Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/dmxCOf9-xomYy38e6jWFLs1MX8I.roa
File: dmxCOf9-xomYy38e6jWFLs1MX8I.roa (raw, json)
Hash identifier: PvnD5+tDv8cYjeVs2bAyA3YRVeGrdslh9IkQYw45Klc=
Subject key identifier: 76:6C:42:39:FF:7E:C6:89:98:CB:7F:1E:EA:35:85:2E:CD:4C:5F:C2
Certificate issuer: /CN=ab344b32f58b564c897a1ffa6967089198f2c822
Certificate serial: 0190BB64F5FB0EDFF368FCFA83401836A84A
Authority key identifier: AB:34:4B:32:F5:8B:56:4C:89:7A:1F:FA:69:67:08:91:98:F2:C8:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qzRLMvWLVkyJeh_6aWcIkZjyyCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/dmxCOf9-xomYy38e6jWFLs1MX8I.roa
Signing time: Tue 16 Jul 2024 11:54:34 +0000
ROA not before: Tue 16 Jul 2024 11:54:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214554
IP address blocks: 62.169.144.0/22 maxlen: 22
2a01:50a1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qzRLMvWLVkyJeh_6aWcIkZjyyCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 14:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bb:64:f5:fb:0e:df:f3:68:fc:fa:83:40:18:36:a8:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab344b32f58b564c897a1ffa6967089198f2c822
Validity
Not Before: Jul 16 11:54:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=766c4239ff7ec68998cb7f1eea35852ecd4c5fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:30:5f:ea:9d:ac:8d:68:65:4e:5b:76:f8:5f:
ab:b1:60:46:0a:99:fe:c8:97:df:d7:dc:fc:fc:0c:
a0:aa:3a:db:70:a4:8e:1c:2d:ce:b0:5a:11:1d:cc:
16:13:87:de:77:b4:ca:df:02:e4:24:8d:70:32:eb:
67:37:5e:27:02:e6:15:df:9c:e2:6b:74:cc:b4:fe:
36:38:92:7c:e6:9a:18:cf:63:68:68:73:fa:dd:02:
53:cd:5d:f1:f8:d9:b3:41:43:38:41:d3:fe:d7:53:
63:4f:b7:36:a9:4e:89:b5:dc:8f:b7:d0:9e:5c:d7:
b4:6e:5d:cb:f9:91:e6:35:19:d5:0c:2e:96:8e:9d:
97:8a:c4:1c:72:98:b9:20:86:3d:91:ba:98:ea:50:
08:54:e1:4a:c8:b2:12:90:db:c5:97:90:f4:58:a8:
73:50:16:f6:b2:fe:f2:04:b7:6a:3d:29:77:46:d5:
ca:da:90:4a:81:6b:3c:91:e8:eb:a4:d9:27:7b:be:
a7:12:4b:1c:0a:7c:aa:45:37:7e:a2:0c:3f:18:c0:
43:a4:87:4e:c1:43:36:bd:b0:74:c4:8b:1b:5d:ee:
e9:fe:7e:f5:b5:67:b9:90:67:9e:c8:25:ad:88:33:
56:fb:3e:c9:5e:b8:47:95:9a:52:ea:9b:ff:f1:a4:
6e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:6C:42:39:FF:7E:C6:89:98:CB:7F:1E:EA:35:85:2E:CD:4C:5F:C2
X509v3 Authority Key Identifier:
keyid:AB:34:4B:32:F5:8B:56:4C:89:7A:1F:FA:69:67:08:91:98:F2:C8:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzRLMvWLVkyJeh_6aWcIkZjyyCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/dmxCOf9-xomYy38e6jWFLs1MX8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/418b6a-bcfc-4560-b9b1-01aec920c72e/1/qzRLMvWLVkyJeh_6aWcIkZjyyCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.169.144.0/22
