Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/u5j-w6koTI1w-MwveI_x0rT-ay0.roa
File: u5j-w6koTI1w-MwveI_x0rT-ay0.roa (raw, json)
Hash identifier: gQTgZPcEOXTFI4ML0tCh67l8MTBl09iBxAa1VarPhx0=
Subject key identifier: BB:98:FE:C3:A9:28:4C:8D:70:F8:CC:2F:78:8F:F1:D2:B4:FE:6B:2D
Certificate issuer: /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial: 0194266BB6C39BCE1317539AEA2F646352A2
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/u5j-w6koTI1w-MwveI_x0rT-ay0.roa
Signing time: Thu 02 Jan 2025 09:49:40 +0000
ROA not before: Thu 02 Jan 2025 09:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210636
IP address blocks: 37.77.58.0/24 maxlen: 24
37.77.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:b6:c3:9b:ce:13:17:53:9a:ea:2f:64:63:52:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
Validity
Not Before: Jan 2 09:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb98fec3a9284c8d70f8cc2f788ff1d2b4fe6b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:37:2c:5d:9f:bd:a8:9b:31:58:2a:77:1d:09:
90:1b:5b:bb:49:75:ef:50:e7:e5:70:7f:61:2f:68:
df:8c:b7:96:27:51:c4:f5:1e:20:1a:57:60:1f:98:
e0:c0:f3:2e:13:21:58:73:6c:ff:d6:6f:08:bf:57:
a2:44:ec:8d:20:80:d2:d2:6a:89:6b:bc:dc:97:d7:
96:64:3a:48:47:ca:e2:77:8f:a8:84:b6:37:d0:cb:
02:a9:d2:10:9e:0d:f1:8c:5c:bd:d5:95:89:67:b9:
18:c8:82:21:a7:ab:e6:fd:54:8b:0d:48:32:d8:09:
ff:ea:f1:2e:9d:ad:df:3d:97:a2:8f:fa:16:29:c9:
46:42:6a:3b:68:d1:bd:fe:60:43:14:43:0c:27:ce:
d8:c9:d3:b1:f3:a6:7c:47:b6:c4:91:1c:85:58:cd:
7c:06:73:2c:9d:89:e8:27:ab:90:ff:9e:be:4d:8d:
ac:d6:8b:2a:b0:fe:5f:06:20:9c:0e:db:0f:3a:82:
1f:58:59:50:00:7b:5b:29:cc:7d:b2:20:9c:de:8c:
8b:25:55:cb:0f:e7:85:e1:96:3e:6a:87:bd:74:12:
15:af:c4:ae:96:43:92:66:fe:fe:ec:db:29:3e:ec:
3f:5c:c3:a1:dd:f3:ab:34:2a:f9:13:c2:5d:d9:c3:
13:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:98:FE:C3:A9:28:4C:8D:70:F8:CC:2F:78:8F:F1:D2:B4:FE:6B:2D
X509v3 Authority Key Identifier:
keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/u5j-w6koTI1w-MwveI_x0rT-ay0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.58.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:28:74:c4:5e:24:b2:75:e1:6e:05:c3:85:d3:56:b0:02:76:
11:e8:ac:fd:7d:dd:09:e9:e1:92:dc:68:23:0c:ea:a5:a4:30:
2e:f7:20:02:49:24:a7:ee:7c:60:19:1e:81:7f:f9:8e:bd:92:
5a:a7:fd:ee:65:e8:ef:4a:eb:e2:c3:da:b8:ad:d6:c5:8b:62:
8d:5d:54:ce:aa:45:0d:45:57:d4:2a:17:1d:b6:f7:62:fb:c7:
91:5b:71:68:96:99:fb:a5:34:d7:64:d2:44:25:7a:5d:12:84:
76:00:8b:68:e9:13:f5:42:65:84:c1:a7:ff:63:1a:4b:4c:db:
6b:b0:3c:de:91:5d:18:bc:1c:f3:82:17:34:01:18:44:f1:6f:
d5:f6:9a:b1:3b:b8:37:bf:8b:0c:56:8d:03:3f:5c:0b:79:27:
8b:d7:df:1d:aa:2f:78:73:5d:d8:b0:ac:f7:50:ea:15:c8:17:
69:9c:a1:1f:d7:03:15:0c:d1:7c:6c:5d:12:45:48:bb:db:4b:
32:ae:3d:ad:8a:0b:70:a5:31:e8:23:91:4c:27:1c:57:52:33:
0a:ce:6c:9a:26:12:bd:45:1b:98:e6:66:d9:a0:37:c6:c3:17:
c3:de:ac:d3:a8:72:f0:d0:64:42:9a:2c:27:7c:9e:a4:e5:99:
f4:88:a2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:31 2025 by rpki-client