Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/XZ9YkwrRhymZvQl5KM5syAGTJZQ.roa
File: XZ9YkwrRhymZvQl5KM5syAGTJZQ.roa (raw, json)
Hash identifier: BUEUvZXcqucisyeWW27j4m//4N4HBLrV5ddbtCXnrAg=
Subject key identifier: 5D:9F:58:93:0A:D1:87:29:99:BD:09:79:28:CE:6C:C8:01:93:25:94
Certificate issuer: /CN=90fc2c12ea17021ba8ace0621897f0856dac2559
Certificate serial: 018DB8E732046EB9F7FFE3840E01CF0BB9F1
Authority key identifier: 90:FC:2C:12:EA:17:02:1B:A8:AC:E0:62:18:97:F0:85:6D:AC:25:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/XZ9YkwrRhymZvQl5KM5syAGTJZQ.roa
Signing time: Sat 17 Feb 2024 21:09:35 +0000
ROA not before: Sat 17 Feb 2024 21:09:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41436
IP address blocks: 2.59.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 Nov 2024 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b8:e7:32:04:6e:b9:f7:ff:e3:84:0e:01:cf:0b:b9:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90fc2c12ea17021ba8ace0621897f0856dac2559
Validity
Not Before: Feb 17 21:09:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d9f58930ad1872999bd097928ce6cc801932594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e0:3c:09:fd:84:48:da:ec:10:77:c5:02:51:
ec:00:a6:47:04:d2:44:3e:ba:34:86:a5:6b:fc:09:
3c:52:4b:9c:97:5b:ac:83:1c:2f:bc:30:4c:d9:ff:
3e:c7:b6:1b:fa:3e:0f:5c:87:31:cd:2e:a0:42:0f:
1a:fb:e6:63:42:0f:3e:b7:7f:0e:3f:2a:8a:90:f8:
7c:dd:ca:37:ce:77:14:38:e6:9f:70:4d:e8:58:fe:
be:c4:d0:1a:9e:c9:4c:e9:cc:ac:e5:68:80:53:3a:
06:ee:01:96:95:c2:be:00:b2:d9:71:29:5c:56:35:
fb:c1:d4:dd:50:81:42:24:c7:a2:0c:70:16:a9:e4:
68:7a:b1:1c:48:df:25:4a:2b:d6:77:17:63:07:a8:
7c:06:d7:a1:b5:95:54:45:59:5f:d9:18:29:fe:68:
bb:ab:4c:7b:43:74:fa:9c:a7:11:45:78:0b:60:8c:
04:84:b1:a1:52:3b:81:4a:99:05:3e:98:f9:d1:0f:
a6:31:09:c5:1e:8e:d2:21:41:58:2b:26:87:f9:57:
d5:19:35:ce:d0:71:2e:28:c9:f0:e3:e6:f2:08:b2:
c1:5b:40:0f:1c:52:fd:b8:40:40:74:d6:6e:94:31:
41:84:d5:a0:56:70:b6:e0:58:b6:f6:fc:79:fd:22:
f2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9F:58:93:0A:D1:87:29:99:BD:09:79:28:CE:6C:C8:01:93:25:94
X509v3 Authority Key Identifier:
keyid:90:FC:2C:12:EA:17:02:1B:A8:AC:E0:62:18:97:F0:85:6D:AC:25:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/XZ9YkwrRhymZvQl5KM5syAGTJZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.118.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:13:2f:5b:2d:19:2c:58:4a:c8:ae:ce:e3:8d:5a:75:ef:89:
2a:f6:0c:91:a9:66:83:0f:dd:55:9d:b0:d6:91:a9:f5:c9:94:
dd:4b:d4:c2:b4:e5:c2:b7:60:4b:75:a2:9d:d2:8c:59:51:85:
18:0c:49:37:64:69:cf:ad:e9:d7:0f:ee:6e:89:ac:2c:c2:68:
de:89:83:cb:83:a0:2f:62:1e:ab:6c:af:cc:41:a8:6a:24:79:
d5:db:4e:d9:f1:0e:e0:07:2e:40:b2:dd:0c:a3:f1:ee:00:94:
ab:2a:65:69:4f:03:13:96:64:55:61:ea:4d:c9:37:89:c1:d2:
a4:de:5e:74:cc:00:9d:1f:54:bb:33:69:d1:67:c0:4d:6f:5c:
2f:fa:04:a8:63:87:80:66:f5:68:78:c6:73:ff:25:cb:d3:64:
5d:da:f8:3e:ae:3c:d0:ea:31:01:ad:d1:fc:55:bc:5c:92:1d:
56:3b:fb:ba:55:54:e5:6b:d1:b3:88:6a:8f:13:7a:6b:d7:2b:
46:29:28:6f:7f:ef:4b:24:06:3f:40:37:b4:45:5f:13:be:d1:
44:23:fa:a3:10:9f:1a:85:a4:26:7b:39:18:ca:70:fc:85:4e:
4c:4a:0b:4a:0e:56:4f:87:5b:1a:e4:55:22:9c:09:eb:f2:37:
5b:2e:e4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 04:07:13 2024 by rpki-client on console-ams.rpki-client.org