Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/T2ETEIIySEmQkXdDg13CoPNpBfQ.roa
File: T2ETEIIySEmQkXdDg13CoPNpBfQ.roa (raw, json)
Hash identifier: a3AkuNNMMmfunif+yW+zlHn9KZF7RXhfDPRE2a4cCWM=
Subject key identifier: 4F:61:13:10:82:32:48:49:90:91:77:43:83:5D:C2:A0:F3:69:05:F4
Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial: 019355950670310F564712AC2CCC04D53A2E
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/T2ETEIIySEmQkXdDg13CoPNpBfQ.roa
Signing time: Fri 22 Nov 2024 20:34:10 +0000
ROA not before: Fri 22 Nov 2024 20:34:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49985
IP address blocks: 5.59.194.0/24 maxlen: 24
5.59.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 20:34:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:95:06:70:31:0f:56:47:12:ac:2c:cc:04:d5:3a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Validity
Not Before: Nov 22 20:34:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f6113108232484990917743835dc2a0f36905f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:93:27:5b:a9:2f:38:d8:60:53:4c:c5:db:65:
f8:d1:c2:02:13:1b:51:1c:e7:8c:f1:df:31:68:1b:
ca:44:43:1a:60:f4:a7:ea:a4:dc:f4:b5:bf:c6:a1:
a3:44:7d:1c:31:ce:2e:60:7c:d9:f9:16:5f:97:2e:
40:a6:1d:94:7d:a9:2f:27:07:50:86:6a:34:dd:5e:
da:fe:af:dd:87:4a:2d:29:5c:46:4d:df:65:6f:0e:
9d:86:e8:ee:ce:db:20:23:e2:d4:1b:e9:78:13:08:
36:33:41:bd:a6:07:9e:ca:0d:af:26:e4:a1:72:46:
df:43:07:d2:6c:b8:1e:eb:ef:df:7d:81:fd:8a:4a:
ce:30:cf:e1:cb:b9:be:d1:8b:ac:03:f3:fb:fa:bf:
86:f1:f9:02:7e:bc:3b:71:1c:21:e2:2d:dc:bb:4c:
19:e1:af:f0:ce:10:e9:03:be:6c:67:49:9b:4a:0a:
6f:a8:79:03:61:70:9f:e2:db:db:21:91:9d:fd:0e:
0e:f7:60:e3:ca:fc:a5:5d:3f:3a:1b:e7:5a:0b:61:
64:ec:71:5f:3f:41:9e:48:6f:b5:22:45:a6:07:57:
6b:cf:93:e8:7d:ca:e4:bb:e5:e5:bd:2d:6b:67:71:
8d:1a:c5:35:81:d1:d2:a6:26:bc:82:c8:b3:66:ac:
31:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:61:13:10:82:32:48:49:90:91:77:43:83:5D:C2:A0:F3:69:05:F4
X509v3 Authority Key Identifier:
keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/T2ETEIIySEmQkXdDg13CoPNpBfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.59.194.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:2f:6b:34:e3:91:bc:48:e9:e0:56:e9:63:e7:8c:9c:c7:42:
db:09:db:09:38:22:42:45:b0:07:cb:74:ab:60:f6:a5:1b:63:
50:74:d4:99:7d:4c:33:23:8f:cd:f4:c4:b4:05:b0:ce:b9:e7:
22:3f:57:7c:7b:dd:4c:8a:50:45:58:27:3d:e1:be:da:d3:4a:
27:04:07:df:5f:ba:25:72:4c:a7:57:1f:41:e9:99:5b:6d:78:
e7:7f:54:b8:52:0a:a1:f4:c7:49:fc:ef:5b:58:17:b7:c1:ac:
f3:58:2e:3b:12:75:31:b1:36:ae:3b:2f:a9:72:21:54:c6:97:
78:d9:3a:9c:28:5e:b5:91:7e:1c:d5:96:c5:9d:63:65:94:9c:
09:cd:6f:86:d0:0e:9e:70:53:dd:90:0b:4a:02:13:27:80:1a:
53:b0:d8:25:45:2f:5a:09:fd:25:7d:24:52:bc:f1:40:3d:83:
d0:d1:ca:54:32:0a:66:39:97:92:2c:72:23:e0:db:12:04:e4:
34:cb:9a:68:4e:f4:ee:bf:3a:46:fd:68:ea:e9:28:a6:e0:95:
00:88:36:83:6b:6e:74:34:62:b3:f8:ea:3a:87:0f:1e:03:dd:
9d:c8:36:94:40:a4:54:19:f0:dc:69:36:c0:05:9f:33:38:0c:
c8:16:e1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:38:22 2024 by rpki-client on console-fra.rpki-client.org