Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/DNPfWi3MyaGrn60TtEVpzJHnZ1U.roa
File: DNPfWi3MyaGrn60TtEVpzJHnZ1U.roa (raw, json)
Hash identifier: OkC0VtcLfH+xGwtoRmkYFn58wK0nyOD9IBI35AP1dlI=
Subject key identifier: 0C:D3:DF:5A:2D:CC:C9:A1:AB:9F:AD:13:B4:45:69:CC:91:E7:67:55
Certificate issuer: /CN=6afab09168e7cc66b663c6162d5c8d454965cce2
Certificate serial: 018CC801C2D8B8E3E0F44C49BBF6A246BFB9
Authority key identifier: 6A:FA:B0:91:68:E7:CC:66:B6:63:C6:16:2D:5C:8D:45:49:65:CC:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/DNPfWi3MyaGrn60TtEVpzJHnZ1U.roa
Signing time: Tue 02 Jan 2024 02:30:07 +0000
ROA not before: Tue 02 Jan 2024 02:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203268
IP address blocks: 185.137.245.0/24 maxlen: 24
185.137.246.0/24 maxlen: 24
185.137.244.0/24 maxlen: 24
185.137.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 16:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:c2:d8:b8:e3:e0:f4:4c:49:bb:f6:a2:46:bf:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6afab09168e7cc66b663c6162d5c8d454965cce2
Validity
Not Before: Jan 2 02:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0cd3df5a2dccc9a1ab9fad13b44569cc91e76755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ed:08:fe:d4:aa:90:ae:38:43:c1:bb:d3:55:
32:38:a3:3e:3f:a7:64:df:08:b8:61:ab:60:6c:88:
6b:27:00:be:77:8a:6a:d6:a8:78:73:58:bd:85:92:
db:fd:73:65:b4:f2:3e:2b:39:c6:ea:1f:2d:ec:30:
5b:99:ad:aa:1b:d6:9b:b6:5e:47:c4:af:cf:84:6e:
e0:44:51:bb:4c:52:65:43:6a:36:8a:31:f6:b2:5f:
dc:b6:20:d7:42:fd:d4:4f:d4:c6:27:59:e5:5d:64:
21:71:58:e9:bf:0c:73:0b:ae:c3:97:51:1b:6e:90:
7e:53:05:5a:3f:a5:35:eb:f0:40:b7:76:e1:25:f3:
a3:05:3b:34:5f:ce:69:75:cf:3d:31:e7:d8:76:62:
20:46:f9:28:ab:7e:f2:41:28:e5:35:80:9c:8d:d9:
4a:41:a0:b2:98:8d:20:40:2c:bb:2e:cd:c6:86:3d:
54:42:3b:d6:ac:e0:7e:b4:d7:ed:4f:cc:81:90:eb:
9d:5a:f9:61:3e:f3:e6:fd:e6:c8:98:9a:af:97:a6:
39:1c:6f:80:ad:ad:25:38:3d:d2:dc:4a:d7:3f:4f:
8a:66:d0:fe:31:01:14:ab:be:0e:88:60:c8:10:2e:
65:a1:64:39:8f:68:8a:f6:66:a8:2d:f6:a1:7e:ab:
ae:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D3:DF:5A:2D:CC:C9:A1:AB:9F:AD:13:B4:45:69:CC:91:E7:67:55
X509v3 Authority Key Identifier:
keyid:6A:FA:B0:91:68:E7:CC:66:B6:63:C6:16:2D:5C:8D:45:49:65:CC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avqwkWjnzGa2Y8YWLVyNRUllzOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/DNPfWi3MyaGrn60TtEVpzJHnZ1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/aafcb2-491d-4b80-9168-5f3381b071da/1/avqwkWjnzGa2Y8YWLVyNRUllzOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.244.0/22
