDbUTYMA0G
CSqGSIb3DQEBCwUAA4IBAQCED8ZZ8WpzRdEScD6ylDoJQvxU4ZuVOyIGy9sa6ulA
4vvTvmueQ2XcB580QpeNI1VsJl4IQb1sOegribu6W1jDKIqHUMqk3Bb48d4jwmnB
XiWTpzI2+7qrPbAplEPQxifb0VjlpaMwlvtTntqzZdUo7OsoSob2JFrZRVIVNQTy
oGa9ySzm/FpyYiSHu60El0S3wjcuvJdK2ZNwZ58/mVhPFGArorTVleENn4YCY6Cc
y/rQnbC1mHoU3x1mIQtS9AltymHmaPEwDBlc1HDGEfnktnZNnAtpC2rVXkwQFTLI
XxUds61LjjnxWtzalW38y2zisCF2oKNqnhRsHSDu/yGk
-----END CERTIFICATE-----
Generated at Thu Jun 27 23:17:20 2024 by rpki-client on console-fra.rpki-client.org