Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/NWgnh4MQbp6aydoBNY4vS1HQjIU.roa
File: NWgnh4MQbp6aydoBNY4vS1HQjIU.roa (raw, json)
Hash identifier: stpmFs/N4+m+eWxWnkRi6SraLNplD5P6ljDYELycT+4=
Subject key identifier: 35:68:27:87:83:10:6E:9E:9A:C9:DA:01:35:8E:2F:4B:51:D0:8C:85
Certificate issuer: /CN=0ffcfc345a0646a7cf225905477e2183574886e0
Certificate serial: 018CC4244C665D703D53BC0BF031EB4FBC5B
Authority key identifier: 0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/NWgnh4MQbp6aydoBNY4vS1HQjIU.roa
Signing time: Mon 01 Jan 2024 08:29:22 +0000
ROA not before: Mon 01 Jan 2024 08:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25229
IP address blocks: 91.216.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:4c:66:5d:70:3d:53:bc:0b:f0:31:eb:4f:bc:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffcfc345a0646a7cf225905477e2183574886e0
Validity
Not Before: Jan 1 08:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3568278783106e9e9ac9da01358e2f4b51d08c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:73:b4:45:7e:ca:9a:d1:bb:2b:19:49:cd:4f:
95:9d:8c:a9:bf:80:45:3d:7f:30:a4:dc:eb:c4:e0:
83:cc:2d:18:44:16:8f:9f:b1:6c:05:ea:3d:d0:56:
81:1a:e2:03:d1:78:f6:fb:40:a8:09:3f:4e:b7:73:
6b:1f:4d:a1:9c:ec:5a:bc:91:bc:24:51:21:66:ff:
0a:ea:4b:c4:a4:9a:97:50:a0:f4:ce:5a:b9:6f:22:
26:bc:fa:a0:f4:23:43:ce:b3:da:6b:8d:b1:f7:8f:
a1:7f:d9:d7:8e:67:9c:5f:11:bb:47:e4:41:fe:38:
da:94:bc:81:0c:fc:18:c8:53:8c:ee:11:31:e3:c6:
e1:b0:16:e5:7e:da:74:f5:5b:2a:2e:df:e5:eb:ba:
2f:a8:50:3f:2a:64:fe:56:ad:76:82:72:4d:22:55:
a1:bf:ef:0a:6b:41:b2:39:45:98:30:5c:bd:1a:39:
34:db:aa:c1:36:8d:a5:17:bd:a2:ac:c0:24:3c:95:
b5:84:3f:75:70:ea:c4:11:14:e2:81:15:05:1d:3e:
c9:d4:0d:61:f2:b7:94:ae:3b:cf:1f:69:e6:00:4b:
86:e4:bc:3e:68:b6:33:a5:55:dd:8f:02:7d:89:78:
70:db:01:a8:85:ef:08:dc:33:82:cf:30:38:9a:18:
c8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:68:27:87:83:10:6E:9E:9A:C9:DA:01:35:8E:2F:4B:51:D0:8C:85
X509v3 Authority Key Identifier:
keyid:0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/NWgnh4MQbp6aydoBNY4vS1HQjIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.106.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:75:d9:c8:36:79:76:8d:ec:bd:69:6b:42:98:28:19:35:ab:
7c:d5:55:66:78:8a:f2:cf:a9:67:ff:aa:18:fc:90:b8:7f:b3:
56:58:a0:be:9d:08:e0:1b:43:49:ab:62:16:fc:b4:d5:88:04:
