Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/5uRWMNR-LW9U4xxPnUDHDTNIdTk.roa
File: 5uRWMNR-LW9U4xxPnUDHDTNIdTk.roa (raw, json)
Hash identifier: UvfgI7+FV40Bldx1eY9ZO4wWJCuVXb5sdP2HQ4TbB9k=
Subject key identifier: E6:E4:56:30:D4:7E:2D:6F:54:E3:1C:4F:9D:40:C7:0D:33:48:75:39
Certificate issuer: /CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
Certificate serial: 018CE464EB078355447D78C587F0FBF37667
Authority key identifier: 1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/5uRWMNR-LW9U4xxPnUDHDTNIdTk.roa
Signing time: Sun 07 Jan 2024 14:47:48 +0000
ROA not before: Sun 07 Jan 2024 14:47:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202685
IP address blocks: 2a05:7840::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e4:64:eb:07:83:55:44:7d:78:c5:87:f0:fb:f3:76:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
Validity
Not Before: Jan 7 14:47:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6e45630d47e2d6f54e31c4f9d40c70d33487539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:8e:a7:3b:b0:22:54:ef:4c:66:05:7d:7c:0b:
b2:bd:3f:cd:e9:41:06:02:f3:f0:44:4b:e4:fc:37:
65:7a:1d:b6:69:5b:ec:7f:78:6a:10:68:e1:48:fe:
b5:f2:01:09:95:8a:fe:41:d6:1b:be:71:61:86:39:
cf:6b:0a:3a:c3:cd:3f:0c:95:39:88:5a:a8:a4:4d:
a2:c1:05:42:1b:ce:f2:cb:a8:3d:0e:91:21:1b:e3:
16:7e:2c:bb:21:35:b1:2b:f7:9c:2e:a2:c0:2d:4b:
e2:f0:c4:2f:ab:95:37:41:1e:9a:a8:72:f2:f7:37:
2d:92:76:e4:5d:eb:3e:6b:4a:26:cc:41:4d:93:fa:
9e:0c:76:ed:ee:49:ae:f4:e2:76:de:4c:cc:01:b5:
9b:2e:fb:bc:b6:77:4a:d4:82:c9:12:ee:98:5b:3f:
06:03:6e:5f:9d:0f:17:36:15:9b:18:93:4d:d5:84:
ec:2e:1c:3b:93:03:fd:3d:36:92:43:5e:30:71:20:
78:aa:e2:02:40:d2:66:b6:59:01:74:08:25:84:0d:
ce:9e:9d:d0:3b:b4:b7:f6:d5:94:9d:3c:f1:20:45:
08:2c:d9:a8:7d:ec:bc:49:cb:a9:e2:af:7c:29:8a:
e5:55:42:90:1b:0a:3c:85:12:28:e5:b3:da:60:17:
a7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E4:56:30:D4:7E:2D:6F:54:E3:1C:4F:9D:40:C7:0D:33:48:75:39
X509v3 Authority Key Identifier:
keyid:1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/5uRWMNR-LW9U4xxPnUDHDTNIdTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:7840::/29
Signature Algorithm: sha256WithRSAEncryption
50:c9:39:44:b3:ba:51:66:6a:16:5d:fd:97:0f:98:f5:a3:4c:
9c:57:ff:ec:55:0c:e0:13:f1:50:7d:88:50:1d:16:f8:29:7a:
37:39:99:fb:23:a2:94:cb:10:18:ae:0e:27:49:a9:88:84:c2:
0a:32:85:24:0d:51:21:f9:1a:51:ef:30:4d:34:ad:c5:ad:49:
cd:36:dd:fa:5d:7a:55:2c:5f:3c:a7:7b:4d:5c:af:b6:03:25:
8e:c3:b0:e3:ec:22:f1:a1:a1:b0:ae:b8:64:29:03:54:2c:c9:
a6:c9:46:35:e4:5f:eb:8b:3f:2d:81:10:d3:40:e2:d0:fa:36:
29:e3:11:f7:3e:3d:3d:de:e6:93:f6:01:33:de:06:18:3d:56:
0d:98:37:52:0f:6f:b1:86:71:c8:a9:fd:64:2d:22:cf:f1:e0:
d1:88:32:57:3f:82:89:9a:8d:70:81:27:5f:e1:3c:51:2d:ed:
65:31:78:19:7e:dd:a5:0c:41:1d:48:3b:e3:e9:71:5a:6d:1f:
8c:dd:72:9a:8b:db:92:39:c2:5d:26:7f:c5:07:d5:30:c0:0e:
12:28:2a:90:30:10:7c:c0:20:62:fb:a8:10:6f:ef:41:d6:51:
d6:46:6d:a0:a4:a2:6c:83:85:e6:36:57:d9:49:70:bc:8d:88:
dd:fe:33:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 08:18:01 2024 by rpki-client on console-fra.rpki-client.org