IPv6:
2a01:50a1::/32
Signature Algorithm: sha256WithRSAEncryption
61:86:35:97:b9:71:5f:0b:47:c8:da:b8:58:4d:8d:17:b6:33:
4b:07:ad:e1:75:85:b3:87:85:29:c8:ee:bf:20:c9:f2:73:d6:
02:52:45:18:c9:80:d9:a6:c9:69:b7:7c:34:a2:7e:82:10:e7:
24:d7:13:74:af:93:64:47:94:0e:30:86:e8:57:7b:8f:e0:f6:
84:4f:41:93:1c:00:07:3e:3e:41:f5:8a:f2:26:e4:f1:cc:80:
66:db:aa:e6:78:f7:30:a5:25:e5:95:fb:98:8a:1f:81:b9:4d:
5f:f8:86:c7:73:1e:a3:24:82:91:63:57:56:0a:43:c7:a7:75:
e6:b8:05:cb:32:1c:c2:5f:4c:32:94:79:3e:bf:c6:32:44:59:
65:52:c0:27:a5:26:45:8a:e7:92:c9:08:41:b5:05:51:83:6f:
42:83:c4:3b:ad:bb:14:57:7f:7a:11:dd:fd:0c:16:2c:cd:23:
bf:d3:22:26:1c:75:34:72:1e:41:14:e2:93:10:be:ac:d0:30:
39:1a:39:85:1e:a3:99:3c:b7:d6:86:54:80:45:58:d2:d4:96:
40:37:ec:36:ed:f4:f1:5c:8e:51:d8:79:a0:27:b1:b7:b0:c8:
6c:be:8e:ed:7c:76:1b:19:1e:f2:d7:c4:b0:02:d7:5c:46:8d:
46:d4:c3:34
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZC7ZPX7Dt/zaPz6g0AYNqhKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMzQ0YjMyZjU4YjU2NGM4OTdhMWZmYTY5NjcwODkxOThm
MmM4MjIwHhcNMjQwNzE2MTE1NDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjZjNDIzOWZmN2VjNjg5OThjYjdmMWVlYTM1ODUyZWNkNGM1ZmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDBf6p2sjWhlTlt2+F+rsWBGCpn+
yJff19z8/AygqjrbcKSOHC3OsFoRHcwWE4fed7TK3wLkJI1wMutnN14nAuYV35zi
a3TMtP42OJJ85poYz2NoaHP63QJTzV3x+NmzQUM4QdP+11NjT7c2qU6JtdyPt9Ce
XNe0bl3L+ZHmNRnVDC6Wjp2XisQccpi5IIY9kbqY6lAIVOFKyLISkNvFl5D0WKhz
UBb2sv7yBLdqPSl3RtXK2pBKgWs8kejrpNkne76nEkscCnyqRTd+ogw/GMBDpIdO
wUM2vbB0xIsbXe7p/n71tWe5kGeeyCWtiDNW+z7JXrhHlZpS6pv/8aRuXQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFHZsQjn/fsaJmMt/Huo1hS7NTF/CMB8GA1UdIwQY
MBaAFKs0SzL1i1ZMiXof+mlnCJGY8sgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXpSTE12V0xWa3lKZWhfNmFXY0lrWmp5eUNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS80MThiNmEtYmNmYy00NTYwLWI5YjEt
MDFhZWM5MjBjNzJlLzEvZG14Q09mOS14b21ZeTM4ZTZqV0ZMczFNWDhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS80MThiNmEtYmNmYy00NTYwLWI5YjEtMDFhZWM5MjBjNzJl
LzEvcXpSTE12V0xWa3lKZWhfNmFXY0lrWmp5eUNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCPqmQMA0E
AgACMAcDBQAqAVChMA0GCSqGSIb3DQEBCwUAA4IBAQBhhjWXuXFfC0fI2rhYTY0X
tjNLB63hdYWzh4UpyO6/IMnyc9YCUkUYyYDZpslpt3w0on6CEOck1xN0r5NkR5QO
MIboV3uP4PaET0GTHAAHPj5B9YryJuTxzIBm26rmePcwpSXllfuYih+BuU1f+IbH
cx6jJIKRY1dWCkPHp3XmuAXLMhzCX0wylHk+v8YyRFllUsAnpSZFiueSyQhBtQVR
g29Cg8Q7rbsUV396Ed39DBYszSO/0yImHHU0ch5BFOKTEL6s0DA5GjmFHqOZPLfW
hlSARVjS1JZAN+w27fTxXI5R2HmgJ7G3sMhsvo7tfHYbGR7y18SwAtdcRo1G1MM0
-----END CERTIFICATE-----
Generated at Wed Sep 18 23:25:54 2024 by rpki-client on console-ams.rpki-client.org