Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/zYOFBEyZz6nq7uoPpsTuXYY1OtU.roa
File: zYOFBEyZz6nq7uoPpsTuXYY1OtU.roa (raw, json)
Hash identifier: aOdOBWxQC+s5H/7MUj9Y3awk5/J0VZr/uSjsUYbv/Gk=
Subject key identifier: CD:83:85:04:4C:99:CF:A9:EA:EE:EA:0F:A6:C4:EE:5D:86:35:3A:D5
Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial: 018CC7945B64BE69EA758BAE3C4BFC6DFBD4
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/zYOFBEyZz6nq7uoPpsTuXYY1OtU.roa
Signing time: Tue 02 Jan 2024 00:30:37 +0000
ROA not before: Tue 02 Jan 2024 00:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51500
IP address blocks: 5.59.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 20:34:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:5b:64:be:69:ea:75:8b:ae:3c:4b:fc:6d:fb:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Validity
Not Before: Jan 2 00:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd8385044c99cfa9eaeeea0fa6c4ee5d86353ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a5:04:c8:80:dc:23:6d:38:6d:8a:1f:f0:16:
31:06:54:fb:9b:28:1b:1e:a2:52:cb:5c:c4:95:11:
35:ee:f5:1e:ff:e0:b9:44:bc:5d:ab:5d:8b:2a:a0:
2b:69:bd:64:dc:f9:16:a0:a8:3e:78:e1:8d:ae:4d:
b7:b6:db:9a:e9:03:60:30:ba:72:8d:04:f5:88:4f:
d7:e2:94:06:65:78:34:18:4e:b3:03:93:2e:e1:8d:
9e:33:9f:b7:e2:a8:ff:37:ff:03:8d:6f:fb:7b:91:
a3:68:27:de:25:cb:cf:60:72:9c:a0:6e:20:f0:ee:
62:5f:b5:ba:b5:6c:9d:72:d6:b5:c8:22:fb:4d:c2:
10:95:0d:07:1b:53:01:0e:aa:77:28:d2:07:9d:e5:
00:d8:af:31:57:52:d4:2c:33:2d:ed:66:d3:91:a9:
ca:04:f0:c9:a1:72:2e:b5:af:b5:ae:1b:30:0b:19:
2e:2c:fe:eb:69:82:45:be:68:74:b2:25:e8:ba:64:
09:d8:13:fd:fd:3d:a7:fd:6a:46:65:5e:f4:8a:1b:
04:2f:e8:67:ff:44:cd:e5:d9:96:36:28:08:9b:e2:
46:43:aa:3d:c2:f0:f2:dd:00:88:f5:26:41:27:87:
2a:ab:1d:6e:59:32:c0:06:ae:b0:ec:48:ad:ff:96:
59:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:83:85:04:4C:99:CF:A9:EA:EE:EA:0F:A6:C4:EE:5D:86:35:3A:D5
X509v3 Authority Key Identifier:
keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/zYOFBEyZz6nq7uoPpsTuXYY1OtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.59.198.0/24
Signature Algorithm: sha256WithRSAEncryption
61:04:7c:33:ad:42:35:63:6c:1f:7e:7f:3c:36:65:aa:62:72:
ce:18:3b:2f:9b:59:5e:12:73:a7:3b:f1:62:f6:41:89:4f:bb:
46:5d:bd:e0:a6:34:1f:6e:2f:45:ad:f8:6b:b3:67:51:d7:31:
ee:4b:d6:12:0c:33:63:3a:93:e9:35:2f:f9:10:12:9c:9d:11:
89:58:78:64:d0:3e:fe:96:45:04:e9:f0:01:42:c0:17:ae:86:
2d:a7:04:da:b7:36:0a:a6:e0:53:f4:25:e4:cf:e7:06:c4:75:
0b:09:8a:50:37:c9:00:15:d4:cb:f0:0b:f9:fc:0a:0a:48:3a:
c9:c8:b8:fd:76:af:df:ff:53:e3:15:4c:16:dc:9f:62:c4:d1:
0d:db:c1:bc:33:b1:10:1a:0e:dc:67:44:28:4d:b6:84:22:3b:
3f:f5:71:37:0d:d7:d5:5c:55:ba:19:81:83:16:4d:4c:b4:8b:
14:36:35:8e:f8:ca:d8:d8:4a:91:bd:e5:d8:89:a9:b8:75:22:
46:92:dd:d4:b0:a6:77:fe:bf:93:28:b1:46:45:cb:e5:04:b0:
60:1d:d6:f6:de:95:23:48:a7:a5:c1:4c:e3:7a:d6:62:02:5e:
d7:d0:c9:e5:4f:4d:6a:77:05:98:78:9b:e2:d7:55:bd:ce:a1:
1a:7a:f0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:22:33 2024 by rpki-client on console-ams.rpki-client.org