Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/0NVHaiCKshv4zEogGor93zgjLkI.roa
File: 0NVHaiCKshv4zEogGor93zgjLkI.roa (raw, json)
Hash identifier: VonnW6R/DYxknFnvXP3XCKC0rQxKWTa/IUm6mGylQeg=
Subject key identifier: D0:D5:47:6A:20:8A:B2:1B:F8:CC:4A:20:1A:8A:FD:DF:38:23:2E:42
Certificate issuer: /CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Certificate serial: 018CC6B7792DACA9BBFE971361B44BBB23B0
Authority key identifier: 2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/0NVHaiCKshv4zEogGor93zgjLkI.roa
Signing time: Mon 01 Jan 2024 20:29:22 +0000
ROA not before: Mon 01 Jan 2024 20:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 217.117.65.0/24 maxlen: 24
217.117.71.0/24 maxlen: 24
217.117.76.0/24 maxlen: 24
87.238.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:03:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:79:2d:ac:a9:bb:fe:97:13:61:b4:4b:bb:23:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Validity
Not Before: Jan 1 20:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0d5476a208ab21bf8cc4a201a8afddf38232e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3b:cb:e8:e8:d2:00:8c:38:46:32:12:36:6f:
dd:94:c5:e0:39:5f:9f:c4:89:75:5b:9d:24:0d:b8:
63:df:f9:4e:ce:32:b6:3a:80:f5:5f:58:b7:6e:a6:
d2:ac:cd:3c:b9:d5:5e:f5:1f:81:93:57:6c:ab:4f:
dc:d3:df:9e:18:68:46:57:78:81:a9:a0:86:e6:4c:
ce:7b:36:cb:86:b6:84:90:b5:4d:d2:1c:9a:52:53:
fd:27:98:84:76:2f:1a:68:4b:59:35:f0:52:5b:4b:
22:13:23:d3:58:3d:e2:7a:19:0c:46:d9:2b:98:3b:
5d:3a:34:d5:81:41:4f:02:0a:a4:07:2e:63:11:f3:
54:ff:58:d0:9f:da:a7:b7:98:2b:6c:96:09:65:dc:
4f:76:a6:e4:88:67:52:71:03:79:56:44:5b:2e:1f:
1c:e3:ef:7b:5f:32:f3:b7:a7:78:f6:90:00:c8:32:
0f:15:0f:cb:12:88:12:00:3f:6e:54:e4:8b:d7:ae:
9c:5c:d8:37:27:13:02:4a:00:7a:c2:11:e5:08:83:
be:b1:b8:09:16:89:50:25:5e:a2:33:e7:4a:6b:8a:
08:b4:d5:11:8c:96:23:9b:de:73:3c:ad:08:df:b4:
0a:77:7b:8b:31:fa:54:70:e6:84:89:fc:8e:22:39:
4d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D5:47:6A:20:8A:B2:1B:F8:CC:4A:20:1A:8A:FD:DF:38:23:2E:42
X509v3 Authority Key Identifier:
keyid:2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/0NVHaiCKshv4zEogGor93zgjLkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.154.0/24
217.117.65.0/24
217.117.71.0/24
217.117.76.0/24
Signature Algorithm: sha256WithRSAEncryption
69:c6:a0:76:a7:9b:01:9e:f6:f4:e2:fe:4d:41:44:e8:57:9f:
9c:d2:2f:d6:34:f6:7f:4a:c5:f5:e4:f8:cc:5b:4a:77:05:f5:
