Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/DwcLm_YlIUOCXpI-v7VP1cUwfMs.roa
File: DwcLm_YlIUOCXpI-v7VP1cUwfMs.roa (raw, json)
Hash identifier: J/JNCzgA14ekpaKrzawWtM7HmFrmmIJbxhb0M4r/Clw=
Subject key identifier: 0F:07:0B:9B:F6:25:21:43:82:5E:92:3E:BF:B5:4F:D5:C5:30:7C:CB
Certificate issuer: /CN=9d239c08ead94bb04fc3e6b4a65e6e1c7dcf38f4
Certificate serial: 018CC86F0E49F14085DEB9AEFA5A377034FB
Authority key identifier: 9D:23:9C:08:EA:D9:4B:B0:4F:C3:E6:B4:A6:5E:6E:1C:7D:CF:38:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSOcCOrZS7BPw-a0pl5uHH3POPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/DwcLm_YlIUOCXpI-v7VP1cUwfMs.roa
Signing time: Tue 02 Jan 2024 04:29:30 +0000
ROA not before: Tue 02 Jan 2024 04:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41960
IP address blocks: 185.246.30.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSOcCOrZS7BPw-a0pl5uHH3POPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:0e:49:f1:40:85:de:b9:ae:fa:5a:37:70:34:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d239c08ead94bb04fc3e6b4a65e6e1c7dcf38f4
Validity
Not Before: Jan 2 04:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f070b9bf6252143825e923ebfb54fd5c5307ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:99:ac:0f:2d:b2:74:fa:11:1b:47:ac:54:b1:
e5:8f:09:22:0c:a3:29:68:6a:af:11:6c:f7:5c:a2:
3c:24:60:71:d6:ed:66:27:20:fd:bd:d7:d9:01:50:
b8:ff:50:a6:87:e4:28:72:09:e6:ba:d9:47:11:45:
ad:8d:83:3c:3d:5f:26:ed:70:eb:1b:bd:5f:30:3f:
93:f7:54:cf:01:4c:62:68:6c:cf:64:6d:fd:df:40:
51:7b:ee:61:d3:01:5c:c2:bc:27:b7:2d:9b:0d:c8:
e3:9c:5a:af:84:bf:71:c6:f9:2b:1f:2f:38:fa:99:
9d:a6:c1:a4:0f:a0:cd:26:fd:c9:3a:78:81:d3:ca:
4f:86:93:57:ca:8e:63:19:82:a0:19:01:53:a1:31:
c4:f3:41:96:c7:07:f7:16:db:a7:10:85:53:8f:cb:
1b:3e:e4:04:df:82:e4:27:cb:cf:cd:16:2f:2a:ab:
c0:49:72:16:31:5e:0f:eb:e2:4e:3a:d5:f4:1b:c5:
bb:68:0d:da:a8:24:04:f6:05:61:74:da:70:21:ae:
7a:bc:bd:ee:14:0d:c9:fd:19:ca:75:a7:14:6e:83:
02:31:8c:8f:7b:c3:e5:ed:f1:1f:4b:c1:9a:6d:ac:
9d:6b:df:4d:b1:7d:ce:ab:bf:2a:f8:0d:df:05:d9:
80:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:07:0B:9B:F6:25:21:43:82:5E:92:3E:BF:B5:4F:D5:C5:30:7C:CB
X509v3 Authority Key Identifier:
keyid:9D:23:9C:08:EA:D9:4B:B0:4F:C3:E6:B4:A6:5E:6E:1C:7D:CF:38:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSOcCOrZS7BPw-a0pl5uHH3POPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/DwcLm_YlIUOCXpI-v7VP1cUwfMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.30.0/23
Signature Algorithm: sha256WithRSAEncryption
