Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/d7nb-1rZ7xNcBy0oAHS-qWytKL0.roa
File: d7nb-1rZ7xNcBy0oAHS-qWytKL0.roa (raw, json)
Hash identifier: BR/AjK9jKcVmzNRGlw12YSQWdBb+iPk03QBRoCX4CKM=
Subject key identifier: 77:B9:DB:FB:5A:D9:EF:13:5C:07:2D:28:00:74:BE:A9:6C:AD:28:BD
Certificate issuer: /CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Certificate serial: 018CCA29DC11461565FBEE636416CB2B5255
Authority key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/d7nb-1rZ7xNcBy0oAHS-qWytKL0.roa
Signing time: Tue 02 Jan 2024 12:33:10 +0000
ROA not before: Tue 02 Jan 2024 12:33:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210352
IP address blocks: 5.42.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:dc:11:46:15:65:fb:ee:63:64:16:cb:2b:52:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Validity
Not Before: Jan 2 12:33:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77b9dbfb5ad9ef135c072d280074bea96cad28bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fd:83:4c:7a:43:21:db:79:00:3b:8e:46:c6:
51:45:90:42:53:be:0d:fb:a2:5b:df:b2:a2:b2:23:
4c:14:5a:47:be:11:63:b9:0e:ab:bb:79:f7:c6:a8:
f2:5c:cf:bf:7a:15:0e:70:40:a9:b4:25:e6:35:ea:
bb:55:9d:92:79:ef:73:23:f1:0a:33:48:73:3a:57:
d2:99:03:a3:60:0e:46:4c:da:d2:60:2e:96:19:62:
19:e6:82:1f:8d:47:bf:d5:6e:fb:d4:81:8c:ce:4a:
5a:9f:97:13:59:9d:e8:c9:47:35:ca:5d:80:f3:bf:
df:d9:15:c9:8a:4f:50:5d:fa:42:f7:40:c6:e9:90:
09:c0:7b:39:6d:80:38:82:4c:23:e7:fd:c0:b1:0b:
12:01:85:c3:2b:1d:7b:16:52:68:ca:93:ad:71:74:
14:d9:6a:95:4d:29:14:35:5e:2b:d2:75:1a:48:2e:
b3:f6:d1:b5:f2:33:37:5e:11:a2:cc:b0:6c:c7:de:
cf:be:bd:15:91:01:15:81:7f:71:11:98:04:1d:9b:
a0:bc:16:3c:2e:bd:50:a8:08:f5:ba:ac:ee:76:b2:
d6:73:0c:82:4a:82:ec:00:ef:3b:63:eb:90:e0:e8:
17:6b:2d:8e:23:08:f1:0b:8c:94:d5:21:51:4d:a9:
01:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B9:DB:FB:5A:D9:EF:13:5C:07:2D:28:00:74:BE:A9:6C:AD:28:BD
X509v3 Authority Key Identifier:
keyid:96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/d7nb-1rZ7xNcBy0oAHS-qWytKL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.64.0/22
Signature Algorithm: sha256WithRSAEncryption
86:e1:87:9d:c3:54:9a:28:72:ee:ca:0f:11:68:a8:eb:52:7b:
e2:b1:cc:77:79:38:63:d5:69:4a:75:81:ce:09:98:b3:1a:d4:
63:b9:47:c7:75:1b:92:7f:17:42:a3:4c:b9:d9:2e:c3:c1:c7:
c0:6f:b0:0d:60:99:41:f2:41:87:ad:d6:da:a5:20:95:aa:6b:
1c:a1:fa:34:24:cc:6d:9d:60:3d:f1:18:6f:22:85:dd:ac:04:
28:14:19:08:c6:bd:08:87:94:83:4e:b9:29:8f:82:12:02:26:
04:f5:d7:64:34:fa:59:13:8c:90:c4:64:96:00:e7:9c:1f:aa:
53:d8:ff:cc:3e:d1:dd:3f:1e:47:18:7e:c9:2a:24:31:63:c4:
90:2a:1d:35:38:f3:68:c2:b6:90:dd:ee:c1:37:c9:77:3a:bd:
a7:8c:08:3f:6d:86:af:61:95:62:b4:b5:f7:6b:3d:02:ff:7e:
c3:69:c4:91:72:7c:0c:cd:8b:d8:33:b9:43:1c:bc:79:13:d1:
89:40:4f:2f:0c:8e:98:bb:41:1a:8e:a7:bf:38:d6:b4:98:da:
00:4b:b3:35:3c:ad:fb:eb:1a:38:d6:ee:9a:a9:fc:d6:4a:36:
2d:58:b4:72:3a:06:97:2a:83:93:aa:88:ec:8a:42:52:27:e1:
2b:d0:53:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 14:45:14 2024 by rpki-client on console-fra.rpki-client.org