Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/0Nd21FLbycmx78NdUehfrieGVPQ.roa
File: 0Nd21FLbycmx78NdUehfrieGVPQ.roa (raw, json)
Hash identifier: 10CZZgm4EZ9W4TjZxDGmXh2eb3ZS2rzAVekWW6U6GTo=
Subject key identifier: D0:D7:76:D4:52:DB:C9:C9:B1:EF:C3:5D:51:E8:5F:AE:27:86:54:F4
Certificate issuer: /CN=acc32858ccda9586c6d9671e310d51c28268c459
Certificate serial: 018CCA29C7F83921533B21BD9F8CDE2DDC7A
Authority key identifier: AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/0Nd21FLbycmx78NdUehfrieGVPQ.roa
Signing time: Tue 02 Jan 2024 12:33:04 +0000
ROA not before: Tue 02 Jan 2024 12:33:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 91.229.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:c7:f8:39:21:53:3b:21:bd:9f:8c:de:2d:dc:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc32858ccda9586c6d9671e310d51c28268c459
Validity
Not Before: Jan 2 12:33:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0d776d452dbc9c9b1efc35d51e85fae278654f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d1:63:d2:4d:a1:cc:04:2f:a7:62:be:30:9e:
f0:8e:bd:2f:72:77:68:c6:89:e8:ee:ae:2c:dd:c2:
0a:93:a0:c0:a1:69:e2:23:b4:a9:a9:19:ab:73:ed:
55:fe:db:02:96:ef:7b:fd:3a:96:4b:cd:a1:7c:63:
03:be:f1:a0:e3:1a:32:9b:7e:4e:1e:a5:4f:f8:05:
a4:90:14:a1:32:7c:af:ec:a2:a2:54:3c:3c:0c:c7:
02:9a:10:7d:aa:a7:01:ff:9d:77:67:6c:57:3a:70:
fe:9e:61:68:a2:e1:10:18:b3:6c:73:a7:84:87:b3:
51:35:68:a5:77:ed:00:2b:d1:d2:1d:bb:6b:ec:c5:
21:2f:19:eb:57:be:f0:6d:a0:46:55:91:b3:68:bc:
3a:71:28:e0:88:87:b4:5e:8c:fa:d7:3e:7b:31:03:
5a:d1:9e:39:d7:f5:67:27:51:c9:65:07:66:52:be:
10:3e:bf:f4:b7:51:82:ae:a0:d4:e3:bc:ed:aa:17:
92:2e:ea:14:20:f6:d5:ee:84:79:97:b8:14:03:d0:
d2:36:8f:72:62:ff:49:14:82:ce:6d:f1:8b:50:68:
7a:83:4e:43:16:7b:c8:59:41:69:f4:ff:49:0f:21:
3f:d2:da:61:97:36:3a:a8:eb:7e:87:24:08:00:31:
ed:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D7:76:D4:52:DB:C9:C9:B1:EF:C3:5D:51:E8:5F:AE:27:86:54:F4
X509v3 Authority Key Identifier:
keyid:AC:C3:28:58:CC:DA:95:86:C6:D9:67:1E:31:0D:51:C2:82:68:C4:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMMoWMzalYbG2WceMQ1RwoJoxFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/0Nd21FLbycmx78NdUehfrieGVPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6cf769-9b58-4847-8f1f-edc54072ae89/1/rMMoWMzalYbG2WceMQ1RwoJoxFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.58.0/24
Signature Algorithm: sha256WithRSAEncryption
27:1d:23:68:08:f8:7c:47:da:76:7d:36:0e:e0:2b:22:5a:bf:
