Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/KRkP5VQHuN0mjtpPmoyR7oxzhuc.roa
File: KRkP5VQHuN0mjtpPmoyR7oxzhuc.roa (raw, json)
Hash identifier: gntXkU6ssfWcALREB1aCL5WJiZ5O8lbsERJ4UQ+6wi4=
Subject key identifier: 29:19:0F:E5:54:07:B8:DD:26:8E:DA:4F:9A:8C:91:EE:8C:73:86:E7
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 018CC649E94FA0996E1C90575C774201FC47
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/KRkP5VQHuN0mjtpPmoyR7oxzhuc.roa
Signing time: Mon 01 Jan 2024 18:29:41 +0000
ROA not before: Mon 01 Jan 2024 18:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200723
IP address blocks: 37.63.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 15:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:e9:4f:a0:99:6e:1c:90:57:5c:77:42:01:fc:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 1 18:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=29190fe55407b8dd268eda4f9a8c91ee8c7386e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7c:33:1c:c7:b6:4e:a4:92:63:fd:59:2c:cf:
31:7b:50:cf:f5:d4:65:d8:27:58:c9:89:f3:01:37:
78:47:18:62:c2:e4:f4:7b:d4:01:b1:c8:68:45:90:
dc:04:e1:67:65:d4:f0:75:9a:5a:74:10:6d:51:e6:
d4:29:e6:78:af:be:f7:ec:77:24:82:69:70:8c:9f:
92:9c:16:b0:38:e9:45:ba:32:6e:a5:21:28:88:61:
93:df:c7:47:98:0f:bd:8b:04:57:2b:86:90:71:8d:
88:a7:db:9c:bd:a7:0d:f5:ac:fd:6e:ff:0c:d7:06:
7e:ba:4a:e2:fc:2f:82:a6:33:26:52:e4:74:d9:37:
02:f9:0c:13:bc:e3:55:57:59:4d:45:cb:1f:1d:dd:
43:64:28:31:2e:c4:b8:66:f4:87:13:f7:da:f4:f0:
a9:b6:d9:2b:20:47:41:4d:00:46:6d:34:e3:48:e7:
92:49:e5:fa:81:bb:0c:f8:64:56:5c:df:f1:40:3f:
11:01:75:34:f8:7a:07:f4:64:7f:aa:b8:0a:a3:92:
60:9b:9d:f5:d5:44:99:a7:dd:e6:63:43:4a:d6:01:
c7:6b:53:ba:66:a0:7f:a5:cd:20:7d:42:39:51:af:
8c:a9:83:61:94:bb:61:f9:54:c4:c4:6f:0a:c2:d7:
2e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:19:0F:E5:54:07:B8:DD:26:8E:DA:4F:9A:8C:91:EE:8C:73:86:E7
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/KRkP5VQHuN0mjtpPmoyR7oxzhuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.63.79.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:c6:ba:b3:e2:e2:fa:3d:11:27:21:57:b8:85:5f:d4:89:56:
46:fa:48:3c:74:d3:f2:8c:0a:b2:07:f9:9f:4e:f1:8c:b1:bd:
3e:b4:77:ca:ff:74:21:81:ee:93:89:ff:fb:05:cf:ab:b2:5f:
51:10:f0:83:06:8a:7c:53:42:a3:80:25:c8:0c:f5:0f:35:c1:
58:c6:ea:e3:05:df:d3:03:14:20:0e:5e:0a:08:43:39:ff:4c:
fd:37:cd:bc:94:93:4d:55:1b:27:17:fc:05:04:4c:e2:80:e3:
64:da:b0:7c:f4:be:77:b1:d4:92:c6:04:5a:4b:f5:29:d5:b5:
fe:83:df:c5:5c:43:f6:62:76:d1:ea:7d:2b:19:9e:03:4c:8f:
82:f7:48:a1:4a:5e:db:f8:7b:ea:11:50:33:89:35:1d:81:64:
02:e2:03:d5:79:b5:58:ca:45:4e:23:b6:c4:da:db:14:d1:5f:
b3:67:2e:95:c4:d0:83:67:f6:17:cc:21:1c:1d:b1:ce:64:22:
31:d7:04:87:f8:0b:48:28:40:6d:cd:6d:76:a7:c7:b5:ad:e2:
74:e1:2c:f3:e8:3d:d6:c5:08:6a:63:3c:06:d4:d4:e6:09:9f:
71:7a:cd:fd:c5:c8:81:da:ec:81:02:f5:fc:83:3c:ba:cd:50:
1a:a8:8d:a6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSelPoJluHJBXXHdCAfxHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj
ZDgyZWMwHhcNMjQwMTAxMTgyOTQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTE5MGZlNTU0MDdiOGRkMjY4ZWRhNGY5YThjOTFlZThjNzM4NmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHwzHMe2TqSSY/1ZLM8xe1DP9dRl
2CdYyYnzATd4RxhiwuT0e9QBschoRZDcBOFnZdTwdZpadBBtUebUKeZ4r7737Hck
gmlwjJ+SnBawOOlFujJupSEoiGGT38dHmA+9iwRXK4aQcY2Ip9ucvacN9az9bv8M
1wZ+ukri/C+CpjMmUuR02TcC+QwTvONVV1lNRcsfHd1DZCgxLsS4ZvSHE/fa9PCp
ttkrIEdBTQBGbTTjSOeSSeX6gbsM+GRWXN/xQD8RAXU0+HoH9GR/qrgKo5Jgm531
1USZp93mY0NK1gHHa1O6ZqB/pc0gfUI5Ua+MqYNhlLth+VTExG8KwtcuWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCkZD+VUB7jdJo7aT5qMke6Mc4bnMB8GA1UdIwQY
MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt
N2ZiYmFlNmY5NDM3LzEvS1JrUDVWUUh1TjBtanRwUG1veVI3b3h6aHVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3
LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJT9PMA0G
CSqGSIb3DQEBCwUAA4IBAQAuxrqz4uL6PREnIVe4hV/UiVZG+kg8dNPyjAqyB/mf
TvGMsb0+tHfK/3Qhge6Tif/7Bc+rsl9REPCDBop8U0KjgCXIDPUPNcFYxurjBd/T
AxQgDl4KCEM5/0z9N828lJNNVRsnF/wFBEzigONk2rB89L53sdSSxgRaS/Up1bX+
g9/FXEP2YnbR6n0rGZ4DTI+C90ihSl7b+HvqEVAziTUdgWQC4gPVebVYykVOI7bE
2tsU0V+zZy6VxNCDZ/YXzCEcHbHOZCIx1wSH+AtIKEBtzW12p8e1reJ04Szz6D3W
xQhqYzwG1NTmCZ9xes39xciB2uyBAvX8gzy6zVAaqI2m
-----END CERTIFICATE-----
Generated at Mon May 6 23:19:57 2024 by rpki-client on console-fra.rpki-client.org