Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS59895.roa
File: AS59895.roa (raw, json)
Hash identifier: SHpkxkTsO3Su9nKPeYTipV7zxwI/P5L3i6UfSdwtJ1g=
Subject key identifier: EA:AD:07:D1:4B:BB:B9:F1:EC:50:DF:8E:BC:3C:3C:33:F2:46:E7:96
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 2AC60DD5232A911349A816BFF48BD3034DF40B33
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS59895.roa
Signing time: Fri 16 Feb 2024 19:05:12 +0000
ROA not before: Fri 16 Feb 2024 19:00:12 +0000
ROA not after: Fri 14 Feb 2025 19:05:12 +0000
asID: 59895
IP address blocks: 185.170.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:c6:0d:d5:23:2a:91:13:49:a8:16:bf:f4:8b:d3:03:4d:f4:0b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Feb 16 19:00:12 2024 GMT
Not After : Feb 14 19:05:12 2025 GMT
Subject: CN=EAAD07D14BBBB9F1EC50DF8EBC3C3C33F246E796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6d:f2:86:ae:88:7f:06:b5:78:f0:4f:27:71:
ea:df:78:f6:36:ac:46:ac:b8:f4:74:0c:06:da:b5:
4f:d2:7b:cf:60:a9:f4:ba:8d:67:85:97:7a:47:4c:
e6:3b:41:90:cf:85:2a:37:37:36:89:6f:4d:b1:87:
e6:61:3d:f3:71:66:80:63:33:dd:fe:af:c2:99:73:
15:65:c9:7d:84:47:42:2a:87:9b:a7:21:a9:49:5f:
56:6f:e3:02:51:35:fe:d8:ad:20:50:e2:f1:07:60:
c7:44:6a:d3:87:a4:cc:67:47:09:3a:c3:36:91:10:
0b:db:9e:ac:a0:2f:2f:9a:38:b1:c2:33:bb:ec:10:
98:da:b6:dc:78:23:5b:72:b7:0e:d3:83:6c:1c:94:
f6:6f:74:4f:46:3c:a3:27:7f:33:41:dd:52:de:42:
e9:0e:7d:8f:8a:52:96:de:05:17:31:d0:82:65:27:
0b:fb:9c:62:2e:c0:d3:5a:8e:ad:41:44:72:b7:61:
c5:7c:a9:e7:52:d6:10:b9:14:b9:90:11:b0:e6:8f:
db:ef:32:ec:32:2f:c0:a9:85:3c:13:98:c0:d5:89:
37:d4:e0:2d:da:d4:aa:bb:79:03:87:18:d7:06:c1:
9d:3c:cd:16:eb:f5:2f:2e:8a:0f:66:23:f0:ba:85:
06:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AD:07:D1:4B:BB:B9:F1:EC:50:DF:8E:BC:3C:3C:33:F2:46:E7:96
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS59895.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.59.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:bc:92:83:7d:dd:60:68:2f:b9:24:2f:67:ae:dd:ee:86:1b:
24:8e:0d:42:80:ab:4b:63:4c:9c:55:c1:dc:23:1c:40:f2:ce:
b0:fd:fd:72:03:86:15:bd:f6:c5:a0:ae:0e:84:a8:80:fd:0b:
9f:f9:f7:a1:2d:e1:e6:42:58:c9:93:fe:14:5a:5f:ab:66:4a:
26:da:e7:2f:46:a5:91:fb:4d:26:67:d2:59:f7:4e:41:85:2d:
ad:6e:b9:0d:dc:91:90:3c:51:d1:f1:70:42:57:40:7c:1a:8a:
08:12:15:37:4c:5f:a1:bc:d4:76:6b:c6:06:cd:9b:29:c2:2e:
cd:f1:a9:b2:d3:87:ca:ec:2d:82:3a:85:15:34:da:96:87:68:
4b:26:44:17:a8:6c:61:49:f5:41:60:6f:c2:21:56:24:54:dc:
e3:dd:8f:b1:cd:e5:ef:7b:74:72:e5:e2:35:f6:91:6c:26:d9:
58:74:ac:e2:cb:d4:e3:b8:90:e5:08:e8:3a:f3:97:ed:67:ac:
5a:71:73:40:78:93:7d:98:b2:2a:d4:44:6f:ef:1b:c4:dd:ee:
30:de:fe:79:a5:a6:d8:a2:b7:d6:1b:a9:b3:b2:18:2f:53:49:
6a:bb:8a:a5:24:96:09:78:58:fe:97:76:02:ca:9a:c8:19:4b:
16:f5:4c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 02:42:23 2024 by rpki-client on console-fra.rpki-client.org