Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Dgqm1o15JKzt_p_4UlVXPrAGAk4.roa
File: Dgqm1o15JKzt_p_4UlVXPrAGAk4.roa (raw, json)
Hash identifier: NSAQ4iiio+HdkrSdHsBX6XxlTDx8gO70Y6DP9+uCQJM=
Subject key identifier: 0E:0A:A6:D6:8D:79:24:AC:ED:FE:9F:F8:52:55:57:3E:B0:06:02:4E
Certificate issuer: /CN=62beaa57c67aeb5bafd99793ab4846850a796c28
Certificate serial: 018F532EA4D89BE935D9398594EF1FFBE8D6
Authority key identifier: 62:BE:AA:57:C6:7A:EB:5B:AF:D9:97:93:AB:48:46:85:0A:79:6C:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Dgqm1o15JKzt_p_4UlVXPrAGAk4.roa
Signing time: Tue 07 May 2024 13:11:56 +0000
ROA not before: Tue 07 May 2024 13:11:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52209
IP address blocks: 91.239.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:53:2e:a4:d8:9b:e9:35:d9:39:85:94:ef:1f:fb:e8:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62beaa57c67aeb5bafd99793ab4846850a796c28
Validity
Not Before: May 7 13:11:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e0aa6d68d7924acedfe9ff85255573eb006024e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fc:46:57:33:ab:02:1d:d0:67:7e:2b:d4:31:
77:cf:bb:f4:7a:0a:02:5f:1b:13:b0:f6:5b:e4:27:
44:f5:19:aa:88:76:d4:4c:03:d4:db:e2:45:96:ad:
cd:2b:d9:c6:e6:7f:eb:c9:9d:6c:5f:1e:c2:e6:96:
55:d8:2b:14:55:57:21:b1:f7:b1:64:1e:8a:eb:e7:
59:f4:2a:3a:4d:a3:98:63:eb:a3:13:e3:76:b7:c5:
dc:c1:26:be:70:17:e9:f3:e3:be:c8:27:fd:dd:ed:
30:fb:a0:35:da:bd:52:15:26:13:cb:39:4d:0f:a2:
d6:05:d3:49:f2:5b:4b:ee:de:f3:11:f8:c1:92:8f:
1f:0a:ca:1a:14:63:a6:1c:03:e8:d5:86:51:ca:69:
46:af:b5:4c:70:3f:e8:df:ba:ae:65:dc:e8:f7:ec:
f2:78:a1:7b:60:94:20:4e:b7:a9:01:dd:00:25:31:
48:9e:8f:50:68:db:24:1e:8c:b3:0c:be:9c:1f:15:
19:fe:50:de:9e:dc:ee:f1:77:98:ea:5d:8c:07:30:
a4:90:08:ec:43:46:71:e5:88:06:39:2a:d5:15:1a:
46:58:0f:97:cc:13:c6:73:7d:6a:9c:b1:a8:9f:1e:
3d:0b:37:e2:fe:51:c4:c0:68:01:6d:64:14:34:a2:
12:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0A:A6:D6:8D:79:24:AC:ED:FE:9F:F8:52:55:57:3E:B0:06:02:4E
X509v3 Authority Key Identifier:
keyid:62:BE:AA:57:C6:7A:EB:5B:AF:D9:97:93:AB:48:46:85:0A:79:6C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Dgqm1o15JKzt_p_4UlVXPrAGAk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.189.0/24
Signature Algorithm: sha256WithRSAEncryption
37:42:c1:69:a7:0f:e2:38:5d:32:82:d7:2b:d1:01:ec:ac:f1:
09:ae:9f:84:3a:c2:e6:ca:45:f5:e4:97:02:59:cd:27:9b:5a:
39:fb:0c:57:67:fc:2b:d6:05:3d:e6:03:b2:61:61:0b:d8:98:
41:14:45:13:ac:f5:c3:3b:ff:b4:f3:85:20:56:3b:7b:f0:da:
9e:b2:24:b4:98:bb:f6:6d:0d:6d:6a:11:cc:ec:e9:c0:4b:81:
09:5a:56:1f:5a:06:af:8e:07:e8:18:ac:1c:df:de:96:d3:a9:
6c:57:bb:ba:a6:43:99:85:e4:06:b8:01:0b:e2:1f:7b:49:35:
1f:17:66:c7:dd:98:65:71:ca:f8:1c:75:60:6e:cd:52:99:27:
3c:65:20:35:c5:5b:fa:76:a6:23:1f:c7:85:b0:48:0f:c1:52:
31:4a:b4:d8:8f:31:5e:76:e6:18:50:c7:b4:c3:a8:6d:32:d2:
69:15:29:cc:db:e6:bf:18:d1:f6:6b:e5:c9:93:62:28:1b:6a:
f5:99:7e:00:b0:2e:3b:16:45:ae:32:9d:9f:53:bc:8f:e5:55:
9f:2b:ec:e0:66:d9:21:50:76:76:3a:65:5e:7d:d7:c0:73:d0:
6d:ce:14:0c:4b:1b:88:34:d9:d9:cf:f2:3f:94:51:b1:44:a1:
85:33:92:87
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY9TLqTYm+k12TmFlO8f++jWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYmVhYTU3YzY3YWViNWJhZmQ5OTc5M2FiNDg0Njg1MGE3
OTZjMjgwHhcNMjQwNTA3MTMxMTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTBhYTZkNjhkNzkyNGFjZWRmZTlmZjg1MjU1NTczZWIwMDYwMjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPxGVzOrAh3QZ34r1DF3z7v0egoC
XxsTsPZb5CdE9RmqiHbUTAPU2+JFlq3NK9nG5n/ryZ1sXx7C5pZV2CsUVVchsfex
ZB6K6+dZ9Co6TaOYY+ujE+N2t8XcwSa+cBfp8+O+yCf93e0w+6A12r1SFSYTyzlN
D6LWBdNJ8ltL7t7zEfjBko8fCsoaFGOmHAPo1YZRymlGr7VMcD/o37quZdzo9+zy
eKF7YJQgTrepAd0AJTFIno9QaNskHoyzDL6cHxUZ/lDentzu8XeY6l2MBzCkkAjs
Q0Zx5YgGOSrVFRpGWA+XzBPGc31qnLGonx49Czfi/lHEwGgBbWQUNKISIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA4KptaNeSSs7f6f+FJVVz6wBgJOMB8GA1UdIwQY
MBaAFGK+qlfGeutbr9mXk6tIRoUKeWwoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXI2cVY4WjY2MXV2MlplVHEwaEdoUXA1YkNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8yMjU4MWUtZmU4Yy00ZmI4LTk1ODUt
OTg4MGYwNGRiOTRhLzEvRGdxbTFvMTVKS3p0X3BfNFVsVlhQckFHQWs0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8yMjU4MWUtZmU4Yy00ZmI4LTk1ODUtOTg4MGYwNGRiOTRh
LzEvWXI2cVY4WjY2MXV2MlplVHEwaEdoUXA1YkNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW++9MA0G
CSqGSIb3DQEBCwUAA4IBAQA3QsFppw/iOF0ygtcr0QHsrPEJrp+EOsLmykX15JcC
Wc0nm1o5+wxXZ/wr1gU95gOyYWEL2JhBFEUTrPXDO/+084UgVjt78NqesiS0mLv2
bQ1tahHM7OnAS4EJWlYfWgavjgfoGKwc396W06lsV7u6pkOZheQGuAEL4h97STUf
F2bH3Zhlccr4HHVgbs1SmSc8ZSA1xVv6dqYjH8eFsEgPwVIxSrTYjzFeduYYUMe0
w6htMtJpFSnM2+a/GNH2a+XJk2IoG2r1mX4AsC47FkWuMp2fU7yP5VWfK+zgZtkh
UHZ2OmVefdfAc9BtzhQMSxuINNnZz/I/lFGxRKGFM5KH
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:37:31 2024 by rpki-client on console-ams.rpki-client.org