89:5a:5d:15:80:8f:76:0f:5b:e7:c0:33:01:d2:03:7d:9b:f3:
14:b1:c0:f1:76:11:e5:30:bc:aa:99:e7:9e:1e:fa:f1:6f:25:
60:dd:64:fc:3d:a7:c1:ef:6a:09:9e:06:7f:05:c5:51:e7:d2:
72:d6:4b:4f:ce:4b:ef:92:22:ef:f8:cd:45:52:9f:a6:bc:8d:
a4:eb:d8:98:50:92:23:0a:47:56:d3:a4:3c:43:de:1d:62:0a:
d8:d7:ce:6b:68:42:9d:a7:4c:2a:a4:23:a2:49:82:65:a2:99:
e4:37:47:39:ba:38:bb:8f:dc:a9:ab:f6:9b:2f:62:8f:50:c1:
fa:a1:f9:bb:31:fa:5b:d5:72:09:7c:74:3e:b4:21:b1:d8:08:
03:06:74:7f:bf:54:25:59:98:d2:36:d0:6b:d4:51:b2:81:6b:
3c:25:6e:5e:44:ee:1f:47:7e:df:b4:18:e8:6d:b9:3e:f5:0c:
95:bf:d6:ee:fe:28:0e:8b:f3:bb:7c:fe:55:65:23:8b:02:aa:
f0:9e:54:8d:de:8d:03:44:fb:45:ff:1f:1d:88:9d:e8:b4:4d:
d4:8f:5c:09:b7:1d:f3:b5:12:4f:56:05:c4:ee:e2:50:9f:68:
ab:96:0c:47:bd:89:a7:25:69:0d:53:ad:ae:74:7c:1a:be:3a:
8e:31:a2:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIbw5J8UCF3rmu+lo3cDT7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjM5YzA4ZWFkOTRiYjA0ZmMzZTZiNGE2NWU2ZTFjN2Rj
ZjM4ZjQwHhcNMjQwMTAyMDQyOTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjA3MGI5YmY2MjUyMTQzODI1ZTkyM2ViZmI1NGZkNWM1MzA3Y2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZmsDy2ydPoRG0esVLHljwkiDKMp
aGqvEWz3XKI8JGBx1u1mJyD9vdfZAVC4/1Cmh+QocgnmutlHEUWtjYM8PV8m7XDr
G71fMD+T91TPAUxiaGzPZG3930BRe+5h0wFcwrwnty2bDcjjnFqvhL9xxvkrHy84
+pmdpsGkD6DNJv3JOniB08pPhpNXyo5jGYKgGQFToTHE80GWxwf3FtunEIVTj8sb
PuQE34LkJ8vPzRYvKqvASXIWMV4P6+JOOtX0G8W7aA3aqCQE9gVhdNpwIa56vL3u
FA3J/RnKdacUboMCMYyPe8Pl7fEfS8Gabayda99NsX3Oq78q+A3fBdmArwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA8HC5v2JSFDgl6SPr+1T9XFMHzLMB8GA1UdIwQY
MBaAFJ0jnAjq2UuwT8PmtKZebhx9zzj0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNPY0NPclpTN0JQdy1hMHBsNXVISDNQT1BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8wNjA4NTktNzcwNy00MTJhLTk4MTAt
ZGJiMjkzMWEwZjY0LzEvRHdjTG1fWWxJVU9DWHBJLXY3VlAxY1V3Zk1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8wNjA4NTktNzcwNy00MTJhLTk4MTAtZGJiMjkzMWEwZjY0
LzEvblNPY0NPclpTN0JQdy1hMHBsNXVISDNQT1BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBufYeMA0G
CSqGSIb3DQEBCwUAA4IBAQCJWl0VgI92D1vnwDMB0gN9m/MUscDxdhHlMLyqmeee
HvrxbyVg3WT8PafB72oJngZ/BcVR59Jy1ktPzkvvkiLv+M1FUp+mvI2k69iYUJIj
CkdW06Q8Q94dYgrY185raEKdp0wqpCOiSYJlopnkN0c5uji7j9ypq/abL2KPUMH6
ofm7Mfpb1XIJfHQ+tCGx2AgDBnR/v1QlWZjSNtBr1FGygWs8JW5eRO4fR37ftBjo
bbk+9QyVv9bu/igOi/O7fP5VZSOLAqrwnlSN3o0DRPtF/x8diJ3otE3Uj1wJtx3z
tRJPVgXE7uJQn2irlgxHvYmnJWkNU62udHwavjqOMaJt
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:31:13 2024 by rpki-client on console-fra.rpki-client.org