Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/vllhUuYenAK9xKzheI4-iR0-2Ow.roa
File: vllhUuYenAK9xKzheI4-iR0-2Ow.roa (raw, json)
Hash identifier: 5kSPmkmllOFpJKHBJBnKpBrwQS5eKIpCoyHRBxRc5+8=
Subject key identifier: BE:59:61:52:E6:1E:9C:02:BD:C4:AC:E1:78:8E:3E:89:1D:3E:D8:EC
Certificate issuer: /CN=91b3f5d6f43e83071fa77e6d3ebbb79352f961b5
Certificate serial: 0191E5BD37A3F516348B7695B082C9B9C32F
Authority key identifier: 91:B3:F5:D6:F4:3E:83:07:1F:A7:7E:6D:3E:BB:B7:93:52:F9:61:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/vllhUuYenAK9xKzheI4-iR0-2Ow.roa
Signing time: Thu 12 Sep 2024 10:17:48 +0000
ROA not before: Thu 12 Sep 2024 10:17:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209835
IP address blocks: 2.59.232.0/22 maxlen: 22
2.59.232.0/24 maxlen: 24
2.59.233.0/24 maxlen: 24
2.59.234.0/24 maxlen: 24
2.59.235.0/24 maxlen: 24
2a09:fc40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 16:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e5:bd:37:a3:f5:16:34:8b:76:95:b0:82:c9:b9:c3:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91b3f5d6f43e83071fa77e6d3ebbb79352f961b5
Validity
Not Before: Sep 12 10:17:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be596152e61e9c02bdc4ace1788e3e891d3ed8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7c:bf:98:d6:5e:b4:c1:d8:1a:e4:f2:cb:92:
0a:da:27:90:18:b3:99:b0:6f:1f:d1:82:dd:ad:95:
04:b4:9c:6b:fd:6c:a6:be:c3:1b:15:fa:8e:71:df:
5b:f7:11:aa:cf:4a:84:d3:f0:f7:ce:a9:13:01:c4:
e6:35:32:86:24:aa:81:80:c6:8d:e3:50:c3:55:bb:
e5:2e:9a:20:ac:27:a8:79:f4:56:ba:ab:a4:70:65:
bf:bd:96:cc:1c:02:e7:49:95:bc:1c:ab:93:23:87:
fd:7a:a6:f8:50:5b:84:42:06:ba:58:ec:d8:13:d8:
99:92:d0:06:e0:f6:76:85:5f:59:8c:85:03:07:ff:
ab:d4:1a:5c:b9:c8:f5:c7:f4:0f:69:39:30:06:0e:
17:35:0c:de:dd:3b:93:cc:5c:c5:f9:91:4d:ba:6b:
cf:9a:7f:a1:dc:f3:a1:04:61:a2:63:a0:0e:b5:0b:
97:6b:bd:5c:62:13:4a:9a:d2:8b:e3:d8:04:9a:2b:
4b:16:17:7e:3d:45:d9:e2:88:56:b7:3b:c6:f1:70:
bd:ff:d7:4c:da:89:3a:76:39:ba:5d:0f:bf:14:d3:
95:38:5a:6f:d2:1f:8c:32:35:a8:57:fd:ab:53:15:
8e:21:7b:2e:8c:8d:16:84:4f:5c:e8:e5:14:78:d3:
68:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:59:61:52:E6:1E:9C:02:BD:C4:AC:E1:78:8E:3E:89:1D:3E:D8:EC
X509v3 Authority Key Identifier:
keyid:91:B3:F5:D6:F4:3E:83:07:1F:A7:7E:6D:3E:BB:B7:93:52:F9:61:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kbP11vQ-gwcfp35tPru3k1L5YbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/vllhUuYenAK9xKzheI4-iR0-2Ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/87a863-da6f-4981-9378-b2cd4e58100e/1/kbP11vQ-gwcfp35tPru3k1L5YbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.232.0/22
IPv6:
2a09:fc40::/29
Signature Algorithm: sha256WithRSAEncryption
21:5e:fe:ad:93:36:00:e7:07:1a:a9:6a:88:a4:81:47:54:e5:
84:5a:23:cb:b6:6d:7d:d7:80:23:0c:b2:5c:9c:ab:b5:6e:cf:
0c:2c:7a:31:cb:30:ca:48:2c:13:f6:d2:c5:8c:cb:75:50:b1:
35:a7:4e:5f:29:00:ad:66:cb:a1:ba:9d:d4:6f:01:ce:2e:d9:
61:06:d7:9d:13:9f:3c:e8:c7:b0:6d:42:d5:83:f3:c9:9f:aa:
7b:96:f5:11:de:89:48:04:63:c6:50:69:52:c6:b6:f2:f4:b4:
7c:7d:f1:69:cc:64:27:69:6b:af:ed:d7:8f:18:84:01:36:d2:
dc:03:40:f9:84:df:92:04:97:c3:01:aa:2b:07:89:35:81:e8:
38:75:a9:db:09:a3:3a:c0:c0:8b:4a:b2:0d:18:cd:d1:8d:68:
c1:73:05:4a:9e:17:82:e4:b6:3c:5d:08:83:bd:5b:47:2d:fa:
9a:bf:eb:32:d8:b1:3e:2e:2c:9f:a8:d9:0e:c2:55:01:5d:dd:
16:42:7e:07:6c:60:67:51:b6:07:c3:4c:1f:fb:bf:1e:aa:bf:
c9:67:a2:ba:1b:17:c5:97:40:62:0b:ff:cc:6f:33:5e:39:bd:
9a:ce:60:2f:18:f4:9f:54:da:17:36:cd:77:a4:76:70:10:04:
e0:f1:ae:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:27:38 2024 by rpki-client on console-ams.rpki-client.org