Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/2q8unfbcBXnu5BDNThHJC53yKq0.roa
File: 2q8unfbcBXnu5BDNThHJC53yKq0.roa (raw, json)
Hash identifier: SGCyYlFgla8cdB7WiSg/xK1H1lYhnxXEojCI4UHfK9o=
Subject key identifier: DA:AF:2E:9D:F6:DC:05:79:EE:E4:10:CD:4E:11:C9:0B:9D:F2:2A:AD
Certificate issuer: /CN=954a2aee086174b01272fae779ad431eb092aeb7
Certificate serial: 018CC8DE2BC9A154736A104699A081D524DE
Authority key identifier: 95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/2q8unfbcBXnu5BDNThHJC53yKq0.roa
Signing time: Tue 02 Jan 2024 06:30:52 +0000
ROA not before: Tue 02 Jan 2024 06:30:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29141
IP address blocks: 37.247.112.0/24 maxlen: 24
37.247.118.0/24 maxlen: 24
37.247.113.0/24 maxlen: 24
37.247.115.0/24 maxlen: 24
37.247.114.0/24 maxlen: 24
2a03:402::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 14:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:2b:c9:a1:54:73:6a:10:46:99:a0:81:d5:24:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=954a2aee086174b01272fae779ad431eb092aeb7
Validity
Not Before: Jan 2 06:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=daaf2e9df6dc0579eee410cd4e11c90b9df22aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:55:52:46:2d:a8:6b:78:04:64:27:23:26:c5:
86:00:15:f9:7c:69:eb:39:d4:0e:6d:e9:0f:6f:f9:
66:33:6f:e4:3b:5a:8e:63:9a:97:bc:5c:4d:71:ed:
7f:f5:07:56:fa:8c:20:16:0a:15:d8:f9:2b:ae:79:
f7:06:d2:5b:19:77:a5:ce:78:e6:c1:5d:bd:3b:9f:
22:06:55:16:c4:ad:d4:bb:05:8f:71:65:ee:87:37:
57:52:a3:ab:65:47:dc:a9:b3:76:b3:55:e4:b3:3f:
c4:7a:bd:7d:c4:30:ff:d0:ae:e9:b5:21:d1:de:3e:
47:3d:5c:fd:3b:59:01:64:e0:c0:f8:1c:e8:c1:f9:
52:f6:70:3a:89:05:43:85:7f:5b:e9:41:02:ea:04:
76:07:f3:01:0f:ad:48:b5:59:7c:8f:39:8e:a7:be:
7f:c0:eb:28:e2:46:fb:96:b0:20:d0:37:a3:ca:a9:
97:ac:88:8b:8a:8f:e8:45:2a:18:7d:64:b1:f5:34:
e2:8e:1f:8b:14:ae:a9:b7:ab:ed:b7:a3:95:41:d1:
20:02:d1:39:82:f6:49:78:be:3b:08:59:46:ef:58:
38:3d:33:87:c3:cd:94:b9:ff:30:5f:6c:13:5e:2e:
12:50:02:28:d7:4e:53:45:78:6a:33:1a:8a:99:a9:
a6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AF:2E:9D:F6:DC:05:79:EE:E4:10:CD:4E:11:C9:0B:9D:F2:2A:AD
X509v3 Authority Key Identifier:
keyid:95:4A:2A:EE:08:61:74:B0:12:72:FA:E7:79:AD:43:1E:B0:92:AE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUoq7ghhdLAScvrnea1DHrCSrrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/2q8unfbcBXnu5BDNThHJC53yKq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235396-0e42-4377-855a-4565f04f8d85/1/lUoq7ghhdLAScvrnea1DHrCSrrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.247.112.0/22
37.247.118.0/24
IPv6:
2a03:402::/32
Signature Algorithm: sha256WithRSAEncryption
8f:3b:f0:82:73:3d:bd:22:a2:6a:5d:45:03:dc:04:2d:91:a4:
58:3d:3a:82:83:d7:9c:10:d1:c6:8c:7d:da:18:5d:49:fd:18:
fd:19:ef:2d:23:a7:30:47:de:ec:b4:63:8f:f0:9a:4e:63:78:
17:56:04:b1:06:53:7a:e7:b1:28:f1:9e:9d:d9:96:86:3c:4e:
85:eb:49:ad:b8:88:b1:38:ca:1e:bc:b2:2e:c4:e9:96:d3:da:
86:5c:ed:d5:a3:2b:7f:c4:33:a0:5d:01:54:e7:71:fd:c3:57:
77:ba:73:de:e2:79:00:96:36:f2:29:a6:c2:45:61:e9:4d:4e:
41:f4:21:c9:b9:9d:ae:dc:4e:e9:af:42:70:00:e3:fb:a2:8a:
ce:9e:48:19:27:c8:11:df:5b:26:d1:d5:be:ca:86:f5:6d:8a:
a4:19:e7:e7:c8:cd:34:47:05:1d:c9:e8:c2:67:70:ab:3a:ad:
78:81:7f:75:bc:34:b5:18:18:8b:08:cb:29:4b:2c:02:35:5a:
7e:9f:31:19:29:c0:bb:db:66:58:f7:63:f0:83:26:bc:2e:a3:
32:93:a1:19:59:43:29:d5:59:38:29:cf:73:03:21:45:2c:d7:
a5:c6:ed:fd:69:07:fa:c7:30:d3:17:e8:91:67:cc:0e:32:7a:
d2:09:fb:bf
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzI3ivJoVRzahBGmaCB1STeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NGEyYWVlMDg2MTc0YjAxMjcyZmFlNzc5YWQ0MzFlYjA5
MmFlYjcwHhcNMjQwMTAyMDYzMDUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYWFmMmU5ZGY2ZGMwNTc5ZWVlNDEwY2Q0ZTExYzkwYjlkZjIyYWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVVSRi2oa3gEZCcjJsWGABX5fGnr
OdQObekPb/lmM2/kO1qOY5qXvFxNce1/9QdW+owgFgoV2Pkrrnn3BtJbGXelznjm
wV29O58iBlUWxK3UuwWPcWXuhzdXUqOrZUfcqbN2s1Xksz/Eer19xDD/0K7ptSHR
3j5HPVz9O1kBZODA+BzowflS9nA6iQVDhX9b6UEC6gR2B/MBD61ItVl8jzmOp75/
wOso4kb7lrAg0DejyqmXrIiLio/oRSoYfWSx9TTijh+LFK6pt6vtt6OVQdEgAtE5
gvZJeL47CFlG71g4PTOHw82Uuf8wX2wTXi4SUAIo105TRXhqMxqKmammcwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFNqvLp323AV57uQQzU4RyQud8iqtMB8GA1UdIwQY
MBaAFJVKKu4IYXSwEnL653mtQx6wkq63MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFVvcTdnaGhkTEFTY3ZybmVhMURIckNTcnJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yMzUzOTYtMGU0Mi00Mzc3LTg1NWEt
NDU2NWYwNGY4ZDg1LzEvMnE4dW5mYmNCWG51NUJETlRoSEpDNTN5S3EwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8yMzUzOTYtMGU0Mi00Mzc3LTg1NWEtNDU2NWYwNGY4ZDg1
LzEvbFVvcTdnaGhkTEFTY3ZybmVhMURIckNTcnJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCJfdwAwQA
Jfd2MA0EAgACMAcDBQAqAwQCMA0GCSqGSIb3DQEBCwUAA4IBAQCPO/CCcz29IqJq
XUUD3AQtkaRYPTqCg9ecENHGjH3aGF1J/Rj9Ge8tI6cwR97stGOP8JpOY3gXVgSx
BlN657Eo8Z6d2ZaGPE6F60mtuIixOMoevLIuxOmW09qGXO3Voyt/xDOgXQFU53H9
w1d3unPe4nkAljbyKabCRWHpTU5B9CHJuZ2u3E7pr0JwAOP7oorOnkgZJ8gR31sm
0dW+yob1bYqkGefnyM00RwUdyejCZ3CrOq14gX91vDS1GBiLCMspSywCNVp+nzEZ
KcC722ZY92Pwgya8LqMyk6EZWUMp1Vk4Kc9zAyFFLNelxu39aQf6xzDTF+iRZ8wO
MnrSCfu/
-----END CERTIFICATE-----
Generated at Mon Jun 3 22:26:17 2024 by rpki-client on console-ams.rpki-client.org