Signature Algorithm: sha256WithRSAEncryption
e8:44:fc:ce:5a:11:d8:b9:7b:73:e1:72:de:b6:98:11:57:04:
98:23:f6:d2:4a:a3:f4:22:6b:59:02:ea:c7:d8:58:8a:76:74:
83:95:20:ce:43:1b:a8:bc:72:c6:0a:58:48:f9:14:a6:01:46:
35:7e:0c:fd:a5:35:be:39:39:70:77:13:93:06:9f:b8:84:b1:
b5:48:06:cf:ac:44:81:d5:02:1d:62:5c:5f:c3:87:64:66:c6:
73:00:b4:70:ff:c9:f4:64:5e:c9:f9:e3:9c:67:33:aa:06:3a:
57:80:fe:8c:0f:a2:a6:79:d8:81:14:6a:c7:8f:e6:b1:36:e4:
d7:ff:bc:6e:2f:86:7e:6b:c2:1c:9b:d7:f4:2f:82:c6:18:7c:
d6:cb:be:c3:fc:a2:e9:c7:62:4e:41:e4:3d:31:a7:1a:73:17:
93:48:2f:bb:68:9b:16:3d:f7:53:b5:13:ab:c0:af:4d:a4:d8:
f7:3c:2c:2d:c9:39:91:38:a7:3e:a6:60:3c:f4:d9:1c:c3:88:
aa:0a:50:c3:55:98:7b:59:5b:a9:8c:b0:58:85:7e:2e:29:74:
57:2b:f0:e5:f3:a7:17:e1:3b:a8:88:54:11:f8:ec:4f:8c:15:
1b:11:cc:2c:40:54:b9:78:07:a2:2b:c9:c8:65:f0:20:3a:4e:
9a:19:2f:22
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAcLYuOPg9ExJu/aiRr+5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhZmFiMDkxNjhlN2NjNjZiNjYzYzYxNjJkNWM4ZDQ1NDk2
NWNjZTIwHhcNMjQwMTAyMDIzMDA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwY2QzZGY1YTJkY2NjOWExYWI5ZmFkMTNiNDQ1NjljYzkxZTc2NzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoe0I/tSqkK44Q8G701UyOKM+P6dk
3wi4YatgbIhrJwC+d4pq1qh4c1i9hZLb/XNltPI+KznG6h8t7DBbma2qG9abtl5H
xK/PhG7gRFG7TFJlQ2o2ijH2sl/ctiDXQv3UT9TGJ1nlXWQhcVjpvwxzC67Dl1Eb
bpB+UwVaP6U16/BAt3bhJfOjBTs0X85pdc89MefYdmIgRvkoq37yQSjlNYCcjdlK
QaCymI0gQCy7Ls3Ghj1UQjvWrOB+tNftT8yBkOudWvlhPvPm/ebImJqvl6Y5HG+A
ra0lOD3S3ErXP0+KZtD+MQEUq74OiGDIEC5loWQ5j2iK9maoLfahfquuFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAzT31otzMmhq5+tE7RFacyR52dVMB8GA1UdIwQY
MBaAFGr6sJFo58xmtmPGFi1cjUVJZcziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXZxd2tXam56R2EyWThZV0xWeU5SVWxsek9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9hYWZjYjItNDkxZC00YjgwLTkxNjgt
NWYzMzgxYjA3MWRhLzEvRE5QZldpM015YUdybjYwVHRFVnB6SkhuWjFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9hYWZjYjItNDkxZC00YjgwLTkxNjgtNWYzMzgxYjA3MWRh
LzEvYXZxd2tXam56R2EyWThZV0xWeU5SVWxsek9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYn0MA0G
CSqGSIb3DQEBCwUAA4IBAQDoRPzOWhHYuXtz4XLetpgRVwSYI/bSSqP0ImtZAurH
2FiKdnSDlSDOQxuovHLGClhI+RSmAUY1fgz9pTW+OTlwdxOTBp+4hLG1SAbPrESB
1QIdYlxfw4dkZsZzALRw/8n0ZF7J+eOcZzOqBjpXgP6MD6KmediBFGrHj+axNuTX
/7xuL4Z+a8Icm9f0L4LGGHzWy77D/KLpx2JOQeQ9MacacxeTSC+7aJsWPfdTtROr
wK9NpNj3PCwtyTmROKc+pmA89Nkcw4iqClDDVZh7WVupjLBYhX4uKXRXK/Dl86cX
4TuoiFQR+OxPjBUbEcwsQFS5eAeiK8nIZfAgOk6aGS8i
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:24:36 2024 by rpki-client on console-ams.rpki-client.org