Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/d-2jQkAxvBfbJJcbCcAgURoyCSI.roa
File: d-2jQkAxvBfbJJcbCcAgURoyCSI.roa (raw, json)
Hash identifier: CPnuPbsySxvsEuQJFqpV3OMlqCbSfjBYPs88q43yKTQ=
Subject key identifier: 77:ED:A3:42:40:31:BC:17:DB:24:97:1B:09:C0:20:51:1A:32:09:22
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 018E6F8C3B8E666A3F46DA7ECE72A5A5C0AC
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/d-2jQkAxvBfbJJcbCcAgURoyCSI.roa
Signing time: Sun 24 Mar 2024 08:20:44 +0000
ROA not before: Sun 24 Mar 2024 08:20:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42031
IP address blocks: 77.105.128.0/24 maxlen: 24
77.105.129.0/24 maxlen: 24
77.105.130.0/24 maxlen: 24
77.105.131.0/24 maxlen: 24
77.105.132.0/24 maxlen: 24
77.105.133.0/24 maxlen: 24
77.105.134.0/24 maxlen: 24
77.105.135.0/24 maxlen: 24
77.105.144.0/24 maxlen: 24
185.225.202.0/23 maxlen: 23
185.225.202.0/24 maxlen: 24
185.225.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:6f:8c:3b:8e:66:6a:3f:46:da:7e:ce:72:a5:a5:c0:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Mar 24 08:20:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77eda3424031bc17db24971b09c020511a320922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:38:4f:44:d9:02:af:92:a3:d6:f6:d3:53:f5:
f1:ff:f6:cc:96:3f:37:05:2b:f3:9c:7b:d2:94:94:
10:51:da:05:c5:9d:bd:55:86:64:31:8f:62:7b:8d:
d7:0d:92:ec:03:ed:f5:3f:67:0c:7e:c9:09:b1:7c:
c5:50:5f:fd:5e:83:b3:b8:de:14:a4:ad:cc:2c:b3:
95:70:7d:58:db:ab:a8:7e:38:40:53:8e:62:5d:da:
6e:c6:41:74:ad:0b:61:6e:12:03:91:6b:be:d6:a6:
f9:34:3d:3a:31:36:66:33:d0:c2:0a:fc:cb:6f:32:
ae:20:f2:bb:a2:b9:a1:1c:ed:a1:70:06:6a:6f:db:
e0:62:05:cf:93:cf:80:25:cd:b8:f2:36:9a:56:b4:
6b:e5:c5:d1:96:6b:83:61:8d:7b:a6:ca:1d:24:0a:
02:c0:5c:ca:dd:0b:2d:94:64:44:d5:60:5b:c0:db:
31:71:78:ab:11:85:75:6f:96:40:4d:c0:af:74:d4:
eb:c9:73:45:80:f7:c4:90:a1:1a:c4:ac:56:13:14:
d2:95:a5:5a:32:89:22:95:88:f9:d5:c3:77:d5:fd:
97:ec:c1:b0:34:bc:69:87:e1:48:82:f5:6c:50:67:
6a:f4:b1:5a:ac:a6:3e:55:2c:81:c4:3a:7a:99:31:
5e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:ED:A3:42:40:31:BC:17:DB:24:97:1B:09:C0:20:51:1A:32:09:22
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/d-2jQkAxvBfbJJcbCcAgURoyCSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.128.0/21
77.105.144.0/24
185.225.202.0/23
Signature Algorithm: sha256WithRSAEncryption
c4:7a:0f:03:0f:1b:9d:74:de:16:47:4a:dd:f3:ca:2f:ef:c1:
