Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/DUPFl5KOVoZ0Px1YTZjQhU3GS74.roa
File: DUPFl5KOVoZ0Px1YTZjQhU3GS74.roa (raw, json)
Hash identifier: RdQAIUqTLZ56Z5/n3970qBezVFVmizondDtwNW6hgk0=
Subject key identifier: 0D:43:C5:97:92:8E:56:86:74:3F:1D:58:4D:98:D0:85:4D:C6:4B:BE
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 018CC56EDE68F1F38EEB257B7F3ED4B33A78
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/DUPFl5KOVoZ0Px1YTZjQhU3GS74.roa
Signing time: Mon 01 Jan 2024 14:30:26 +0000
ROA not before: Mon 01 Jan 2024 14:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137409
IP address blocks: 109.105.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:de:68:f1:f3:8e:eb:25:7b:7f:3e:d4:b3:3a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Jan 1 14:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d43c597928e5686743f1d584d98d0854dc64bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f4:30:d0:e1:96:8b:83:ed:07:4c:8c:25:38:
77:c4:a9:b3:8a:6b:df:16:54:c8:d6:89:20:ef:ba:
fe:e0:de:1d:1c:42:93:02:66:1b:61:da:f6:15:96:
5f:29:bf:1a:8a:1c:f0:88:b1:df:14:83:82:00:c2:
be:b0:ac:66:50:cc:b9:4f:ea:0b:2a:65:82:99:45:
ac:f9:93:53:2b:fb:3c:8c:5d:14:bb:03:4c:54:45:
75:1c:90:22:0f:f3:a2:d6:f2:bd:97:18:9f:88:33:
86:dc:55:b0:d9:79:a9:30:96:7a:23:e3:15:0b:63:
b1:0d:43:39:97:39:83:3f:d5:b4:28:0e:42:fb:4c:
88:77:59:04:53:7f:55:e9:1a:e6:36:81:05:da:d0:
c8:a1:44:00:6f:eb:16:5b:97:d9:6a:06:da:69:e1:
f8:fb:c8:89:b2:62:19:10:67:5f:93:90:0b:d4:c4:
ba:56:1b:0a:20:2b:8c:58:fa:cc:44:0c:84:a6:75:
b6:04:9c:94:2b:cc:27:fb:54:c5:8e:64:fb:79:c8:
e3:f2:d3:8e:e9:53:4b:5d:0a:be:b6:46:22:d0:a4:
07:81:4b:e0:d9:90:01:b8:37:79:01:cd:95:a1:12:
a0:6f:d6:9f:d2:1e:fa:8c:7d:9c:ed:94:25:a8:32:
bb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:43:C5:97:92:8E:56:86:74:3F:1D:58:4D:98:D0:85:4D:C6:4B:BE
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/DUPFl5KOVoZ0Px1YTZjQhU3GS74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.105.196.0/24
Signature Algorithm: sha256WithRSAEncryption
12:ba:3e:33:60:e4:15:52:f2:52:85:81:31:1d:7f:fd:0c:77:
48:32:b1:4b:b9:6d:ce:d6:09:a0:11:64:62:62:b3:02:e3:d5:
6f:f5:80:8d:cc:b4:da:47:37:58:c5:fa:55:a0:30:b8:f9:f6:
92:b2:33:27:5c:c0:cf:bd:95:06:17:d9:c8:da:75:d5:ec:ac:
17:81:2f:e8:5f:bb:e4:42:60:d6:ab:4d:68:87:1f:07:91:15:
50:9c:86:5d:5d:19:17:d6:2d:00:7b:c3:32:52:58:d1:bf:92:
91:df:10:95:a7:78:b8:b0:d7:97:3e:f4:45:0b:7c:1a:48:9e:
ad:34:93:83:21:08:9b:1e:41:38:10:15:e6:49:9e:e5:02:ed:
3f:73:0e:ad:fd:de:3e:4f:a9:ba:39:c2:25:54:94:f0:8f:6f:
58:11:d2:ad:f3:05:15:7f:fd:f3:99:c5:6c:2f:ea:47:7f:88:
16:8e:d5:1b:80:1e:8a:de:52:bb:77:87:8d:00:7f:9b:67:a2:
b4:de:97:4d:a7:b4:ea:ce:ba:53:fa:02:a6:e5:34:fc:b9:da:
51:c1:b4:04:e8:93:8a:68:87:b4:bc:cd:f1:63:27:74:1a:0f:
69:d6:ab:bb:d0:79:d6:f3:bb:65:64:7a:0a:9b:38:91:2c:3b:
34:bf:5e:b6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbt5o8fOO6yV7fz7Uszp4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm
NjljZGEwHhcNMjQwMTAxMTQzMDI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDQzYzU5NzkyOGU1Njg2NzQzZjFkNTg0ZDk4ZDA4NTRkYzY0YmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/Qw0OGWi4PtB0yMJTh3xKmzimvf
FlTI1okg77r+4N4dHEKTAmYbYdr2FZZfKb8aihzwiLHfFIOCAMK+sKxmUMy5T+oL
KmWCmUWs+ZNTK/s8jF0UuwNMVEV1HJAiD/Oi1vK9lxifiDOG3FWw2XmpMJZ6I+MV
C2OxDUM5lzmDP9W0KA5C+0yId1kEU39V6RrmNoEF2tDIoUQAb+sWW5fZagbaaeH4
+8iJsmIZEGdfk5AL1MS6VhsKICuMWPrMRAyEpnW2BJyUK8wn+1TFjmT7ecjj8tOO
6VNLXQq+tkYi0KQHgUvg2ZABuDd5Ac2VoRKgb9af0h76jH2c7ZQlqDK7CQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA1DxZeSjlaGdD8dWE2Y0IVNxku+MB8GA1UdIwQY
MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt
ZGQyOTRjMzc4ZjZjLzEvRFVQRmw1S09Wb1owUHgxWVRaalFoVTNHUzc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj
LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWnEMA0G
CSqGSIb3DQEBCwUAA4IBAQASuj4zYOQVUvJShYExHX/9DHdIMrFLuW3O1gmgEWRi
YrMC49Vv9YCNzLTaRzdYxfpVoDC4+faSsjMnXMDPvZUGF9nI2nXV7KwXgS/oX7vk
QmDWq01ohx8HkRVQnIZdXRkX1i0Ae8MyUljRv5KR3xCVp3i4sNeXPvRFC3waSJ6t
NJODIQibHkE4EBXmSZ7lAu0/cw6t/d4+T6m6OcIlVJTwj29YEdKt8wUVf/3zmcVs
L+pHf4gWjtUbgB6K3lK7d4eNAH+bZ6K03pdNp7TqzrpT+gKm5TT8udpRwbQE6JOK
aIe0vM3xYyd0Gg9p1qu70HnW87tlZHoKmziRLDs0v162
-----END CERTIFICATE-----
Generated at Sun May 19 04:59:31 2024 by rpki-client on console-fra.rpki-client.org