Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/t024HYp43VxxHmwKzfRCaI9Hfpk.roa
File: t024HYp43VxxHmwKzfRCaI9Hfpk.roa (raw, json)
Hash identifier: lRlr5+Wo0XINDjLrcR8ynl7TS0PdgvkTC8xa1sMJV3k=
Subject key identifier: B7:4D:B8:1D:8A:78:DD:5C:71:1E:6C:0A:CD:F4:42:68:8F:47:7E:99
Certificate issuer: /CN=39704769d087d9fe8f790a6555cb4fbefcd24d38
Certificate serial: 019324813D90979682F7420628EAFC0D3B58
Authority key identifier: 39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/t024HYp43VxxHmwKzfRCaI9Hfpk.roa
Signing time: Wed 13 Nov 2024 07:51:09 +0000
ROA not before: Wed 13 Nov 2024 07:51:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35133
IP address blocks: 2.58.57.0/24 maxlen: 24
2.58.59.0/24 maxlen: 24
2a09:e240:2::/48 maxlen: 48
2a09:e240:22::/48 maxlen: 48
2a09:e240:1337::/48 maxlen: 48
2a09:e244::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:24:81:3d:90:97:96:82:f7:42:06:28:ea:fc:0d:3b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39704769d087d9fe8f790a6555cb4fbefcd24d38
Validity
Not Before: Nov 13 07:51:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b74db81d8a78dd5c711e6c0acdf442688f477e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:26:50:0d:c2:b5:0c:22:48:fb:75:39:55:da:
8c:c0:ca:8e:a7:72:d9:84:b2:d9:40:39:0a:d2:0c:
c8:8b:8b:86:bf:67:76:00:a3:e8:12:ac:b9:24:f7:
a4:f9:46:05:35:47:ad:d1:d1:c4:98:48:5b:5d:4b:
9c:38:77:b3:73:b0:1f:bb:9f:72:4d:07:0c:27:1b:
48:f2:a6:ba:ef:32:12:49:a9:0b:77:e7:f9:90:0a:
98:cc:7e:0f:6f:db:0c:b3:85:dd:ae:72:a5:2a:e8:
7f:32:bf:99:90:eb:29:7e:9b:28:61:43:2f:10:a8:
72:af:15:dd:83:79:82:2f:e4:33:ce:2f:ce:a3:4b:
0d:2e:df:5b:37:0d:e7:ed:4b:bf:da:1d:56:69:39:
49:bc:95:40:cd:85:a5:54:4a:79:91:1f:cd:ca:22:
ae:75:13:61:d7:8d:14:af:fe:94:ec:73:2b:0b:69:
76:6a:92:18:2e:c8:06:b2:85:00:90:28:b8:e5:af:
39:ac:e4:66:0c:e7:f3:c7:0d:f1:97:30:f3:c1:69:
e5:ef:5c:42:6a:9e:cc:c7:fa:f2:28:73:66:f5:24:
ca:3e:f2:aa:fe:79:61:62:f1:45:12:5e:9f:20:dc:
7c:9c:86:b9:44:24:ad:26:c4:09:6d:57:a5:8f:5d:
55:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4D:B8:1D:8A:78:DD:5C:71:1E:6C:0A:CD:F4:42:68:8F:47:7E:99
X509v3 Authority Key Identifier:
keyid:39:70:47:69:D0:87:D9:FE:8F:79:0A:65:55:CB:4F:BE:FC:D2:4D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXBHadCH2f6PeQplVctPvvzSTTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/t024HYp43VxxHmwKzfRCaI9Hfpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3eaeb4-fb99-4993-8122-e45350414ddf/1/OXBHadCH2f6PeQplVctPvvzSTTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.57.0/24
2.58.59.0/24
IPv6:
2a09:e240:2::/48
2a09:e240:22::/48
2a09:e240:1337::/48
2a09:e244::/33
Signature Algorithm: sha256WithRSAEncryption
