Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/pn2eAdW-WePsJHlJHZcrRfQQVeg.roa
File: pn2eAdW-WePsJHlJHZcrRfQQVeg.roa (raw, json)
Hash identifier: XK9+M4KETIRTFVYlU1hypkKCyxmPtHM8AYxETPcpvKo=
Subject key identifier: A6:7D:9E:01:D5:BE:59:E3:EC:24:79:49:1D:97:2B:45:F4:10:55:E8
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018CC7952ADBC51DB3E18930EA6E387FD48C
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/pn2eAdW-WePsJHlJHZcrRfQQVeg.roa
Signing time: Tue 02 Jan 2024 00:31:30 +0000
ROA not before: Tue 02 Jan 2024 00:31:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208626
IP address blocks: 2.58.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:2a:db:c5:1d:b3:e1:89:30:ea:6e:38:7f:d4:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 00:31:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a67d9e01d5be59e3ec2479491d972b45f41055e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:aa:6c:f0:c0:55:0b:71:65:f7:2a:1d:9b:e0:
49:e4:2a:22:5e:cf:92:fe:f6:36:cc:c7:33:0c:6f:
d5:fa:2f:8a:59:fa:9e:15:6a:58:81:5b:6f:ce:89:
3a:86:38:dc:f9:bb:c7:00:2b:e0:4d:1c:5e:0c:60:
74:8f:b2:56:ae:84:ab:fc:52:39:b1:3c:c9:06:eb:
ac:02:79:d4:fa:96:c3:84:dc:92:3e:1f:a8:2e:b3:
5a:a7:52:c7:26:f2:bf:e8:d8:17:8a:a7:62:e2:46:
5f:66:8a:e4:34:b2:03:6a:b3:f1:ea:6b:4b:58:70:
cc:73:f6:c9:c8:76:c9:6f:5a:e2:b9:58:80:56:27:
57:53:78:db:93:74:2d:5a:92:46:d7:2d:9d:a2:79:
ce:cc:c5:d5:90:01:e8:66:c5:e1:55:f9:73:a5:55:
62:c3:38:b6:10:87:72:11:d2:e5:4b:a5:45:f2:10:
7f:14:4b:74:0c:5b:9c:87:46:4c:a6:a7:4c:0a:e9:
85:84:42:2a:3c:7b:d9:17:e5:5b:8d:00:5c:e5:28:
b0:33:44:67:db:b6:78:d5:07:f5:37:6c:6b:51:98:
b5:b0:dd:3e:1f:9f:26:73:c9:c2:e3:9f:07:25:f0:
bf:50:61:35:5b:c4:b9:f3:db:ab:41:1c:48:e1:19:
d9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7D:9E:01:D5:BE:59:E3:EC:24:79:49:1D:97:2B:45:F4:10:55:E8
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/pn2eAdW-WePsJHlJHZcrRfQQVeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.98.0/24
Signature Algorithm: sha256WithRSAEncryption
70:d5:1c:19:f1:b4:f3:06:20:bc:43:5e:2b:55:3d:47:71:78:
b2:3c:31:a0:62:f7:45:9f:8c:25:b9:a0:2c:9c:6f:43:e9:b2:
16:0a:4f:f6:cb:7b:fe:6a:b2:e2:a8:5a:57:e2:e4:33:42:85:
39:ad:85:21:dc:e6:32:ae:70:5c:66:7c:18:83:83:af:de:56:
40:d2:16:90:36:14:fd:fc:c2:2b:ec:29:a7:c4:fd:1a:c2:e3:
cf:e1:fd:9a:c6:2e:71:6e:e5:03:67:53:c5:88:1d:49:a9:98:
48:c1:65:77:5f:f4:4c:c4:a1:f4:e1:c7:45:99:65:37:8d:da:
75:87:e7:a8:4c:1c:a7:a4:2d:cf:c4:92:08:65:a7:69:49:f8:
1e:3f:2c:00:40:88:75:6c:58:3e:7e:6c:ce:36:20:31:3a:b2:
7f:7b:d0:f2:ab:07:18:71:00:e8:ee:e6:57:20:2e:02:0e:ad:
36:21:35:ec:4b:9e:e3:25:5c:4e:0c:a7:63:40:c2:cd:e0:03:
bb:00:e2:8a:60:70:a9:4a:cc:77:8b:f1:04:bf:48:ec:93:1f:
e2:f8:ad:e1:d2:5b:cf:bd:e1:4d:0c:00:ab:6e:b8:2e:4a:8f:
6e:78:be:68:bc:e6:0e:99:6e:e8:b1:ea:c8:d0:9f:fe:6e:9a:
2a:cb:9f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:04:50 2024 by rpki-client on console-fra.rpki-client.org