f0:70:b0:ff:82:26:4f:56:87:43:7a:ec:3c:32:24:79:01:7c:
ad:e7:16:5b:ab:19:f9:b2:05:5f:da:4a:7a:e3:c1:26:da:2a:
50:41:29:ea:ce:b1:9d:0b:f3:d8:6d:24:ca:b9:d3:4d:83:a1:
a9:60:d3:bb:25:83:ee:dd:d4:4f:57:f6:ed:da:64:3d:36:fd:
eb:ed:91:e3:cf:e9:4f:a2:0d:06:f8:6b:34:c1:33:37:93:95:
7d:59:59:99:5c:23:fd:35:82:75:05:e1:ec:00:ca:a7:ee:c9:
38:47:42:43:ae:55:21:1a:61:27:07:02:ff:f0:21:37:2d:4b:
06:16:df:74:60:cb:fc:75:9d:b2:62:6b:b7:dd:d8:c9:98:13:
90:86:5a:86:3d:0b:8b:53:54:24:54:0e:4b:e4:93:90:db:e7:
f8:09:a7:8d:71:a3:b7:6d:ae:15:ab:fe:88:19:72:1f:29:c1:
29:cf:fb:54:f4:2f:16:6d:d9:df:c8:68:1f:ce:c5:ae:9e:7e:
85:f0:8c:70
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEJExmXXA9U7wL8DHrT7xbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZmNmYzM0NWEwNjQ2YTdjZjIyNTkwNTQ3N2UyMTgzNTc0
ODg2ZTAwHhcNMjQwMTAxMDgyOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTY4Mjc4NzgzMTA2ZTllOWFjOWRhMDEzNThlMmY0YjUxZDA4Yzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXO0RX7KmtG7KxlJzU+VnYypv4BF
PX8wpNzrxOCDzC0YRBaPn7FsBeo90FaBGuID0Xj2+0CoCT9Ot3NrH02hnOxavJG8
JFEhZv8K6kvEpJqXUKD0zlq5byImvPqg9CNDzrPaa42x94+hf9nXjmecXxG7R+RB
/jjalLyBDPwYyFOM7hEx48bhsBblftp09VsqLt/l67ovqFA/KmT+Vq12gnJNIlWh
v+8Ka0GyOUWYMFy9Gjk026rBNo2lF72irMAkPJW1hD91cOrEERTigRUFHT7J1A1h
8reUrjvPH2nmAEuG5Lw+aLYzpVXdjwJ9iXhw2wGohe8I3DOCzzA4mhjImwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDVoJ4eDEG6emsnaATWOL0tR0IyFMB8GA1UdIwQY
MBaAFA/8/DRaBkanzyJZBUd+IYNXSIbgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRF96OE5Gb0dScWZQSWxrRlIzNGhnMWRJaHVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9hZjI4MmItZjU5Ny00MDdhLWJlZjUt
MTMyZjk5Y2ZhYTUzLzEvTldnbmg0TVFicDZheWRvQk5ZNHZTMUhRaklVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9hZjI4MmItZjU5Ny00MDdhLWJlZjUtMTMyZjk5Y2ZhYTUz
LzEvRF96OE5Gb0dScWZQSWxrRlIzNGhnMWRJaHVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9hqMA0G
CSqGSIb3DQEBCwUAA4IBAQCpddnINnl2jey9aWtCmCgZNat81VVmeIryz6ln/6oY
/JC4f7NWWKC+nQjgG0NJq2IW/LTViATwcLD/giZPVodDeuw8MiR5AXyt5xZbqxn5
sgVf2kp648Em2ipQQSnqzrGdC/PYbSTKudNNg6GpYNO7JYPu3dRPV/bt2mQ9Nv3r
7ZHjz+lPog0G+Gs0wTM3k5V9WVmZXCP9NYJ1BeHsAMqn7sk4R0JDrlUhGmEnBwL/
8CE3LUsGFt90YMv8dZ2yYmu33djJmBOQhlqGPQuLU1QkVA5L5JOQ2+f4CaeNcaO3
ba4Vq/6IGXIfKcEpz/tU9C8WbdnfyGgfzsWunn6F8Ixw
-----END CERTIFICATE-----
Generated at Sat Nov 23 13:13:40 2024 by rpki-client on console-ams.rpki-client.org