Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/2b2lKA9X7MrA9IgFM1sQSfvIgMM.roa
File: 2b2lKA9X7MrA9IgFM1sQSfvIgMM.roa (raw, json)
Hash identifier: P/DG7UbyypPujnLV3uG+0rlFAVZBhWEsHG4Bx/Jl2Fo=
Subject key identifier: D9:BD:A5:28:0F:57:EC:CA:C0:F4:88:05:33:5B:10:49:FB:C8:80:C3
Certificate issuer: /CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
Certificate serial: 018CC8DF2F269385AE8D016D4D85DC3F4CD6
Authority key identifier: 13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/2b2lKA9X7MrA9IgFM1sQSfvIgMM.roa
Signing time: Tue 02 Jan 2024 06:31:58 +0000
ROA not before: Tue 02 Jan 2024 06:31:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202376
IP address blocks: 2.59.166.0/24 maxlen: 24
2.59.167.0/24 maxlen: 24
2a09:f541::/32 maxlen: 32
2a09:f540::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 12:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:2f:26:93:85:ae:8d:01:6d:4d:85:dc:3f:4c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
Validity
Not Before: Jan 2 06:31:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d9bda5280f57eccac0f48805335b1049fbc880c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a2:a6:49:d8:bb:bb:ac:d4:cb:6f:ac:cc:e6:
64:79:ed:bb:f4:8a:9e:8b:e3:aa:31:d3:2e:5e:9e:
12:f2:ea:ae:20:33:fb:6b:c3:fc:9c:f3:2d:44:34:
68:02:50:9a:9b:fe:b8:04:0d:ea:00:47:00:84:6f:
a0:25:1b:c0:0f:ec:62:0d:4a:55:b6:1b:7e:b7:23:
f4:7e:03:19:d0:74:9f:60:c1:aa:2b:22:fe:68:a7:
bf:0b:da:1d:a0:67:b2:7e:c0:93:38:db:3d:1b:ec:
a7:fb:66:c8:7f:58:51:af:e9:38:cd:a7:90:d6:0b:
35:13:17:50:97:bb:73:d1:09:f1:4c:60:29:ac:5e:
34:83:77:e7:00:cb:a5:5e:04:4a:70:c8:e6:cc:4a:
38:be:ea:07:c6:66:91:74:ab:89:df:d7:3c:f5:5f:
d2:e1:42:9e:f7:5e:cd:88:4d:71:41:1d:77:bc:8b:
9e:10:bf:44:9e:0a:7a:b9:44:d2:dd:b4:f9:0e:d9:
76:8c:49:8d:f9:d7:9f:f4:92:97:1d:c2:88:18:71:
c4:5f:3a:6d:66:e8:ed:24:20:3b:dd:74:07:82:61:
0e:54:79:e4:ad:59:c9:52:3a:16:eb:21:56:9c:d9:
35:0d:c4:86:a5:77:f2:14:c0:3e:0a:77:d6:a5:90:
ad:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BD:A5:28:0F:57:EC:CA:C0:F4:88:05:33:5B:10:49:FB:C8:80:C3
X509v3 Authority Key Identifier:
keyid:13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/2b2lKA9X7MrA9IgFM1sQSfvIgMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.166.0/23
IPv6:
2a09:f540::/31
Signature Algorithm: sha256WithRSAEncryption
2a:e4:08:d4:35:5f:e4:7c:33:ca:b9:ad:45:9e:5b:95:5e:41:
3b:44:af:d1:4d:d5:34:b1:23:26:4a:8c:31:06:e4:f0:7b:d8:
df:4f:80:b9:e4:01:42:31:cc:94:c4:5f:61:f7:00:7c:16:d3:
45:d7:21:20:00:af:76:90:f5:03:44:0c:fb:23:2d:71:23:ed:
60:c2:75:11:56:07:9c:29:75:c3:5a:e5:88:ff:e0:92:4f:96:
9e:43:84:60:30:e7:14:54:41:f3:64:82:9c:6f:28:f0:29:f4:
da:8e:26:0b:0d:b2:b6:25:50:45:59:97:57:55:39:a9:b8:50:
56:9a:1d:9f:16:85:8e:f4:89:39:a0:e1:ed:3b:90:bd:9c:5b:
a1:a3:8c:aa:72:87:3c:c8:e2:8b:02:f8:68:e5:6e:d1:1f:e0:
c0:2b:17:59:f6:5a:46:3c:fc:fd:12:a0:53:fb:f5:4c:09:70:
60:8b:2d:c7:44:79:c6:6e:f2:65:82:d8:9d:bc:66:b1:1e:ed:
26:98:6a:3a:2f:59:54:b3:dd:5e:b2:10:52:32:1e:99:43:3d:
78:d8:12:23:66:4c:df:fc:d1:25:68:14:44:92:bc:09:e1:3c:
e1:0f:e6:6a:37:1b:24:98:18:3c:4d:de:65:90:d0:53:97:27:
c2:ad:b5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 18:37:58 2024 by rpki-client on console-fra.rpki-client.org