6e:b2:f5:07:3a:5b:87:b2:d8:7a:26:ab:a5:fe:60:51:f5:03:
f1:15:c0:95:09:2f:68:5f:dd:ae:d4:00:f8:3a:48:92:0d:29:
f0:e0:c5:d7:47:10:62:99:14:6d:43:74:21:f5:14:95:36:4a:
37:01:0a:70:4b:ad:38:bb:d8:75:56:4f:56:77:56:00:c7:6e:
1c:cb:e5:2a:19:aa:1c:44:8c:a1:64:25:16:51:7e:38:e0:83:
ab:15:0f:60:7d:1a:11:3e:08:3b:90:54:95:d3:90:c4:86:2e:
15:93:6c:e8:ed:9e:66:a3:70:5a:a4:b8:10:fd:ec:ff:a2:c1:
ad:86:91:8e:0d:61:df:5b:60:c4:86:ed:6c:47:62:1f:00:e9:
74:70:d7:a7:29:b2:66:ed:77:d2:92:b8:c1:41:d2:fa:b3:fa:
47:6b:92:ee:86:48:87:b4:46:d3:76:ca:39:b0:b2:74:3b:12:
35:c4:7c:36:56:fd:95:68:cd:e9:de:2c:74:ff:ea:28:84:23:
9c:6c:26:37:51:e7:80:79:61:7c:17:e5:7b:9e:65:df:6c:e9:
c8:82:66:3b
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYzGt3ktrKm7/pcTYbRLuyOwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhY2UyMTA5MGVlNGQ3ODY3NzQxMzQyM2RjYjJmZTAxYTZl
MWM2MjIwHhcNMjQwMTAxMjAyOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMGQ1NDc2YTIwOGFiMjFiZjhjYzRhMjAxYThhZmRkZjM4MjMyZTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzvL6OjSAIw4RjISNm/dlMXgOV+f
xIl1W50kDbhj3/lOzjK2OoD1X1i3bqbSrM08udVe9R+Bk1dsq0/c09+eGGhGV3iB
qaCG5kzOezbLhraEkLVN0hyaUlP9J5iEdi8aaEtZNfBSW0siEyPTWD3iehkMRtkr
mDtdOjTVgUFPAgqkBy5jEfNU/1jQn9qnt5grbJYJZdxPdqbkiGdScQN5VkRbLh8c
4+97XzLzt6d49pAAyDIPFQ/LEogSAD9uVOSL166cXNg3JxMCSgB6whHlCIO+sbgJ
FolQJV6iM+dKa4oItNURjJYjm95zPK0I37QKd3uLMfpUcOaEifyOIjlNXQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFNDVR2ogirIb+MxKIBqK/d84Iy5CMB8GA1UdIwQY
MBaAFCrOIQkO5NeGd0E0I9yy/gGm4cYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3M0aENRN2sxNFozUVRRajNMTC1BYWJoeGlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yOTE1ZjEtODdiYS00YzE4LWFhZjkt
NTkwYTk4MTNkZGRmLzEvME5WSGFpQ0tzaHY0ekVvZ0dvcjkzemdqTGtJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8yOTE1ZjEtODdiYS00YzE4LWFhZjktNTkwYTk4MTNkZGRm
LzEvS3M0aENRN2sxNFozUVRRajNMTC1BYWJoeGlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAV+6aAwQA
2XVBAwQA2XVHAwQA2XVMMA0GCSqGSIb3DQEBCwUAA4IBAQBpxqB2p5sBnvb04v5N
QUToV5+c0i/WNPZ/SsX15PjMW0p3BfVusvUHOluHsth6Jqul/mBR9QPxFcCVCS9o
X92u1AD4OkiSDSnw4MXXRxBimRRtQ3Qh9RSVNko3AQpwS604u9h1Vk9Wd1YAx24c
y+UqGaocRIyhZCUWUX444IOrFQ9gfRoRPgg7kFSV05DEhi4Vk2zo7Z5mo3BapLgQ
/ez/osGthpGODWHfW2DEhu1sR2IfAOl0cNenKbJm7XfSkrjBQdL6s/pHa5LuhkiH
tEbTdso5sLJ0OxI1xHw2Vv2VaM3p3ix0/+oohCOcbCY3UeeAeWF8F+V7nmXfbOnI
gmY7
-----END CERTIFICATE-----
Generated at Thu May 2 20:30:17 2024 by rpki-client on console-ams.rpki-client.org