Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/x46BQuaCOQyXFbZ5JzHzSzNNa0o.roa
File: x46BQuaCOQyXFbZ5JzHzSzNNa0o.roa (raw, json)
Hash identifier: eXfsWZHzEE4sArVIyzVjJxQTIoSxP04DGBk9m64b+TI=
Subject key identifier: C7:8E:81:42:E6:82:39:0C:97:15:B6:79:27:31:F3:4B:33:4D:6B:4A
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 018E868FA7A7AB458ABB4053B89FBEEFA9FD
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/x46BQuaCOQyXFbZ5JzHzSzNNa0o.roa
Signing time: Thu 28 Mar 2024 19:35:45 +0000
ROA not before: Thu 28 Mar 2024 19:35:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55081
IP address blocks: 62.100.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:86:8f:a7:a7:ab:45:8a:bb:40:53:b8:9f:be:ef:a9:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Mar 28 19:35:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c78e8142e682390c9715b6792731f34b334d6b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2b:5c:ba:56:0e:bf:f1:b0:18:67:af:41:55:
2c:21:1b:74:aa:08:82:2a:1d:e5:e1:8d:2b:71:60:
76:84:65:2e:4e:f3:fe:39:18:53:d6:57:cc:ab:dd:
c3:84:47:f3:97:34:c9:e6:a4:74:22:02:d4:6f:e5:
a9:05:a5:c7:dd:e4:89:f6:15:7b:f0:52:ed:9e:04:
f0:74:f2:fb:5d:84:be:5d:1e:30:cf:57:fa:f5:6e:
be:47:07:ee:21:d4:0a:e5:49:1d:83:7e:eb:cd:77:
0b:64:42:f0:44:96:fb:4e:6b:12:5d:f4:39:98:49:
eb:9e:ee:33:49:60:4e:06:14:36:6c:cf:2c:b7:68:
90:68:0f:69:5c:3b:be:58:fe:47:6a:79:b9:1d:63:
ad:a4:67:8d:8f:4c:92:e8:f1:ec:01:af:ac:2f:00:
a5:1c:c3:ef:ce:2d:f6:36:a9:00:66:45:34:63:06:
2b:fa:9a:98:d9:2b:6e:30:3e:e6:70:ac:40:6c:6b:
8f:40:36:4c:84:f0:e5:79:1c:de:c2:6f:26:b0:01:
b6:00:58:4f:de:4c:65:6f:e6:c9:9d:63:a7:99:1d:
7b:d0:d3:4d:f2:28:9d:19:57:cb:7a:01:52:66:55:
9a:58:f2:01:2d:d1:e4:e5:79:82:bd:9a:b6:c1:d9:
a3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:8E:81:42:E6:82:39:0C:97:15:B6:79:27:31:F3:4B:33:4D:6B:4A
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/x46BQuaCOQyXFbZ5JzHzSzNNa0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.100.211.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:2e:49:63:78:f9:23:36:f7:c9:22:2b:e8:bb:84:9d:90:f8:
97:7d:ab:cf:78:e5:2c:d6:d4:11:9e:9c:9d:3a:73:1c:80:03:
1a:9e:7b:e9:13:d1:ab:bd:19:78:21:66:96:6a:a9:37:b7:88:
44:da:7d:de:bd:f1:54:8d:04:c7:e1:e0:27:6e:94:c6:e3:8e:
16:f8:d9:c0:cc:f4:7e:ab:31:02:0c:73:eb:01:96:0a:a5:3f:
52:5d:a8:b8:b0:c2:56:98:9c:d4:de:79:e8:54:3c:1b:db:aa:
c9:dd:95:8b:cb:d1:25:cd:0e:22:83:6a:a2:2f:6a:7e:1c:a6:
0d:0a:a9:0d:18:79:3c:e8:80:6b:f6:19:f0:85:1e:7a:3d:cf:
13:e1:e6:61:c2:34:7d:02:8d:d9:63:5e:1d:bc:f3:87:21:ee:
a8:6c:3a:86:01:08:42:12:5b:ba:0c:2a:ba:bd:88:02:64:81:
10:3d:9c:53:e1:15:7f:8e:7f:95:04:3c:70:4a:db:7b:4e:2e:
ee:71:81:a1:4a:a2:8b:1f:ec:5a:35:ad:b5:13:cc:2a:65:fb:
e6:7c:59:80:67:ae:28:9d:91:3d:b3:52:8c:05:c6:94:e7:d9:
4f:15:ff:aa:98:37:fb:60:8d:32:c7:74:5b:29:32:82:d0:26:
16:1e:73:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY6Gj6enq0WKu0BTuJ++76n9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMDc0MzQ5NmM3ZmYzZWZmYjg3MDYwMTEzOWNhZDlkMmYy
NzFlMTAwHhcNMjQwMzI4MTkzNTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzhlODE0MmU2ODIzOTBjOTcxNWI2NzkyNzMxZjM0YjMzNGQ2YjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkytculYOv/GwGGevQVUsIRt0qgiC
Kh3l4Y0rcWB2hGUuTvP+ORhT1lfMq93DhEfzlzTJ5qR0IgLUb+WpBaXH3eSJ9hV7
8FLtngTwdPL7XYS+XR4wz1f69W6+RwfuIdQK5Ukdg37rzXcLZELwRJb7TmsSXfQ5
mEnrnu4zSWBOBhQ2bM8st2iQaA9pXDu+WP5Hanm5HWOtpGeNj0yS6PHsAa+sLwCl
HMPvzi32NqkAZkU0YwYr+pqY2StuMD7mcKxAbGuPQDZMhPDleRzewm8msAG2AFhP
3kxlb+bJnWOnmR170NNN8iidGVfLegFSZlWaWPIBLdHk5XmCvZq2wdmjMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMeOgULmgjkMlxW2eScx80szTWtKMB8GA1UdIwQY
MBaAFJ8HQ0lsf/Pv+4cGAROcrZ0vJx4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2Mt
NjM0MTEzNjdkOTBhLzEveDQ2QlF1YUNPUXlYRmJaNUp6SHpTek5OYTBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2MtNjM0MTEzNjdkOTBh
LzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPmTTMA0G
CSqGSIb3DQEBCwUAA4IBAQBtLkljePkjNvfJIivou4SdkPiXfavPeOUs1tQRnpyd
OnMcgAMannvpE9GrvRl4IWaWaqk3t4hE2n3evfFUjQTH4eAnbpTG444W+NnAzPR+
qzECDHPrAZYKpT9SXai4sMJWmJzU3nnoVDwb26rJ3ZWLy9ElzQ4ig2qiL2p+HKYN
CqkNGHk86IBr9hnwhR56Pc8T4eZhwjR9Ao3ZY14dvPOHIe6obDqGAQhCElu6DCq6
vYgCZIEQPZxT4RV/jn+VBDxwStt7Ti7ucYGhSqKLH+xaNa21E8wqZfvmfFmAZ64o
nZE9s1KMBcaU59lPFf+qmDf7YI0yx3RbKTKC0CYWHnMt
-----END CERTIFICATE-----
Generated at Fri May 3 01:08:02 2024 by rpki-client on console-ams.rpki-client.org