ab:58:bd:4c:72:c9:11:67:7a:da:af:11:84:7d:08:8d:4f:e7:
d3:54:46:65:8f:57:e5:bd:1a:3d:7b:22:67:31:69:35:3c:2b:
8f:62:23:f8:8e:ce:81:58:3d:43:bd:07:2b:20:eb:24:02:b3:
5b:1e:8b:ed:38:85:e8:b5:17:ab:62:14:60:a7:78:de:57:60:
14:1f:c4:09:79:1e:25:54:f8:ce:81:a1:7d:91:d8:14:61:be:
1a:c8:51:cc:38:50:be:6e:9f:70:35:6b:3f:07:a3:e1:6a:71:
c0:d5:aa:e9:01:36:59:51:f9:dc:7a:43:bd:83:10:88:6c:02:
83:0e:1d:86:28:e0:45:5a:32:e6:89:1d:dc:fe:9c:35:0f:62:
f4:b3:b0:09:fb:17:2f:fe:b0:af:db:c3:eb:e2:79:ed:c2:3a:
f5:95:b4:6d:0a:c5:49:c8:9a:e2:f4:10:c6:de:86:b0:d8:d4:
ab:87:34:6b:34:1d:b2:1c:5f:31:01:75:45:16:58:ae:33:99:
ef:86:c3:c1:aa:4b:d0:0d:59:24:5b:18:bd:37:39:3c:73:75:
fb:fb:02:2e:87:52:ab:df:59:fb:54:c0:a5:b6:96:27:a9:3f:
f9:dc:d3:69:91:50:52:7c:d7:96:f2:3c:2c:bb:bc:5a:b1:d9:
b9:7c:72:24
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgISAZMkgT2Ql5aC90IGKOr8DTtYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NzA0NzY5ZDA4N2Q5ZmU4Zjc5MGE2NTU1Y2I0ZmJlZmNk
MjRkMzgwHhcNMjQxMTEzMDc1MTA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzRkYjgxZDhhNzhkZDVjNzExZTZjMGFjZGY0NDI2ODhmNDc3ZTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyZQDcK1DCJI+3U5VdqMwMqOp3LZ
hLLZQDkK0gzIi4uGv2d2AKPoEqy5JPek+UYFNUet0dHEmEhbXUucOHezc7Afu59y
TQcMJxtI8qa67zISSakLd+f5kAqYzH4Pb9sMs4XdrnKlKuh/Mr+ZkOspfpsoYUMv
EKhyrxXdg3mCL+Qzzi/Oo0sNLt9bNw3n7Uu/2h1WaTlJvJVAzYWlVEp5kR/NyiKu
dRNh140Ur/6U7HMrC2l2apIYLsgGsoUAkCi45a85rORmDOfzxw3xlzDzwWnl71xC
ap7Mx/ryKHNm9STKPvKq/nlhYvFFEl6fINx8nIa5RCStJsQJbVelj11VBwIDAQAB
o4ICOjCCAjYwHQYDVR0OBBYEFLdNuB2KeN1ccR5sCs30QmiPR36ZMB8GA1UdIwQY
MBaAFDlwR2nQh9n+j3kKZVXLT7780k04MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1hCSGFkQ0gyZjZQZVFwbFZjdFB2dnpTVFRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8zZWFlYjQtZmI5OS00OTkzLTgxMjIt
ZTQ1MzUwNDE0ZGRmLzEvdDAyNEhZcDQzVnh4SG13S3pmUkNhSTlIZnBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8zZWFlYjQtZmI5OS00OTkzLTgxMjItZTQ1MzUwNDE0ZGRm
LzEvT1hCSGFkQ0gyZjZQZVFwbFZjdFB2dnpTVFRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFAGCCsGAQUFBwEHAQH/BEEwPzASBAIAATAMAwQAAjo5AwQA
Ajo7MCkEAgACMCMDBwAqCeJAAAIDBwAqCeJAACIDBwAqCeJAEzcDBgcqCeJEADAN
BgkqhkiG9w0BAQsFAAOCAQEAq1i9THLJEWd62q8RhH0IjU/n01RGZY9X5b0aPXsi
ZzFpNTwrj2Ij+I7OgVg9Q70HKyDrJAKzWx6L7TiF6LUXq2IUYKd43ldgFB/ECXke
JVT4zoGhfZHYFGG+GshRzDhQvm6fcDVrPwej4WpxwNWq6QE2WVH53HpDvYMQiGwC
gw4dhijgRVoy5okd3P6cNQ9i9LOwCfsXL/6wr9vD6+J57cI69ZW0bQrFScia4vQQ
xt6GsNjUq4c0azQdshxfMQF1RRZYrjOZ74bDwapL0A1ZJFsYvTc5PHN1+/sCLodS
q99Z+1TApbaWJ6k/+dzTaZFQUnzXlvI8LLu8WrHZuXxyJA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 04:41:58 2024 by rpki-client on console-ams.rpki-client.org