Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/2pn02Sm_Nz9GJj1CPU2lmN1iPVg.roa
File: 2pn02Sm_Nz9GJj1CPU2lmN1iPVg.roa (raw, json)
Hash identifier: duXyeqqQkFnSoOc3RYEDJ/yo7uPZwrercJ6L3+8EjPI=
Subject key identifier: DA:99:F4:D9:29:BF:37:3F:46:26:3D:42:3D:4D:A5:98:DD:62:3D:58
Certificate issuer: /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial: 018CF398B5A94119D4FB869CADE0A1A3EC8E
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/2pn02Sm_Nz9GJj1CPU2lmN1iPVg.roa
Signing time: Wed 10 Jan 2024 13:38:40 +0000
ROA not before: Wed 10 Jan 2024 13:38:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48806
IP address blocks: 37.77.57.0/24 maxlen: 24
37.77.61.0/24 maxlen: 24
37.77.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f3:98:b5:a9:41:19:d4:fb:86:9c:ad:e0:a1:a3:ec:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
Validity
Not Before: Jan 10 13:38:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da99f4d929bf373f46263d423d4da598dd623d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:de:9c:aa:b7:dd:04:bd:a5:8b:f6:4a:2c:d8:
0c:00:ae:2f:cc:6f:4d:3e:07:fd:56:87:80:c1:f7:
2b:97:74:a6:d4:77:17:98:80:27:71:d2:a3:0b:88:
c7:0a:64:c9:7f:5d:b3:96:9d:6c:ba:36:4a:e7:ca:
f0:60:76:68:27:62:1e:e5:d4:e8:3d:bf:8c:5d:7e:
d1:7e:33:58:16:81:28:8b:6c:ca:8a:61:2a:23:93:
48:88:2f:e9:c1:0d:ad:40:82:f2:ce:d5:c8:bd:80:
52:42:63:0a:fc:76:3c:81:ca:c0:a9:41:ff:c3:67:
3b:06:37:44:8b:79:3f:e8:75:46:9e:63:27:47:76:
2f:85:83:cb:98:55:45:62:16:0a:f9:09:f2:05:f2:
5d:32:fc:01:fd:51:39:a0:e5:b2:ec:61:8f:09:a4:
3d:59:96:cb:a2:38:a8:d8:ba:70:ac:f3:26:2b:d3:
20:fd:d1:78:f7:bb:3c:79:4f:e1:75:6c:b3:7e:9a:
45:92:3f:c2:5c:f3:e9:7b:13:2a:87:f8:a7:69:66:
22:e3:f8:81:dd:94:c1:55:1c:5e:f5:c5:7b:62:75:
32:4d:34:64:57:1f:cf:a1:31:9a:59:3d:e3:ee:07:
e1:90:a3:20:30:ca:22:f3:d5:34:09:10:81:b8:fc:
50:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:99:F4:D9:29:BF:37:3F:46:26:3D:42:3D:4D:A5:98:DD:62:3D:58
X509v3 Authority Key Identifier:
keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/2pn02Sm_Nz9GJj1CPU2lmN1iPVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.57.0/24
37.77.61.0/24
37.77.63.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:8e:f1:3f:31:9b:a8:86:10:9f:87:1d:3f:b4:8d:5b:6f:f1:
4a:ed:31:31:4f:f9:b6:f8:3d:21:41:cb:89:be:c8:60:a6:8f:
b9:43:73:6a:52:29:51:e2:83:0a:5a:f8:88:0a:d7:29:b2:b5:
80:d2:50:af:f5:c8:9d:8f:45:fd:51:7e:96:af:dc:29:3d:60:
50:56:37:6e:0d:3e:09:42:ae:3e:6d:c6:47:d5:8a:6d:f4:63:
4d:6d:99:de:49:24:31:b3:b7:60:57:78:27:0b:90:0e:4c:94:
99:84:bf:5c:b3:2f:21:2c:3e:50:5d:4d:3c:dd:49:82:5e:18:
9b:f2:30:a7:b6:78:94:4a:35:fa:04:7e:ca:5d:81:36:4d:7c:
25:06:4c:45:b9:e5:b1:29:f0:8d:bf:19:7d:ee:ad:2e:3b:54:
ca:a6:45:79:3a:7a:5d:67:3b:98:6d:9a:5f:e1:e5:2f:49:8f:
06:dc:31:e7:40:25:f0:e5:b2:97:72:34:74:85:55:05:32:fd:
d4:3f:fc:b5:d4:ef:11:3f:42:d7:f3:bf:e6:d1:c4:b3:90:a4:
9b:f4:c8:6d:53:dd:9f:62:be:7b:64:d3:d2:0c:b6:bd:d7:13:
13:d4:d3:1d:0f:af:49:54:bf:76:14:f2:b7:08:f4:de:bd:6b:
b5:c0:ee:bf
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzzmLWpQRnU+4acreCho+yOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MGIyODNhMDUxMzk0MGQ1MjBhNjgwYjhiM2QxNGRiYzM2
Nzc3MGQwHhcNMjQwMTEwMTMzODQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTk5ZjRkOTI5YmYzNzNmNDYyNjNkNDIzZDRkYTU5OGRkNjIzZDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjt6cqrfdBL2li/ZKLNgMAK4vzG9N
Pgf9VoeAwfcrl3Sm1HcXmIAncdKjC4jHCmTJf12zlp1sujZK58rwYHZoJ2Ie5dTo
Pb+MXX7RfjNYFoEoi2zKimEqI5NIiC/pwQ2tQILyztXIvYBSQmMK/HY8gcrAqUH/
w2c7BjdEi3k/6HVGnmMnR3YvhYPLmFVFYhYK+QnyBfJdMvwB/VE5oOWy7GGPCaQ9
WZbLojio2LpwrPMmK9Mg/dF497s8eU/hdWyzfppFkj/CXPPpexMqh/inaWYi4/iB
3ZTBVRxe9cV7YnUyTTRkVx/PoTGaWT3j7gfhkKMgMMoi89U0CRCBuPxQOwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNqZ9Nkpvzc/RiY9Qj1NpZjdYj1YMB8GA1UdIwQY
MBaAFDgLKDoFE5QNUgpoC4s9FNvDZ3cNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0Fzb09nVVRsQTFTQ21nTGl6MFUyOE5uZHcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jMDhlMWUtZjViZC00YTFhLThhYmEt
Y2NmNjQ1NGJiMjRjLzEvMnBuMDJTbV9OejlHSmoxQ1BVMmxtTjFpUFZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9jMDhlMWUtZjViZC00YTFhLThhYmEtY2NmNjQ1NGJiMjRj
LzEvT0Fzb09nVVRsQTFTQ21nTGl6MFUyOE5uZHcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAJU05AwQA
JU09AwQAJU0/MA0GCSqGSIb3DQEBCwUAA4IBAQBsjvE/MZuohhCfhx0/tI1bb/FK
7TExT/m2+D0hQcuJvshgpo+5Q3NqUilR4oMKWviICtcpsrWA0lCv9cidj0X9UX6W
r9wpPWBQVjduDT4JQq4+bcZH1Ypt9GNNbZneSSQxs7dgV3gnC5AOTJSZhL9csy8h
LD5QXU083UmCXhib8jCntniUSjX6BH7KXYE2TXwlBkxFueWxKfCNvxl97q0uO1TK
pkV5OnpdZzuYbZpf4eUvSY8G3DHnQCXw5bKXcjR0hVUFMv3UP/y11O8RP0LX87/m
0cSzkKSb9MhtU92fYr57ZNPSDLa91xMT1NMdD69JVL92FPK3CPTevWu1wO6/
-----END CERTIFICATE-----
Generated at Wed May 29 16:49:39 2024 by rpki-client on console-fra.rpki-client.org