Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/VAyNR0bQHdwGUadr3u61VCa7YQM.roa
File: VAyNR0bQHdwGUadr3u61VCa7YQM.roa (raw, json)
Hash identifier: 6wUuKJgltSuUqqfS+M7ls1lNS9JDD8fKyDM047c5nyg=
Subject key identifier: 54:0C:8D:47:46:D0:1D:DC:06:51:A7:6B:DE:EE:B5:54:26:BB:61:03
Certificate issuer: /CN=6eef3973d6e07681419bae867bd514545e7df5da
Certificate serial: 018CCA996E9DEE862A94C6512CE3844608F9
Authority key identifier: 6E:EF:39:73:D6:E0:76:81:41:9B:AE:86:7B:D5:14:54:5E:7D:F5:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/VAyNR0bQHdwGUadr3u61VCa7YQM.roa
Signing time: Tue 02 Jan 2024 14:35:01 +0000
ROA not before: Tue 02 Jan 2024 14:35:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212341
IP address blocks: 2.58.100.0/24 maxlen: 24
2.58.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.mft
rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:6e:9d:ee:86:2a:94:c6:51:2c:e3:84:46:08:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eef3973d6e07681419bae867bd514545e7df5da
Validity
Not Before: Jan 2 14:35:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=540c8d4746d01ddc0651a76bdeeeb55426bb6103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a5:66:e4:39:df:1a:93:dc:bf:67:78:e8:bb:
df:5d:96:9f:9e:d1:75:a1:9b:b2:27:60:01:3d:f7:
4c:e9:d4:d0:3e:5f:00:59:1d:7d:96:83:a5:29:c0:
5f:81:c2:ec:9c:f2:90:a3:56:43:3c:51:79:82:9d:
17:d5:a4:7a:b6:57:97:e5:79:41:82:02:fa:44:c4:
71:67:2e:92:57:e0:7d:4f:08:44:4f:5d:18:29:ce:
6e:44:21:0c:a5:5d:2e:d7:cf:ee:b1:36:73:87:fd:
a2:3b:80:d8:23:60:37:b2:ea:cb:95:ea:0d:f1:57:
0e:00:d5:b3:2f:12:d4:26:f5:e9:b5:fe:4b:2d:0e:
69:9b:57:9e:a3:f3:7b:b3:cc:a7:ab:a7:44:90:9e:
c6:a7:d2:f9:b6:dc:94:c6:fe:5a:c6:ce:8c:6e:3c:
37:da:23:15:fe:91:1f:cf:f0:17:3f:49:00:13:0b:
81:5c:c2:6d:c4:79:d0:8c:f2:7a:b1:fc:65:1f:89:
22:80:9e:0f:d8:c2:40:2b:33:5f:a4:9f:43:e2:35:
55:be:91:57:7a:c3:5a:fb:f4:d6:26:48:ac:e5:79:
d7:27:e4:a2:f6:a7:3f:88:ea:ee:53:c0:0c:72:b1:
d5:61:f2:b8:7e:ff:9f:25:41:98:2b:b6:4b:e6:61:
83:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:0C:8D:47:46:D0:1D:DC:06:51:A7:6B:DE:EE:B5:54:26:BB:61:03
X509v3 Authority Key Identifier:
keyid:6E:EF:39:73:D6:E0:76:81:41:9B:AE:86:7B:D5:14:54:5E:7D:F5:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/VAyNR0bQHdwGUadr3u61VCa7YQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.100.0/23
Signature Algorithm: sha256WithRSAEncryption
73:ef:38:19:60:44:1b:d8:3a:39:48:6d:92:ba:4a:fb:c5:2b:
5b:b1:bb:c8:83:b9:56:87:31:59:80:44:21:0e:df:a3:19:8d:
53:c8:32:f7:97:98:f7:15:eb:0d:17:c3:c9:93:17:32:87:8d:
6a:0c:b7:c2:69:4c:ae:92:ac:77:ca:dc:31:57:e2:bf:3d:24:
5f:ee:ba:c8:08:a9:af:52:e9:f1:93:69:c2:b2:23:76:50:4b:
77:f4:fb:76:28:ba:ba:ce:fa:86:70:07:c3:f5:22:d9:e9:37:
a2:82:7e:1a:85:84:68:02:ae:dd:62:9d:4e:be:30:4a:df:c2:
bb:0a:a7:5f:90:48:00:5f:b4:79:b4:4f:ba:3f:df:0c:b3:03:
7b:22:f4:13:65:6a:4b:4f:d8:2a:0d:c8:b3:62:3c:a8:f3:0a:
48:62:e0:47:c9:40:64:5a:04:95:5f:73:34:25:6b:10:cc:e4:
83:bc:82:7d:05:c7:07:24:6d:a0:95:c6:9c:96:26:3c:09:c6:
3c:71:9a:d9:e8:63:5c:66:6b:5d:11:b6:60:cf:8b:af:72:97:
da:0d:da:01:ce:b4:ee:fa:22:e6:3f:f8:b2:f3:e9:21:a0:5e:
f3:a1:d4:03:c8:dc:6c:b4:81:7b:64:b0:c8:73:c2:dc:db:b5:
fa:c3:28:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:30:26 2024 by rpki-client on console-fra.rpki-client.org