Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/hdOjs0IU-jdbvGt-VHfTB2tQaQQ.roa
File: hdOjs0IU-jdbvGt-VHfTB2tQaQQ.roa (raw, json)
Hash identifier: uZdVFOch3Z98N9wE7OLMBt/ccRUU0mndyYmlFeuoNos=
Subject key identifier: 85:D3:A3:B3:42:14:FA:37:5B:BC:6B:7E:54:77:D3:07:6B:50:69:04
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 018E7172613B6FDC8EE2ACCE5562091E9854
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/hdOjs0IU-jdbvGt-VHfTB2tQaQQ.roa
Signing time: Sun 24 Mar 2024 17:11:45 +0000
ROA not before: Sun 24 Mar 2024 17:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 262287
IP address blocks: 62.100.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 17:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:71:72:61:3b:6f:dc:8e:e2:ac:ce:55:62:09:1e:98:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Mar 24 17:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85d3a3b34214fa375bbc6b7e5477d3076b506904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d9:f9:8f:c3:c1:61:74:ac:c5:39:1c:f9:73:
8b:13:87:00:d3:a8:c2:99:d4:c5:08:b3:57:4e:50:
bd:a7:d6:c3:e0:18:c8:aa:d4:77:e0:96:c7:e6:02:
bb:9b:c1:f1:dc:47:ec:11:f6:d9:8b:79:a2:a1:78:
71:a9:a6:b4:87:70:1b:a0:a9:5e:ce:db:33:b7:9b:
88:48:35:8e:22:cd:d2:6f:b4:9e:9f:87:ff:20:a2:
99:87:c0:59:bf:53:9d:77:85:d6:e3:b4:a8:f1:91:
8f:ab:51:bc:7e:e9:52:c9:1d:73:9d:7e:f3:6d:00:
df:1f:0c:8f:24:d8:a2:5e:6b:49:b4:82:2e:6d:78:
57:e2:6c:5e:d3:63:b7:08:2a:4a:98:02:cf:83:c3:
53:d0:11:e7:89:00:af:10:25:82:2e:0b:b4:82:14:
14:be:9c:90:27:71:f6:ba:fe:9b:43:ac:05:72:49:
56:cb:5e:d0:f1:dd:97:86:42:1d:2f:31:4b:a4:65:
82:69:5d:d1:62:71:56:e1:c9:1b:5d:c2:69:59:45:
07:3d:06:3b:d1:6c:08:e9:1f:b7:42:41:93:cc:45:
39:fb:2b:e9:f1:b4:5b:36:a4:e1:6f:f6:08:f7:1e:
ae:55:b2:e0:62:ca:37:8d:52:67:4d:77:de:5d:1f:
89:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D3:A3:B3:42:14:FA:37:5B:BC:6B:7E:54:77:D3:07:6B:50:69:04
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/hdOjs0IU-jdbvGt-VHfTB2tQaQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.100.208.0/24
Signature Algorithm: sha256WithRSAEncryption
61:78:2c:76:8c:52:38:f5:f9:42:b3:de:51:42:a4:5a:ca:dd:
42:b7:c1:2e:20:ef:55:ea:e1:85:f4:b9:b7:d2:d8:7c:4b:75:
48:66:69:18:e1:d6:70:d3:09:0a:a5:5d:20:23:61:4c:d2:19:
fb:df:e9:44:8d:85:59:ea:ce:52:d4:96:63:a3:b1:62:57:96:
de:f4:9a:00:99:97:1a:f6:f5:85:16:c8:25:d2:d5:f7:53:ea:
61:3e:f2:e4:42:18:4f:05:85:29:f6:cf:82:df:4f:a3:32:e7:
53:20:2e:ae:7f:7a:00:e6:af:5c:f8:c3:58:eb:58:4d:6a:95:
4b:12:e9:c8:88:62:32:c4:3b:13:1a:d3:c9:05:c6:a8:30:0c:
8f:ea:03:ca:20:72:da:e5:0b:8b:ed:c6:cb:ff:07:d9:91:66:
7f:37:0f:c3:13:4e:6c:1b:45:26:d0:08:3f:23:63:48:69:b9:
92:37:aa:89:79:4d:47:f8:67:a5:fc:0f:8c:41:51:ec:73:4f:
6c:9a:d4:ed:61:1f:24:cc:6b:01:b5:fb:33:8a:f2:44:0f:a8:
d1:75:f4:a2:06:6b:a6:14:2a:15:ec:b2:07:bd:8b:bd:4b:1b:
b2:b7:08:7b:72:07:29:ea:9b:38:bb:2e:bc:24:b3:65:82:13:
e9:d1:23:c6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY5xcmE7b9yO4qzOVWIJHphUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMDc0MzQ5NmM3ZmYzZWZmYjg3MDYwMTEzOWNhZDlkMmYy
NzFlMTAwHhcNMjQwMzI0MTcxMTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NWQzYTNiMzQyMTRmYTM3NWJiYzZiN2U1NDc3ZDMwNzZiNTA2OTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNn5j8PBYXSsxTkc+XOLE4cA06jC
mdTFCLNXTlC9p9bD4BjIqtR34JbH5gK7m8Hx3EfsEfbZi3mioXhxqaa0h3AboKle
ztszt5uISDWOIs3Sb7Sen4f/IKKZh8BZv1Odd4XW47So8ZGPq1G8fulSyR1znX7z
bQDfHwyPJNiiXmtJtIIubXhX4mxe02O3CCpKmALPg8NT0BHniQCvECWCLgu0ghQU
vpyQJ3H2uv6bQ6wFcklWy17Q8d2XhkIdLzFLpGWCaV3RYnFW4ckbXcJpWUUHPQY7
0WwI6R+3QkGTzEU5+yvp8bRbNqThb/YI9x6uVbLgYso3jVJnTXfeXR+J2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIXTo7NCFPo3W7xrflR30wdrUGkEMB8GA1UdIwQY
MBaAFJ8HQ0lsf/Pv+4cGAROcrZ0vJx4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2Mt
NjM0MTEzNjdkOTBhLzEvaGRPanMwSVUtamRidkd0LVZIZlRCMnRRYVFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2MtNjM0MTEzNjdkOTBh
LzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPmTQMA0G
CSqGSIb3DQEBCwUAA4IBAQBheCx2jFI49flCs95RQqRayt1Ct8EuIO9V6uGF9Lm3
0th8S3VIZmkY4dZw0wkKpV0gI2FM0hn73+lEjYVZ6s5S1JZjo7FiV5be9JoAmZca
9vWFFsgl0tX3U+phPvLkQhhPBYUp9s+C30+jMudTIC6uf3oA5q9c+MNY61hNapVL
EunIiGIyxDsTGtPJBcaoMAyP6gPKIHLa5QuL7cbL/wfZkWZ/Nw/DE05sG0Um0Ag/
I2NIabmSN6qJeU1H+Gel/A+MQVHsc09smtTtYR8kzGsBtfszivJED6jRdfSiBmum
FCoV7LIHvYu9Sxuytwh7cgcp6ps4uy68JLNlghPp0SPG
-----END CERTIFICATE-----
Generated at Thu May 2 01:32:52 2024 by rpki-client on console-fra.rpki-client.org