Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/DkMqqzGLdAXpp82IBTfnfQkklNk.roa
File: DkMqqzGLdAXpp82IBTfnfQkklNk.roa (raw, json)
Hash identifier: Do+TvIuhd1goj/rklwc/6oUNhZiNNZZQSKhLk/HdyNY=
Subject key identifier: 0E:43:2A:AB:31:8B:74:05:E9:A7:CD:88:05:37:E7:7D:09:24:94:D9
Certificate issuer: /CN=927af7d407f045dbea80773265b04ce574d0b7e3
Certificate serial: 018CC26D7341F5F453DF9D7FF8D7FD765BA0
Authority key identifier: 92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/DkMqqzGLdAXpp82IBTfnfQkklNk.roa
Signing time: Mon 01 Jan 2024 00:30:01 +0000
ROA not before: Mon 01 Jan 2024 00:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1103
IP address blocks: 192.104.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:03:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:73:41:f5:f4:53:df:9d:7f:f8:d7:fd:76:5b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927af7d407f045dbea80773265b04ce574d0b7e3
Validity
Not Before: Jan 1 00:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e432aab318b7405e9a7cd880537e77d092494d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cc:72:f9:29:60:3c:69:9e:64:9e:4e:d4:21:
4a:17:37:da:01:61:11:88:5e:83:a2:fa:fa:1c:de:
0f:38:1b:8d:38:c6:69:27:ec:f7:a3:94:01:b5:93:
dc:16:51:a9:cd:cc:ad:2b:1a:7c:01:38:01:1b:9f:
a4:32:b3:6c:dd:c6:1f:e7:f2:ea:80:93:e3:0f:ff:
16:24:5a:44:21:f7:06:55:fa:ec:c0:04:d6:43:85:
1b:25:5c:d5:55:44:71:eb:d4:a0:f5:88:31:97:aa:
aa:61:ec:65:9b:a7:4e:6b:aa:bf:1a:da:af:4c:a1:
82:04:98:78:a4:d7:94:6d:11:32:4a:ba:2b:c2:c9:
d8:f8:43:ca:41:1c:e8:3e:c8:27:45:8c:d2:63:4e:
0b:6d:57:30:68:05:49:1c:60:ca:c4:e5:ac:1e:e7:
36:c5:21:40:6d:19:fe:ad:a0:81:bb:86:7d:90:ff:
cf:66:7d:01:db:bf:90:f9:d8:10:c4:47:83:84:9e:
af:3b:c2:bc:03:9e:38:a4:97:94:46:1a:bb:2f:78:
d2:36:58:05:1a:3f:39:87:bd:d1:0a:25:4a:c6:3c:
50:d2:7a:6d:23:7d:35:5a:6b:00:ce:bf:ab:14:f5:
7c:5a:6a:16:05:b3:10:70:ca:2c:c5:81:92:cf:5c:
9d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:43:2A:AB:31:8B:74:05:E9:A7:CD:88:05:37:E7:7D:09:24:94:D9
X509v3 Authority Key Identifier:
keyid:92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/DkMqqzGLdAXpp82IBTfnfQkklNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.104.140.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:ac:65:bb:bc:a0:6b:6e:ba:01:e8:21:77:62:fd:63:60:9b:
67:85:26:e5:6f:f5:74:7c:ba:63:7c:43:1f:15:ef:49:d5:30:
63:fc:e2:d7:f2:53:61:42:e1:12:11:af:bf:b8:09:18:2c:68:
7b:0f:4c:6b:12:a9:de:f3:a6:1b:ab:b3:38:80:13:92:bb:c2:
ef:3c:f5:37:2e:fb:11:ec:3e:53:0f:41:f7:7f:f5:e9:9d:3e:
cd:2c:8f:86:a0:65:0c:63:20:62:93:0c:b7:8c:80:26:cd:f5:
05:cb:32:fc:5f:63:7e:3b:94:9d:fd:02:71:a9:29:3b:c1:28:
80:0e:32:1f:e5:ac:9d:99:d8:27:f8:36:56:6e:07:d0:5a:0d:
02:00:48:91:49:c7:88:41:4e:b1:f9:62:8f:f7:70:c7:72:65:
dc:0c:fa:20:3f:1f:5c:82:bb:00:f5:53:77:09:5c:99:c2:13:
3a:78:5c:8b:ba:f1:08:3c:ab:be:d4:12:48:34:ba:13:41:93:
ab:08:96:0b:7d:9f:e4:26:2f:a3:f6:d1:6a:81:6c:e7:64:c7:
5d:eb:fc:1a:a7:5d:ac:52:4e:a4:6a:53:d0:df:65:91:0d:ca:
3f:98:1f:12:ad:63:5a:76:90:59:fe:89:b5:3f:5e:f7:71:a1:
a4:cb:f9:99
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbXNB9fRT351/+Nf9dlugMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyN2FmN2Q0MDdmMDQ1ZGJlYTgwNzczMjY1YjA0Y2U1NzRk
MGI3ZTMwHhcNMjQwMTAxMDAzMDAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTQzMmFhYjMxOGI3NDA1ZTlhN2NkODgwNTM3ZTc3ZDA5MjQ5NGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMxy+SlgPGmeZJ5O1CFKFzfaAWER
iF6Dovr6HN4POBuNOMZpJ+z3o5QBtZPcFlGpzcytKxp8ATgBG5+kMrNs3cYf5/Lq
gJPjD/8WJFpEIfcGVfrswATWQ4UbJVzVVURx69Sg9Ygxl6qqYexlm6dOa6q/Gtqv
TKGCBJh4pNeUbREySrorwsnY+EPKQRzoPsgnRYzSY04LbVcwaAVJHGDKxOWsHuc2
xSFAbRn+raCBu4Z9kP/PZn0B27+Q+dgQxEeDhJ6vO8K8A544pJeURhq7L3jSNlgF
Gj85h73RCiVKxjxQ0nptI301WmsAzr+rFPV8WmoWBbMQcMosxYGSz1ydxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA5DKqsxi3QF6afNiAU3530JJJTZMB8GA1UdIwQY
MBaAFJJ699QH8EXb6oB3MmWwTOV00LfjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva25yMzFBZndSZHZxZ0hjeVpiQk01WFRRdC1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82ZDVlMjktYWY2ZS00YzhjLWIwYWQt
NTE2ZTBiMzBlYjEwLzEvRGtNcXF6R0xkQVhwcDgySUJUZm5mUWtrbE5rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC82ZDVlMjktYWY2ZS00YzhjLWIwYWQtNTE2ZTBiMzBlYjEw
LzEva25yMzFBZndSZHZxZ0hjeVpiQk01WFRRdC1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGiMMA0G
CSqGSIb3DQEBCwUAA4IBAQBcrGW7vKBrbroB6CF3Yv1jYJtnhSblb/V0fLpjfEMf
Fe9J1TBj/OLX8lNhQuESEa+/uAkYLGh7D0xrEqne86Ybq7M4gBOSu8LvPPU3LvsR
7D5TD0H3f/XpnT7NLI+GoGUMYyBikwy3jIAmzfUFyzL8X2N+O5Sd/QJxqSk7wSiA
DjIf5aydmdgn+DZWbgfQWg0CAEiRSceIQU6x+WKP93DHcmXcDPogPx9cgrsA9VN3
CVyZwhM6eFyLuvEIPKu+1BJINLoTQZOrCJYLfZ/kJi+j9tFqgWznZMdd6/wap12s
Uk6kalPQ32WRDco/mB8SrWNadpBZ/om1P173caGky/mZ
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:52:13 2024 by rpki-client on console-ams.rpki-client.org