Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/ARnpmgSyWMR5cpDmrIoLAOdriag.roa
File: ARnpmgSyWMR5cpDmrIoLAOdriag.roa (raw, json)
Hash identifier: tmL05hYxUvk/9IneAkTNVi5xn6RPeCEZYu5T3XYF/Bs=
Subject key identifier: 01:19:E9:9A:04:B2:58:C4:79:72:90:E6:AC:8A:0B:00:E7:6B:89:A8
Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial: 01909CB881E00E69CCEBF776D7ECC9707AC3
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/ARnpmgSyWMR5cpDmrIoLAOdriag.roa
Signing time: Wed 10 Jul 2024 12:57:35 +0000
ROA not before: Wed 10 Jul 2024 12:57:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208841
IP address blocks: 2.58.204.0/24 maxlen: 24
2.58.205.0/24 maxlen: 24
2.58.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9c:b8:81:e0:0e:69:cc:eb:f7:76:d7:ec:c9:70:7a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Validity
Not Before: Jul 10 12:57:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0119e99a04b258c4797290e6ac8a0b00e76b89a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7a:aa:d9:b1:40:9a:dc:c6:b2:d6:eb:3b:b8:
54:97:0d:ea:68:a7:85:6c:d8:54:76:6e:4e:a1:ff:
82:bc:61:14:ea:81:31:5e:c5:93:5b:8b:5d:c5:69:
2e:52:09:39:4f:d6:75:51:3b:78:8f:d4:d7:4b:ba:
33:cb:02:3c:19:1b:2e:62:5b:26:90:4b:7e:2a:96:
3d:bb:86:af:f3:b8:8d:cb:79:89:6b:b3:78:4e:4c:
ae:3c:d1:fc:c0:53:48:7d:39:cc:d1:4c:ba:a5:e3:
35:f7:44:e6:27:e0:85:ff:cb:80:ea:00:09:79:2a:
df:ba:a3:1f:27:0e:2f:d4:04:c2:a4:25:82:9b:ea:
fb:ed:65:ce:8e:35:0d:88:bd:cc:2f:b7:6a:04:72:
1e:5f:3e:13:a6:bb:00:93:fa:a4:26:a4:0b:5d:99:
d4:38:e0:38:ff:79:b5:bd:2a:05:e9:97:19:96:8f:
a2:d4:36:7c:1e:22:26:49:b7:50:03:5e:0c:27:03:
69:77:ae:db:9f:cf:25:a6:f6:12:d0:54:aa:14:67:
fa:6e:a6:7d:7e:e3:d5:f2:3c:7f:fd:08:03:07:a3:
ba:c4:ca:1f:57:b7:05:3f:19:bc:4d:2d:26:24:ad:
f8:e3:4c:3d:f5:c6:12:b6:86:28:13:71:47:f9:8a:
76:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:19:E9:9A:04:B2:58:C4:79:72:90:E6:AC:8A:0B:00:E7:6B:89:A8
X509v3 Authority Key Identifier:
keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/ARnpmgSyWMR5cpDmrIoLAOdriag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.204.0/23
2.58.207.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:bb:d7:59:3e:f9:16:b6:f7:7a:fd:53:2a:00:e2:14:0d:56:
4c:03:56:95:81:f8:1f:c4:8f:33:88:a8:58:3b:26:a1:f7:24:
45:f2:f9:68:ed:b9:9b:ef:04:29:21:fe:06:70:6e:2a:fe:7f:
1a:e5:65:2c:18:b2:3a:aa:b6:ee:83:5e:ee:73:c4:67:a4:60:
c5:15:4c:8a:0f:b0:75:9b:b0:4c:f7:8b:10:d7:f1:d0:0a:07:
d1:b3:fe:59:c3:23:3b:01:83:f5:9a:49:45:54:b0:7c:fe:b6:
65:ef:46:a7:56:1a:6f:6c:fd:f9:91:f9:2c:ec:6e:db:a3:d1:
ee:ed:8a:70:70:ad:0d:47:eb:60:bc:cd:74:2f:72:79:5b:4d:
7c:20:0c:49:de:46:73:65:3f:96:6b:62:19:9e:a8:42:12:23:
0b:a4:53:ba:f4:b4:c9:6e:1a:b4:b0:72:09:50:d5:e3:b9:55:
1b:77:38:e4:14:7f:20:5b:6d:0c:48:3b:9f:2f:c2:d6:d1:de:
59:f1:be:69:88:cb:14:89:76:91:4c:cb:86:d8:42:03:0b:66:
1d:96:ff:f9:c8:2c:dc:35:32:60:fd:e0:7f:5a:14:b3:d2:3e:
0e:87:17:19:61:77:c8:7a:8a:99:8c:e2:87:7c:c1:81:a0:b9:
45:32:ee:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:12:42 2024 by rpki-client on console-fra.rpki-client.org