Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/n5-gLpHcEUxWUDFqXyJpQLvMY_0.roa
File: n5-gLpHcEUxWUDFqXyJpQLvMY_0.roa (raw, json)
Hash identifier: 9nPMkIjtGkPKa8G+u1z262NvQwSLGcAttL0ta2lF47A=
Subject key identifier: 9F:9F:A0:2E:91:DC:11:4C:56:50:31:6A:5F:22:69:40:BB:CC:63:FD
Certificate issuer: /CN=27f0b737715114ded20f68ef0347d9f752a0e0b7
Certificate serial: 018CC4937FE238180C6747E4603377351613
Authority key identifier: 27:F0:B7:37:71:51:14:DE:D2:0F:68:EF:03:47:D9:F7:52:A0:E0:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/n5-gLpHcEUxWUDFqXyJpQLvMY_0.roa
Signing time: Mon 01 Jan 2024 10:30:50 +0000
ROA not before: Mon 01 Jan 2024 10:30:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34841
IP address blocks: 46.252.48.0/20 maxlen: 20
185.77.124.0/23 maxlen: 23
185.77.126.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:7f:e2:38:18:0c:67:47:e4:60:33:77:35:16:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27f0b737715114ded20f68ef0347d9f752a0e0b7
Validity
Not Before: Jan 1 10:30:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f9fa02e91dc114c5650316a5f226940bbcc63fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:56:c4:01:ca:07:dd:ed:a3:b2:37:09:a3:4d:
9a:75:0c:1c:53:3b:ab:5b:57:23:eb:f9:40:87:de:
ab:dc:71:66:3c:fd:9c:b1:90:90:43:42:9f:36:c1:
b7:d1:50:81:27:db:e8:1f:5f:1b:97:9e:1c:7e:a9:
39:39:fd:3b:4a:7a:ba:ca:47:46:a7:fd:57:2d:67:
99:28:18:37:b5:65:94:94:81:f3:fe:dc:1f:94:d2:
22:ab:8f:32:b7:4a:21:a5:78:7a:b8:b9:72:8d:7c:
18:89:6b:d4:ca:ec:4a:9a:ce:c9:48:82:8f:c2:77:
08:91:0d:1d:65:6c:e2:e5:96:88:3d:74:61:20:48:
37:e1:ef:76:4f:5d:43:4d:01:6e:bd:9f:31:26:35:
50:0f:9f:5b:27:af:e5:40:47:e6:57:f4:6c:f9:14:
1b:2e:ef:f1:3b:39:63:48:32:99:1f:dc:5d:c4:ff:
94:d0:e0:a9:c3:46:d4:28:74:a1:73:6e:f2:ad:44:
29:b5:3f:4b:79:6d:8e:f6:f2:47:78:08:26:07:fb:
0a:36:4e:a7:ef:1a:55:75:fc:47:f5:4d:7d:97:0d:
02:5c:20:9b:6d:e4:5a:53:1c:71:92:b6:c6:95:5f:
41:12:7d:cc:c5:27:4b:6f:3b:62:34:4e:5e:7c:c4:
5a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:9F:A0:2E:91:DC:11:4C:56:50:31:6A:5F:22:69:40:BB:CC:63:FD
X509v3 Authority Key Identifier:
keyid:27:F0:B7:37:71:51:14:DE:D2:0F:68:EF:03:47:D9:F7:52:A0:E0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/n5-gLpHcEUxWUDFqXyJpQLvMY_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.252.48.0/20
185.77.124.0/22
Signature Algorithm: sha256WithRSAEncryption
37:33:9c:de:f1:5f:54:91:a0:65:ae:de:ca:27:07:c8:b8:74:
0f:0c:24:40:12:e6:75:22:ff:04:0b:83:32:aa:6a:6e:a2:0b:
8a:0d:b1:d4:9f:98:cf:fd:10:bc:a8:0e:fb:f4:8f:26:c6:8a:
ec:38:78:bd:de:06:b3:d5:39:98:a6:87:41:8c:cb:d1:f2:0b:
67:9d:a3:a9:71:99:eb:e6:98:be:95:6c:6a:03:e6:20:b2:d9:
47:c7:e4:bd:9e:f2:44:a6:64:73:99:5a:c9:32:56:8f:dd:ab:
b3:41:72:c1:b1:29:8b:6f:32:9a:56:96:bd:18:bb:61:ab:5e:
d8:75:1f:31:48:76:ff:68:0c:54:af:17:2f:fe:15:23:db:0d:
d0:eb:74:e2:1f:bf:d4:21:18:9f:95:e2:09:21:b8:a6:47:f6:
6f:40:cf:ac:45:a1:3b:77:e5:39:7e:85:0c:a5:d7:e8:95:1e:
d4:60:a2:fc:e1:8e:33:e0:e5:c5:69:15:6b:07:53:d4:fd:c7:
5e:dd:95:e1:79:29:49:70:8a:83:1d:c9:d5:aa:51:be:63:82:
04:b8:16:c0:ed:bf:f2:4f:f7:26:1a:d4:e2:b9:12:c8:6d:08:
d5:f5:2b:f8:ee:78:55:d6:5d:25:c2:0e:22:8a:79:9c:92:16:
61:b7:ad:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:53:26 2024 by rpki-client on console-fra.rpki-client.org