Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/o39pGXona0O4f_TsLBlawIcYL9A.roa
File: o39pGXona0O4f_TsLBlawIcYL9A.roa (raw, json)
Hash identifier: 4Zne6ocEsolkkMtOIOZGNm80jFsZNtpxM5i38nr4SgE=
Subject key identifier: A3:7F:69:19:7A:27:6B:43:B8:7F:F4:EC:2C:19:5A:C0:87:18:2F:D0
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01932C46AFC23E88175E5AE89C65C2E87A81
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/o39pGXona0O4f_TsLBlawIcYL9A.roa
Signing time: Thu 14 Nov 2024 20:04:10 +0000
ROA not before: Thu 14 Nov 2024 20:04:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 2.58.170.0/24 maxlen: 24
88.151.56.0/23 maxlen: 24
88.209.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2c:46:af:c2:3e:88:17:5e:5a:e8:9c:65:c2:e8:7a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Nov 14 20:04:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a37f69197a276b43b87ff4ec2c195ac087182fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2c:a5:d0:91:cb:1e:17:0a:66:2e:3c:a6:82:
d3:8a:29:52:8b:09:02:f5:21:93:8e:6d:e6:fc:30:
f7:a4:a1:ad:b4:f3:b2:fb:d2:4b:e1:71:f6:78:5b:
7c:dc:c8:52:00:56:f6:3b:a8:9f:46:6e:2e:b7:a5:
4d:8e:01:ac:29:0d:d0:38:6f:1f:bc:97:eb:39:f6:
4d:43:c7:b1:7c:f1:6a:31:e8:dd:e0:34:7d:b9:64:
d1:53:3a:6c:0f:87:27:e4:69:de:46:3c:46:bf:82:
d1:6b:5a:0a:5c:f9:32:8e:03:ce:b3:83:63:de:c2:
c3:19:ac:32:4d:7c:bc:26:3e:e9:3a:fb:7b:85:41:
74:78:0e:a3:1e:4c:a1:03:5b:56:5f:9c:e8:63:b6:
d0:c4:1f:ee:f9:ab:37:fb:4c:a6:90:43:0d:23:b0:
d6:5b:bb:e9:18:1e:c4:ae:4e:6b:1f:d5:7c:b6:f3:
d4:e2:48:7a:0d:34:2a:39:8d:26:0a:0d:c4:22:18:
9d:3d:99:30:3c:bb:f6:65:22:e1:35:41:99:7b:9b:
31:65:4a:84:38:df:de:04:fd:11:98:07:53:1c:81:
8c:65:a3:4a:1d:8b:f0:96:24:84:15:5b:ce:03:4d:
9c:cb:ff:9b:9d:e0:e8:75:2b:c6:07:e8:e1:11:16:
78:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7F:69:19:7A:27:6B:43:B8:7F:F4:EC:2C:19:5A:C0:87:18:2F:D0
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/o39pGXona0O4f_TsLBlawIcYL9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.170.0/24
88.151.56.0/23
88.209.232.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:ac:ed:33:82:d6:5a:8a:8b:c8:1f:fe:e2:b0:cb:2e:e4:a1:
88:6f:e3:06:79:b7:6e:a4:71:f8:41:58:69:05:c6:7e:ad:17:
3f:58:cf:4f:83:66:d5:fb:45:4b:93:03:4e:e5:61:52:29:2d:
8b:52:0e:f9:b5:49:bf:68:35:e2:48:d6:8c:9d:f7:16:9b:37:
b6:44:73:ed:c2:84:05:49:e5:9c:50:4d:1e:2d:17:0b:d1:d8:
28:aa:d2:b6:2a:44:a7:33:c7:a8:8f:83:6d:59:b6:62:bc:c9:
f3:d6:89:a0:95:55:8e:52:51:39:7f:26:f3:ff:b3:44:5a:8d:
27:3f:7e:f9:53:ae:23:34:47:f7:13:ac:c8:2a:08:fa:43:c5:
e7:4d:73:23:a9:e1:ef:56:18:e0:10:87:78:5d:0e:7d:f6:58:
4d:19:ff:5a:19:15:37:dd:5f:6f:d2:a1:58:15:4d:72:9f:b3:
50:85:ed:cd:d8:cd:af:98:f6:34:4d:35:7e:b4:35:9a:80:8f:
b9:6a:18:6c:f9:03:77:25:7b:43:b9:46:e0:8d:f5:5c:e5:74:
07:b1:26:88:b7:be:ab:32:95:15:c5:39:9d:83:a9:70:da:d5:
3b:d0:40:90:04:db:e9:0e:b8:af:5e:41:d5:6e:7f:92:41:f1:
10:01:b8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:39:35 2024 by rpki-client on console-ams.rpki-client.org