Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/17836a-d678-41ca-8fb2-5eb7bef9a7a8/1/sfCO6HC9ppANp35jFNhh6JQ2jy0.roa
File: sfCO6HC9ppANp35jFNhh6JQ2jy0.roa (raw, json)
Hash identifier: ZLdTa/NDVMaW27BUggBR77q2qtUdKzPeqvGRYpirP5U=
Subject key identifier: B1:F0:8E:E8:70:BD:A6:90:0D:A7:7E:63:14:D8:61:E8:94:36:8F:2D
Certificate issuer: /CN=fb744006eac3084bf88f128349b0e733bb3d79e3
Certificate serial: 018D8DBD2E4675B74151D3076E927B43F5C3
Authority key identifier: FB:74:40:06:EA:C3:08:4B:F8:8F:12:83:49:B0:E7:33:BB:3D:79:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3RABurDCEv4jxKDSbDnM7s9eeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/17836a-d678-41ca-8fb2-5eb7bef9a7a8/1/sfCO6HC9ppANp35jFNhh6JQ2jy0.roa
Signing time: Fri 09 Feb 2024 12:00:02 +0000
ROA not before: Fri 09 Feb 2024 12:00:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35133
IP address blocks: 2.58.57.0/24 maxlen: 24
2.58.58.0/24 maxlen: 24
2.58.59.0/24 maxlen: 24
2.58.59.0/25 maxlen: 25
2.58.59.192/26 maxlen: 26
2a09:e240::/48 maxlen: 48
2a09:e240:1::/48 maxlen: 48
2a09:e240:2::/48 maxlen: 48
2a09:e240:22::/48 maxlen: 48
2a09:e240:1337::/48 maxlen: 48
2a09:e244::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/17836a-d678-41ca-8fb2-5eb7bef9a7a8/1/1-3RABurDCEv4jxKDSbDnM7s9eeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/17836a-d678-41ca-8fb2-5eb7bef9a7a8/1/1-3RABurDCEv4jxKDSbDnM7s9eeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3RABurDCEv4jxKDSbDnM7s9eeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8d:bd:2e:46:75:b7:41:51:d3:07:6e:92:7b:43:f5:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb744006eac3084bf88f128349b0e733bb3d79e3
Validity
Not Before: Feb 9 12:00:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1f08ee870bda6900da77e6314d861e894368f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a0:33:3a:be:57:db:2a:00:ee:4a:10:ee:1e:
13:86:a0:c4:3c:b8:ae:73:a3:5e:4f:14:6e:c7:ed:
95:bb:d0:c1:4f:af:64:38:20:71:1f:c1:54:f1:63:
96:37:d4:2b:78:24:98:a0:83:62:81:2c:06:0c:0d:
e8:3b:4b:1b:9e:f8:a2:78:4f:da:42:47:cb:02:8b:
85:2e:9b:c9:39:23:c8:09:d8:b9:69:d7:2d:02:c3:
ff:bf:60:40:2a:e1:bd:7e:8e:26:aa:32:73:4c:a7:
2b:d8:f7:d4:11:ae:02:8d:cd:9b:3d:92:6e:b1:f0:
13:91:27:cc:68:19:f5:41:0b:4e:3f:da:3e:e6:58:
ef:9c:72:d5:fe:f6:92:87:25:58:16:ac:2a:f0:90:
5d:37:33:b2:dc:e1:55:25:39:f4:be:92:3b:93:69:
03:63:27:58:b6:79:bb:a1:e6:90:f0:13:5d:e4:d6:
44:4b:73:39:51:1a:69:33:44:75:af:1e:df:e6:c8:
3c:8d:60:47:75:07:a4:38:88:75:68:11:8d:67:bb:
19:e4:86:d7:34:33:eb:0e:fc:1b:e1:c5:c8:f7:58:
48:f2:43:d6:7b:d1:67:fa:15:07:de:08:8d:d1:97:
cd:da:6a:6e:c8:a4:fd:46:33:56:ad:40:3b:35:da:
35:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F0:8E:E8:70:BD:A6:90:0D:A7:7E:63:14:D8:61:E8:94:36:8F:2D
X509v3 Authority Key Identifier:
keyid:FB:74:40:06:EA:C3:08:4B:F8:8F:12:83:49:B0:E7:33:BB:3D:79:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3RABurDCEv4jxKDSbDnM7s9eeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/17836a-d678-41ca-8fb2-5eb7bef9a7a8/1/sfCO6HC9ppANp35jFNhh6JQ2jy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/17836a-d678-41ca-8fb2-5eb7bef9a7a8/1/1-3RABurDCEv4jxKDSbDnM7s9eeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.57.0-2.58.59.255
IPv6:
2a09:e240::-2a09:e240:2:ffff:ffff:ffff:ffff:ffff
2a09:e240:22::/48
2a09:e240:1337::/48
2a09:e244::/33
Signature Algorithm: sha256WithRSAEncryption
c7:cc:21:b5:7f:26:27:d4:62:33:c9:08:1d:f1:d4:2b:ac:01:
f5:4f:74:e1:da:93:d9:1f:8a:3e:d3:17:05:45:f2:7d:ef:62:
50:e4:7f:61:b6:8b:b7:5f:57:b4:5d:ed:22:26:72:28:be:10:
31:01:b1:8a:40:82:57:22:bf:9f:ad:8f:58:00:3a:60:be:7c:
c3:e0:dc:58:73:0c:50:79:d1:9c:9b:7b:13:c2:30:4c:3e:a4:
6d:81:dc:a4:91:8b:e1:f8:19:48:f1:4c:f5:33:44:41:a2:92:
57:6d:90:d1:6d:f2:3a:90:8f:d5:50:c4:d9:ae:dd:c7:04:96:
59:9a:74:0f:a6:ad:f4:78:45:30:06:01:4e:de:09:f8:ce:ca:
03:0f:a5:10:3d:7f:f4:9e:6a:5a:00:ff:cd:e8:92:fa:0c:44:
d7:e2:ec:46:07:17:15:a7:51:14:b4:ed:9b:6f:37:4b:9c:a3:
dc:69:2e:3a:ab:9a:6d:ec:fe:81:23:48:11:cb:bd:f2:e1:47:
ea:fa:be:5b:cf:4c:04:94:85:68:4f:0e:ce:67:4b:d5:4e:2b:
0d:91:8b:7a:ec:d1:71:f5:74:6d:9b:7b:15:7b:45:c4:bc:08:
d6:7e:ce:b8:99:ed:8a:70:75:6e:e5:af:2e:95:10:80:9f:6f:
77:09:ee:2c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 19 07:51:30 2024 by rpki-client on console-fra.rpki-client.org