Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/pkQup098lsAdPe3IZn_hFgCJEM4.roa
File: pkQup098lsAdPe3IZn_hFgCJEM4.roa (raw, json)
Hash identifier: 8M/0OrzLVSn+guw4A/fNaLkpQTHHnrzySkNwHg38nbA=
Subject key identifier: A6:44:2E:A7:4F:7C:96:C0:1D:3D:ED:C8:66:7F:E1:16:00:89:10:CE
Certificate issuer: /CN=90fc2c12ea17021ba8ace0621897f0856dac2559
Certificate serial: 018DB8E73250F2A8E69A3419A039D9FF6341
Authority key identifier: 90:FC:2C:12:EA:17:02:1B:A8:AC:E0:62:18:97:F0:85:6D:AC:25:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/pkQup098lsAdPe3IZn_hFgCJEM4.roa
Signing time: Sat 17 Feb 2024 21:09:35 +0000
ROA not before: Sat 17 Feb 2024 21:09:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204548
IP address blocks: 2.59.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 Nov 2024 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b8:e7:32:50:f2:a8:e6:9a:34:19:a0:39:d9:ff:63:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90fc2c12ea17021ba8ace0621897f0856dac2559
Validity
Not Before: Feb 17 21:09:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6442ea74f7c96c01d3dedc8667fe116008910ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:02:d6:0f:d6:7a:bb:1e:58:8b:87:9e:de:a8:
97:1a:25:eb:85:02:e6:e9:77:d0:f2:61:d1:b3:56:
ed:4f:70:5a:5e:5a:19:50:92:f9:57:0c:e7:f1:49:
26:20:2d:e3:f2:6d:04:6b:be:f3:e0:6e:80:e0:a9:
35:2e:17:fc:04:c9:f2:d6:2b:c2:4f:fb:45:d6:45:
68:aa:48:c0:16:08:27:ca:45:f2:0d:e0:41:f3:22:
1f:e2:a9:c5:bc:f0:17:13:28:df:29:f4:56:6f:18:
bc:e3:8d:14:cc:be:76:f2:8c:69:df:f6:e8:25:d5:
18:1a:20:3a:68:55:0f:b8:3b:29:d1:20:7b:1c:21:
30:94:d0:29:01:4d:9d:65:25:d8:90:93:fa:30:96:
3d:94:82:68:35:50:2c:9e:3a:c3:a8:17:ce:46:f7:
ed:55:b5:13:22:9c:ab:12:61:1d:3b:09:44:98:38:
36:cb:3b:b8:50:f1:82:da:22:de:35:8f:3b:6d:23:
2f:70:84:f3:7a:d1:91:09:2b:c7:93:a5:bb:ae:16:
2a:d3:6c:8e:a6:37:92:c3:28:17:f0:db:6f:6d:c0:
dc:cd:92:81:56:26:38:fd:48:0a:14:b6:bf:1c:79:
7a:11:a4:c1:52:b4:22:d4:ba:c5:e0:bf:68:76:99:
e3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:44:2E:A7:4F:7C:96:C0:1D:3D:ED:C8:66:7F:E1:16:00:89:10:CE
X509v3 Authority Key Identifier:
keyid:90:FC:2C:12:EA:17:02:1B:A8:AC:E0:62:18:97:F0:85:6D:AC:25:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/pkQup098lsAdPe3IZn_hFgCJEM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.118.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:39:e7:d5:45:b8:08:70:b8:02:29:bc:18:7a:79:2d:9c:7f:
1a:f3:08:93:27:4e:b1:99:ca:32:a2:92:d2:8c:e6:64:6b:a5:
b1:bf:30:1b:e5:65:ce:e5:0f:74:21:7b:a6:b9:66:fb:8b:8d:
64:8b:71:4f:86:12:64:22:de:5e:c3:77:b1:51:72:0b:2c:85:
b2:fd:45:4b:ba:99:c3:8f:82:c8:b0:da:8d:9d:f7:c1:b2:35:
c4:fa:f7:e9:80:bd:91:89:32:3c:c8:aa:d0:64:4b:fe:5f:a6:
aa:f6:6a:19:61:35:5d:49:e1:2d:4a:25:0b:e3:37:c6:5c:7a:
77:4b:35:08:2b:da:e6:a0:76:2f:1f:58:81:06:f5:29:a9:c1:
1b:5e:ae:e5:ff:0e:62:6d:62:04:71:a5:eb:cd:b9:c5:21:c8:
cf:7c:05:50:72:19:b9:fc:23:76:6b:6b:7b:43:73:e2:8f:78:
d4:a6:99:de:a4:6b:14:20:29:35:4c:c0:cd:1b:76:e8:5d:3a:
e0:12:c2:3d:25:48:19:73:15:6f:66:d2:9d:00:5e:14:47:cf:
4b:4a:b5:d3:db:a0:50:b5:03:e2:30:82:13:91:07:f7:b1:2a:
fc:51:5e:e9:2f:a9:a1:3a:ce:e1:08:47:3e:fa:89:d0:0c:8e:
65:3a:f7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 19:38:23 2024 by rpki-client on console-fra.rpki-client.org