Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS59711.roa
File: AS59711.roa (raw, json)
Hash identifier: jox0mXu7qKOV+iE1GVNd76Zo23cWVCo4g495vFGSLsc=
Subject key identifier: 5A:A1:D0:95:48:43:1E:98:F9:9F:04:8B:85:28:BB:69:FE:72:AD:A4
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 10AA1155E9C70C5B1C8813DBCA86F119E93EA04D
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS59711.roa
Signing time: Fri 17 Jan 2025 14:27:35 +0000
ROA not before: Fri 17 Jan 2025 14:22:35 +0000
ROA not after: Fri 16 Jan 2026 14:27:35 +0000
asID: 59711
IP address blocks: 46.202.72.0/24 maxlen: 24
46.202.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 14:35:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:aa:11:55:e9:c7:0c:5b:1c:88:13:db:ca:86:f1:19:e9:3e:a0:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Jan 17 14:22:35 2025 GMT
Not After : Jan 16 14:27:35 2026 GMT
Subject: CN=5AA1D09548431E98F99F048B8528BB69FE72ADA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b0:9a:47:3c:cb:f5:b2:e0:f8:5d:8d:20:9e:
39:8f:32:14:a9:ae:1f:1b:a8:4e:66:3c:23:7e:eb:
db:51:d7:0e:2d:d3:c8:6a:84:5a:47:ed:9e:e9:8b:
8b:48:0d:e0:4b:b9:b0:8b:81:1a:d9:5f:dd:34:71:
60:ca:50:cf:9c:dd:4a:8c:7b:ef:95:f5:78:39:9d:
e7:40:d5:ba:23:47:86:ed:20:92:86:39:8b:2c:a4:
ac:02:3d:c7:0b:67:a8:19:ae:eb:8f:5f:90:df:60:
65:85:e1:d6:f8:63:4a:65:46:73:16:c5:7d:69:8c:
6d:ae:2e:78:ef:a8:ab:64:19:a6:01:3d:72:09:92:
ae:10:60:43:58:5a:4b:b4:15:db:16:13:af:65:1e:
dc:36:ea:cd:62:84:3d:54:c3:72:1a:c2:11:ae:1b:
ab:d3:67:68:af:07:ac:1f:f1:2c:f6:e9:8a:32:d5:
24:f0:99:8e:c6:d8:1d:99:ea:60:73:e6:87:72:63:
d5:32:ff:82:fe:f4:84:e4:cd:5e:81:4e:a0:e4:b1:
16:bf:b5:c6:91:d1:6d:22:29:b9:6b:b8:3d:4f:27:
0b:a8:1a:0b:f8:97:d8:13:7e:e3:76:48:f0:37:51:
e9:3b:b2:f6:61:e9:b3:1e:68:a4:45:b4:e4:d8:ef:
b4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A1:D0:95:48:43:1E:98:F9:9F:04:8B:85:28:BB:69:FE:72:AD:A4
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS59711.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.72.0/24
46.202.79.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:01:45:e8:fe:73:5b:ea:78:fa:0a:fd:2e:d5:65:d2:75:30:
ed:e3:6d:cd:9a:12:fe:d3:30:60:2c:ee:ba:c0:f4:d6:63:b8:
eb:ed:a8:ba:df:bb:10:e0:56:2b:4f:44:47:1e:19:60:f0:fe:
e1:a9:2d:8c:6e:6a:fc:fe:c1:52:e6:7d:15:ad:be:02:cd:7e:
b3:d2:5a:9f:4b:16:e5:ce:42:1a:19:d9:ac:3a:a7:77:95:19:
6a:12:2f:52:9f:e1:21:15:c0:fa:f3:07:da:57:c8:d5:6a:89:
7c:ec:6e:b4:f1:37:cc:2a:a9:64:be:54:e6:5f:35:0b:39:a8:
23:a8:60:7b:81:ba:c1:51:fb:4e:32:6b:71:14:ed:d1:98:fa:
5e:0f:10:98:db:14:bb:bd:a4:25:00:84:54:50:1d:53:15:ec:
bf:38:1e:65:0d:70:a3:aa:d1:74:4d:6f:5d:d0:3b:fe:74:70:
86:21:16:fc:6c:ba:18:04:91:f5:32:8c:7f:65:b4:69:de:2a:
8b:4f:55:cb:6d:bb:da:e5:90:8a:23:43:d8:a6:a3:0e:22:04:
86:b3:62:8a:e2:d6:78:49:c3:a2:4b:a8:36:a3:33:3f:90:ba:
f8:24:f7:72:c3:33:fd:0f:97:9c:8f:53:72:30:a5:81:23:07:
5c:ad:37:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 17:09:31 2025 by rpki-client