20:1a:38:fa:b9:03:0c:17:f4:98:e0:c2:2f:7c:49:8f:2b:7b:
0c:56:03:59:35:c8:24:ff:b9:4e:51:74:87:c8:a7:74:e8:bf:
a6:f5:b8:d1:b7:fd:16:b6:c9:e0:c9:e8:94:13:3a:70:be:db:
53:43:aa:a0:30:48:6a:0a:20:b5:ea:37:7d:cf:79:39:79:33:
dd:bc:38:6a:4c:19:33:d0:fa:71:7d:2e:17:b4:a0:d6:ec:f9:
b1:89:b1:72:2b:b6:51:eb:04:a5:c4:71:96:3a:d7:99:67:fb:
a3:f8:cf:75:5b:c8:a5:30:42:2a:93:9e:d0:4c:1a:90:e2:72:
7f:04:83:b1:b6:cb:0b:b0:db:f1:c0:dd:e8:f3:e4:ee:ba:a2:
13:21:91:9d:41:64:60:3c:9c:b9:7d:ae:1b:93:61:c3:a8:ad:
42:ab:f7:c5:4e:8c:57:7b:62:fe:54:45:6a:a4:11:c7:e7:8c:
58:b6:93:33:4c:36:04:db:ae:b3:84:a9:c5:27:c7:64:64:e4:
c8:c0:2f:6f:c3:2f:a9:78:36:5c:3b:55:7a:c2:fb:cb:61:8b:
e7:ad:d5:5b:eb:cf:2c:5c:62:f0:84:55:05:db:3d:8f:77:c8:
86:ac:cb:df
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKcf4OSFTOyG9n4zeLdx6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYzMyODU4Y2NkYTk1ODZjNmQ5NjcxZTMxMGQ1MWMyODI2
OGM0NTkwHhcNMjQwMTAyMTIzMzA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMGQ3NzZkNDUyZGJjOWM5YjFlZmMzNWQ1MWU4NWZhZTI3ODY1NGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktFj0k2hzAQvp2K+MJ7wjr0vcndo
xono7q4s3cIKk6DAoWniI7SpqRmrc+1V/tsClu97/TqWS82hfGMDvvGg4xoym35O
HqVP+AWkkBShMnyv7KKiVDw8DMcCmhB9qqcB/513Z2xXOnD+nmFoouEQGLNsc6eE
h7NRNWild+0AK9HSHbtr7MUhLxnrV77wbaBGVZGzaLw6cSjgiIe0Xoz61z57MQNa
0Z451/VnJ1HJZQdmUr4QPr/0t1GCrqDU47ztqheSLuoUIPbV7oR5l7gUA9DSNo9y
Yv9JFILObfGLUGh6g05DFnvIWUFp9P9JDyE/0tphlzY6qOt+hyQIADHtuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNDXdtRS28nJse/DXVHoX64nhlT0MB8GA1UdIwQY
MBaAFKzDKFjM2pWGxtlnHjENUcKCaMRZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck1Nb1dNemFsWWJHMldjZU1RMVJ3b0pveEZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82Y2Y3NjktOWI1OC00ODQ3LThmMWYt
ZWRjNTQwNzJhZTg5LzEvME5kMjFGTGJ5Y214NzhOZFVlaGZyaWVHVlBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC82Y2Y3NjktOWI1OC00ODQ3LThmMWYtZWRjNTQwNzJhZTg5
LzEvck1Nb1dNemFsWWJHMldjZU1RMVJ3b0pveEZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+U6MA0G
CSqGSIb3DQEBCwUAA4IBAQAnHSNoCPh8R9p2fTYO4CsiWr8gGjj6uQMMF/SY4MIv
fEmPK3sMVgNZNcgk/7lOUXSHyKd06L+m9bjRt/0WtsngyeiUEzpwvttTQ6qgMEhq
CiC16jd9z3k5eTPdvDhqTBkz0PpxfS4XtKDW7PmxibFyK7ZR6wSlxHGWOteZZ/uj
+M91W8ilMEIqk57QTBqQ4nJ/BIOxtssLsNvxwN3o8+TuuqITIZGdQWRgPJy5fa4b
k2HDqK1Cq/fFToxXe2L+VEVqpBHH54xYtpMzTDYE266zhKnFJ8dkZOTIwC9vwy+p
eDZcO1V6wvvLYYvnrdVb688sXGLwhFUF2z2Pd8iGrMvf
-----END CERTIFICATE-----
Generated at Thu Apr 25 23:02:56 2024 by rpki-client on console-fra.rpki-client.org