eb:32:7b:15:62:a8:e0:b1:25:16:ff:80:ca:7e:3f:ec:6e:04:
92:14:8d:ca:92:c2:0f:ae:94:f8:34:24:4b:42:57:da:b4:44:
67:e6:40:9f:8d:ad:56:4e:e2:86:17:f6:b1:48:c3:b5:ca:e4:
12:84:ec:e3:47:b1:b6:e5:54:4d:a8:4e:43:2b:8b:c7:0d:95:
88:fe:28:be:56:81:a9:2f:90:d5:f9:8c:46:22:dc:2a:3f:4e:
c6:36:26:dd:61:9b:5d:15:f6:39:7a:77:3a:d7:2b:9d:27:27:
40:a6:ae:8e:d3:e5:78:b0:d3:ec:2a:6a:7a:92:f5:40:92:30:
98:05:bf:24:42:70:29:fe:5c:2d:4b:8b:06:a6:d9:15:c3:e0:
92:64:d6:de:4f:61:94:71:2d:7d:80:54:d9:59:aa:1a:3c:2d:
a2:7f:da:43:96:26:aa:61:0a:8e:b0:5a:0a:16:75:97:e7:86:
c8:b0:2f:a5:37:8e:25:1f:f2:b0:1e:7b:23:c4:d1:e5:c2:a5:
61:f3:1c:80:1c:b8:f9:c4:1e:37:f8:1e:07:80:85:a2:d9:9a:
43:45:da:ac:0e:c8:bd:c1:02:4e:d0:9e:74:43:d8:f8:ef:e2:
25:80:a2:9c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY5vjDuOZmo/Rtp+znKlpcCsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MTVmZWM0YWU3NmIyNGU0ZjAyOTkxNjQ5OTE3Yjk5Yjc0
MDA0NGEwHhcNMjQwMzI0MDgyMDQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2VkYTM0MjQwMzFiYzE3ZGIyNDk3MWIwOWMwMjA1MTFhMzIwOTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnThPRNkCr5Kj1vbTU/Xx//bMlj83
BSvznHvSlJQQUdoFxZ29VYZkMY9ie43XDZLsA+31P2cMfskJsXzFUF/9XoOzuN4U
pK3MLLOVcH1Y26uofjhAU45iXdpuxkF0rQthbhIDkWu+1qb5ND06MTZmM9DCCvzL
bzKuIPK7ormhHO2hcAZqb9vgYgXPk8+AJc248jaaVrRr5cXRlmuDYY17psodJAoC
wFzK3QstlGRE1WBbwNsxcXirEYV1b5ZATcCvdNTryXNFgPfEkKEaxKxWExTSlaVa
MokilYj51cN31f2X7MGwNLxph+FIgvVsUGdq9LFarKY+VSyBxDp6mTFeIQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHfto0JAMbwX2ySXGwnAIFEaMgkiMB8GA1UdIwQY
MBaAFHQV/sSudrJOTwKZFkmRe5m3QARKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy85ODc5NzktOTY5My00NWUzLTg1YmEt
ZWQ1MzU4YjZkYTMxLzEvZC0yalFrQXh2QmZiSkpjYkNjQWdVUm95Q1NJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy85ODc5NzktOTY5My00NWUzLTg1YmEtZWQ1MzU4YjZkYTMx
LzEvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDTWmAAwQA
TWmQAwQBueHKMA0GCSqGSIb3DQEBCwUAA4IBAQDEeg8DDxuddN4WR0rd88ov78Hr
MnsVYqjgsSUW/4DKfj/sbgSSFI3KksIPrpT4NCRLQlfatERn5kCfja1WTuKGF/ax
SMO1yuQShOzjR7G25VRNqE5DK4vHDZWI/ii+VoGpL5DV+YxGItwqP07GNibdYZtd
FfY5enc61yudJydApq6O0+V4sNPsKmp6kvVAkjCYBb8kQnAp/lwtS4sGptkVw+CS
ZNbeT2GUcS19gFTZWaoaPC2if9pDliaqYQqOsFoKFnWX54bIsC+lN44lH/KwHnsj
xNHlwqVh8xyAHLj5xB43+B4HgIWi2ZpDRdqsDsi9wQJO0J50Q9j47+IlgKKc
-----END CERTIFICATE-----
Generated at Sat Jun 1 18:31:47 2024 by rpki-client on console-ams.rpki-client.org