Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/59OyOLTeei8L4e3SUodIs3s-bV4.roa
File: 59OyOLTeei8L4e3SUodIs3s-bV4.roa (raw, json)
Hash identifier: S2ch1WH5HeFEq6kN6rbAHd0sLXuL/imtc6VQg179sSA=
Subject key identifier: E7:D3:B2:38:B4:DE:7A:2F:0B:E1:ED:D2:52:87:48:B3:7B:3E:6D:5E
Certificate issuer: /CN=2ffbd9de8d89526c5a49a766c1f485f09f5a9166
Certificate serial: 018CC8011D2C5FC269DD541309B2CF758FDC
Authority key identifier: 2F:FB:D9:DE:8D:89:52:6C:5A:49:A7:66:C1:F4:85:F0:9F:5A:91:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L_vZ3o2JUmxaSadmwfSF8J9akWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/59OyOLTeei8L4e3SUodIs3s-bV4.roa
Signing time: Tue 02 Jan 2024 02:29:25 +0000
ROA not before: Tue 02 Jan 2024 02:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41561
IP address blocks: 193.201.244.0/22 maxlen: 22
195.78.70.0/23 maxlen: 23
2a04:83c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/L_vZ3o2JUmxaSadmwfSF8J9akWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:1d:2c:5f:c2:69:dd:54:13:09:b2:cf:75:8f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ffbd9de8d89526c5a49a766c1f485f09f5a9166
Validity
Not Before: Jan 2 02:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7d3b238b4de7a2f0be1edd2528748b37b3e6d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:18:2b:e7:23:5e:4b:dd:bf:b7:10:a8:56:a9:
70:c0:43:7d:0b:c5:41:26:fd:39:7f:f6:31:3a:11:
19:ec:d0:2d:92:c3:05:59:c0:80:d2:18:0d:86:75:
86:5f:15:3d:83:ed:11:60:95:74:4e:68:59:4b:09:
ac:34:02:61:9d:40:06:6f:ce:8b:fe:99:a4:e3:e9:
38:f8:8e:1f:32:50:f4:2a:d8:18:d2:8c:ab:de:72:
c0:d9:e2:6c:d6:15:31:9a:ff:e0:a1:71:f5:33:69:
e5:86:a4:09:bb:b8:f0:3a:d4:30:db:e1:b1:88:36:
28:2a:bf:34:7d:bf:6c:8c:f6:54:6a:50:3e:7a:bd:
86:8b:62:56:46:0f:fe:c2:ef:e4:66:94:d4:78:f5:
10:c6:a7:e3:c4:da:29:2c:88:23:24:dc:59:c4:ab:
4d:7b:f8:cc:03:c3:ff:3c:2f:ce:e6:99:84:39:da:
42:69:60:89:db:7d:d1:f2:91:71:81:ba:81:46:8a:
9c:9d:d8:2a:57:01:f4:ca:ac:6f:cf:3e:7d:69:8d:
9a:aa:f5:20:97:a8:ce:ef:ee:75:de:48:7c:f0:3a:
e0:ec:f0:98:b3:80:55:47:94:ce:4c:ea:70:ce:3a:
8d:8a:cd:da:46:89:e6:33:6d:f0:da:84:a4:91:85:
ae:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D3:B2:38:B4:DE:7A:2F:0B:E1:ED:D2:52:87:48:B3:7B:3E:6D:5E
X509v3 Authority Key Identifier:
keyid:2F:FB:D9:DE:8D:89:52:6C:5A:49:A7:66:C1:F4:85:F0:9F:5A:91:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L_vZ3o2JUmxaSadmwfSF8J9akWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/59OyOLTeei8L4e3SUodIs3s-bV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/32049c-6393-4106-b30e-1fc1e73f0607/1/L_vZ3o2JUmxaSadmwfSF8J9akWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.244.0/22
195.78.70.0/23
IPv6:
2a04:83c0::/29
Signature Algorithm: sha256WithRSAEncryption
5d:a9:ee:53:9b:e7:8c:0e:cb:f7:4c:36:7a:1e:87:7e:b7:f9:
c2:b0:44:09:af:ec:0c:c2:c5:db:9a:dd:09:87:15:11:eb:49:
32:cb:24:fe:e5:82:aa:08:ed:2c:04:85:17:bd:f5:2b:0c:16:
23:d0:ab:c4:ce:1e:c7:c6:5e:46:74:25:74:7c:8c:11:82:af:
09:bb:a2:ef:3e:23:80:f6:73:06:70:0d:8f:dd:98:6d:07:90:
93:2f:74:67:1d:2b:a2:1f:46:97:32:76:9c:32:12:0b:30:a1:
5e:6a:2c:ff:99:19:41:b5:0f:f6:d2:ec:af:d7:00:b6:aa:d0:
84:cc:1b:6c:71:02:39:61:cb:b5:92:2a:b7:d5:50:90:4f:e5:
db:88:4f:e8:f5:6a:9c:9d:ad:3e:a2:dd:03:cd:a3:a6:5e:23:
02:95:99:bd:32:02:35:cc:d3:1b:fb:55:50:5d:0f:08:0d:9c:
7a:0f:bd:ed:be:9e:f5:31:f3:a1:d4:e7:e8:c6:93:59:d1:5a:
68:31:84:60:1c:13:9e:b6:2f:b9:aa:2a:ec:e8:7f:98:3e:99:
53:90:df:25:ff:46:b9:c4:8a:2f:47:61:83:52:2b:f7:86:b7:
8b:79:4a:92:9b:31:4e:9e:98:7b:03:27:3a:f8:4f:9d:a8:6a:
6f:35:39:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:37:13 2024 by rpki-client on console-ams.rpki-client.org