Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/2y6_e_HcXYny0db7WYBVMhTw8IY.roa
File: 2y6_e_HcXYny0db7WYBVMhTw8IY.roa (raw, json)
Hash identifier: iADkeOa85IxN+IyZ9ZGDG2vYAvSgj39sBmLtsut2GiU=
Subject key identifier: DB:2E:BF:7B:F1:DC:5D:89:F2:D1:D6:FB:59:80:55:32:14:F0:F0:86
Certificate issuer: /CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Certificate serial: 01905DE6168D3DF603864F073DD6D8BB6793
Authority key identifier: 5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/2y6_e_HcXYny0db7WYBVMhTw8IY.roa
Signing time: Fri 28 Jun 2024 08:11:18 +0000
ROA not before: Fri 28 Jun 2024 08:11:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12337
IP address blocks: 45.91.196.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 14:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5d:e6:16:8d:3d:f6:03:86:4f:07:3d:d6:d8:bb:67:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Validity
Not Before: Jun 28 08:11:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db2ebf7bf1dc5d89f2d1d6fb5980553214f0f086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7e:2c:01:25:d9:79:54:dc:72:7b:15:6c:f9:
34:6c:a6:60:21:94:69:8a:d6:0c:71:53:9a:50:55:
e7:ae:13:62:fe:4b:cc:df:e9:0b:a1:01:97:23:04:
ff:41:19:6c:f6:ad:34:00:a2:fb:4a:cf:e2:72:e0:
68:da:28:fc:d5:8e:09:d7:6c:bf:69:51:d8:65:fa:
ef:df:45:31:50:19:c0:0c:bf:02:61:00:b1:9a:a5:
3d:76:16:75:90:bc:57:fc:d6:cc:49:c9:f5:26:f3:
91:ea:82:8f:c9:01:7f:18:51:09:89:55:eb:e6:ed:
7c:dd:d1:7b:82:e8:cc:54:87:6b:a8:2e:df:8c:1f:
00:e5:cb:de:8c:d5:14:22:11:b5:69:b5:9e:da:c9:
e1:c3:99:9a:5a:1b:3d:c8:9e:2a:a2:e8:1b:9c:00:
4b:9d:3d:14:06:44:eb:54:83:10:31:9d:7c:b4:6a:
2f:41:13:02:ed:a7:00:b9:0c:14:8b:d2:af:4f:99:
d4:63:a6:ee:ed:c4:d1:da:30:e5:83:b1:b6:b4:87:
16:2d:62:13:27:01:19:31:ba:09:8e:53:82:3e:91:
7e:db:b0:77:4e:97:1a:70:d1:7c:96:2d:a0:56:29:
3f:6e:62:80:8b:82:9d:ba:74:e2:c7:b4:8f:4b:56:
a9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:2E:BF:7B:F1:DC:5D:89:F2:D1:D6:FB:59:80:55:32:14:F0:F0:86
X509v3 Authority Key Identifier:
keyid:5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/2y6_e_HcXYny0db7WYBVMhTw8IY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.196.0/23
Signature Algorithm: sha256WithRSAEncryption
39:2d:e4:9f:7b:7e:6d:58:93:86:f7:fe:93:be:ca:68:88:57:
a9:42:71:21:c6:17:a2:27:c3:0e:be:42:18:95:4e:20:cb:58:
45:a1:f2:02:f7:5c:4e:e0:32:2d:00:60:04:48:da:00:d9:dd:
d3:e9:9e:37:7c:4a:5c:45:e8:19:82:3d:d0:5e:a7:d4:23:83:
67:33:50:0c:84:65:e4:e3:04:fb:04:dd:01:f1:f4:50:e0:38:
5f:db:21:86:f6:dc:1f:f0:cd:a3:b3:02:f3:23:4a:04:31:44:
05:ab:a0:24:ec:32:90:a4:72:02:b6:4d:aa:94:9d:81:d1:43:
76:37:01:cd:eb:94:50:d2:50:62:69:e0:ef:5c:19:93:75:fd:
a5:e5:82:00:88:9f:14:f3:b3:d6:28:01:4f:b6:82:64:ac:37:
9a:ac:21:f6:7d:0e:52:f8:d0:62:fa:b9:bf:95:56:63:20:0a:
4e:2d:f0:28:d1:fe:cc:a5:b8:d4:7a:61:ae:2c:7d:11:4e:25:
9f:f2:47:a1:67:2c:56:d6:fc:bc:03:ba:b5:d6:9c:a6:29:b6:
e9:72:d9:03:e3:31:50:08:75:62:34:3d:7f:62:7a:b1:9d:db:
b5:3b:6a:33:53:d7:9c:19:34:03:96:69:2b:fe:70:f8:b9:08:
7b:3d:60:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:42:12 2024 by rpki-client on console-fra.rpki-client.org