Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/edgrfLVcWg3oxwzwlVSeadtYzPM.roa
File: edgrfLVcWg3oxwzwlVSeadtYzPM.roa (raw, json)
Hash identifier: TVYCRjSGkpKs8GP+aI3/S/K6hn8yBTOVKFnUFkc0uaA=
Subject key identifier: 79:D8:2B:7C:B5:5C:5A:0D:E8:C7:0C:F0:95:54:9E:69:DB:58:CC:F3
Certificate issuer: /CN=6eef3973d6e07681419bae867bd514545e7df5da
Certificate serial: 01919241AA89EF3C607A7717BA193CA94220
Authority key identifier: 6E:EF:39:73:D6:E0:76:81:41:9B:AE:86:7B:D5:14:54:5E:7D:F5:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/edgrfLVcWg3oxwzwlVSeadtYzPM.roa
Signing time: Tue 27 Aug 2024 05:14:22 +0000
ROA not before: Tue 27 Aug 2024 05:14:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 2.58.100.0/24 maxlen: 24
2.58.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.mft
rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:92:41:aa:89:ef:3c:60:7a:77:17:ba:19:3c:a9:42:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eef3973d6e07681419bae867bd514545e7df5da
Validity
Not Before: Aug 27 05:14:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79d82b7cb55c5a0de8c70cf095549e69db58ccf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d8:e6:d0:3d:5f:6e:37:45:81:fa:36:ea:e9:
2c:0e:df:cd:dc:b3:3a:85:dd:16:95:8f:e6:7a:08:
53:03:54:cb:22:e1:be:f8:bb:90:db:fd:f5:51:38:
17:be:d4:53:16:92:8d:b8:5b:66:5e:c3:b9:1f:30:
3b:79:1b:26:49:0d:f5:d0:37:fa:ee:74:91:c0:94:
9a:ed:f5:86:c2:f6:8a:1a:ec:0f:1f:37:ed:a7:a8:
a2:96:f3:bf:6f:a7:8c:8e:09:8b:3a:93:95:31:6f:
d5:93:02:a5:4b:12:e0:91:af:8b:fc:0f:ba:40:db:
02:e9:84:62:50:e6:7b:e1:a8:21:03:a2:1c:de:3b:
6d:0f:92:bf:ac:bc:1c:5a:4c:cd:60:fb:35:a0:8c:
d3:12:3a:11:a7:93:73:c4:66:35:ef:aa:b7:bc:52:
20:04:f4:ea:b3:aa:7a:fe:2b:7c:a3:7f:97:80:99:
e0:1c:5d:fe:0e:29:de:22:7b:3b:43:1d:73:b6:8c:
b6:9e:45:80:30:31:d5:19:3f:b4:23:c5:1e:08:6c:
2a:9e:f5:a3:73:cf:c4:36:fe:18:7a:f7:8e:f3:f2:
9a:d5:12:68:8a:ec:88:07:7c:3f:d6:12:e8:68:42:
87:5a:87:62:9c:2a:a6:be:6a:34:91:ff:25:25:96:
7b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D8:2B:7C:B5:5C:5A:0D:E8:C7:0C:F0:95:54:9E:69:DB:58:CC:F3
X509v3 Authority Key Identifier:
keyid:6E:EF:39:73:D6:E0:76:81:41:9B:AE:86:7B:D5:14:54:5E:7D:F5:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/edgrfLVcWg3oxwzwlVSeadtYzPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.100.0/24
2.58.102.0/24
Signature Algorithm: sha256WithRSAEncryption
09:de:47:d3:23:13:6b:8d:92:e4:23:0f:a6:5d:7e:eb:a6:5a:
ec:8a:52:62:2f:cc:85:fd:39:cd:a4:bf:d9:d7:f1:a2:83:bc:
9e:4c:28:7b:f3:5b:9c:17:62:8e:78:46:dd:95:ef:05:8a:fa:
69:e5:b0:31:22:a9:36:9a:47:73:0c:1f:b0:39:4e:82:6a:9c:
7e:fb:11:f9:d0:f5:64:70:7b:34:77:cf:7b:e8:39:65:da:ce:
9d:9f:f5:53:6d:e9:27:ac:05:b2:79:90:bc:ec:7e:77:40:15:
b4:1e:fe:c7:ef:4f:cd:3c:fd:80:26:c8:cc:51:bd:38:9b:df:
6f:cb:c1:f1:3b:74:95:6f:f2:2e:50:f0:af:cf:2f:9b:35:89:
80:41:b3:a1:6a:a2:86:f8:b4:7b:94:b2:bd:2c:fe:06:5f:85:
5e:41:5c:44:84:2e:ef:be:39:12:94:6c:6a:7d:a3:16:b1:7c:
8c:3d:ad:54:b2:0c:19:b7:46:ef:1c:90:d0:88:28:e9:fb:5c:
2b:87:8a:c8:10:e3:97:9d:57:45:f9:be:c5:5c:17:73:a3:ee:
c7:d5:2e:2d:b2:1e:09:3b:fb:3a:18:67:2b:f6:f3:8f:43:17:
62:d3:83:26:38:3c:ef:20:32:5b:49:f4:7d:30:95:96:67:52:
11:05:10:3a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZGSQaqJ7zxgencXuhk8qUIgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlZWYzOTczZDZlMDc2ODE0MTliYWU4NjdiZDUxNDU0NWU3
ZGY1ZGEwHhcNMjQwODI3MDUxNDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWQ4MmI3Y2I1NWM1YTBkZThjNzBjZjA5NTU0OWU2OWRiNThjY2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6djm0D1fbjdFgfo26uksDt/N3LM6
hd0WlY/meghTA1TLIuG++LuQ2/31UTgXvtRTFpKNuFtmXsO5HzA7eRsmSQ310Df6
7nSRwJSa7fWGwvaKGuwPHzftp6iilvO/b6eMjgmLOpOVMW/VkwKlSxLgka+L/A+6
QNsC6YRiUOZ74aghA6Ic3jttD5K/rLwcWkzNYPs1oIzTEjoRp5NzxGY176q3vFIg
BPTqs6p6/it8o3+XgJngHF3+DineIns7Qx1ztoy2nkWAMDHVGT+0I8UeCGwqnvWj
c8/ENv4YeveO8/Ka1RJoiuyIB3w/1hLoaEKHWodinCqmvmo0kf8lJZZ7sQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHnYK3y1XFoN6McM8JVUnmnbWMzzMB8GA1UdIwQY
MBaAFG7vOXPW4HaBQZuuhnvVFFReffXaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnU4NWM5Ymdkb0ZCbTY2R2U5VVVWRjU5OWRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8wODc1MTMtZDJkNi00M2M2LTliNzkt
MjJmMGFhYTgxMzI3LzEvZWRncmZMVmNXZzNveHd6d2xWU2VhZHRZelBNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8wODc1MTMtZDJkNi00M2M2LTliNzktMjJmMGFhYTgxMzI3
LzEvYnU4NWM5Ymdkb0ZCbTY2R2U5VVVWRjU5OWRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAAjpkAwQA
AjpmMA0GCSqGSIb3DQEBCwUAA4IBAQAJ3kfTIxNrjZLkIw+mXX7rplrsilJiL8yF
/TnNpL/Z1/Gig7yeTCh781ucF2KOeEbdle8Fivpp5bAxIqk2mkdzDB+wOU6Capx+
+xH50PVkcHs0d8976Dll2s6dn/VTbeknrAWyeZC87H53QBW0Hv7H70/NPP2AJsjM
Ub04m99vy8HxO3SVb/IuUPCvzy+bNYmAQbOhaqKG+LR7lLK9LP4GX4VeQVxEhC7v
vjkSlGxqfaMWsXyMPa1UsgwZt0bvHJDQiCjp+1wrh4rIEOOXnVdF+b7FXBdzo+7H
1S4tsh4JO/s6GGcr9vOPQxdi04MmODzvIDJbSfR9MJWWZ1IRBRA6
-----END CERTIFICATE-----
Generated at Sat Sep 28 18:40:38 2024 by rpki-client on console-fra.rpki-client.org