Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/N5B44uDggKb6bLNZdovNFdYOk6c.roa
File: N5B44uDggKb6bLNZdovNFdYOk6c.roa (raw, json)
Hash identifier: MvXlLTgY6S6vmIYs4iuQ4gqMTk3raN78LAzdrBe/zvU=
Subject key identifier: 37:90:78:E2:E0:E0:80:A6:FA:6C:B3:59:76:8B:CD:15:D6:0E:93:A7
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 018CC26D4191675F59978824CD83069458FD
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/N5B44uDggKb6bLNZdovNFdYOk6c.roa
Signing time: Mon 01 Jan 2024 00:29:49 +0000
ROA not before: Mon 01 Jan 2024 00:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211843
IP address blocks: 2a0e:aa07:e01b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 06:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:41:91:67:5f:59:97:88:24:cd:83:06:94:58:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 00:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=379078e2e0e080a6fa6cb359768bcd15d60e93a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:71:c1:af:91:a5:51:a0:a5:41:89:7d:83:95:
26:7b:d0:84:fa:47:7f:4f:1a:eb:0f:0d:fc:e2:97:
53:a3:e9:dd:2e:27:60:98:f0:bc:b9:40:d3:6c:20:
63:99:e8:43:eb:11:83:a9:a8:c0:39:7e:6e:32:05:
e3:6b:29:6d:8f:05:cc:ab:4a:27:1f:a5:34:dc:3a:
ad:dc:27:d3:b2:7f:7b:41:b6:fb:cf:3c:1c:d2:c1:
66:66:83:93:bc:44:dc:1b:3e:6f:6b:5d:35:d4:c1:
d6:4e:61:a0:03:54:9f:bf:16:2f:2c:de:cb:83:f9:
ba:e1:9e:2e:36:f5:0c:4c:b0:b3:23:30:b0:6b:b4:
15:e8:14:d2:94:3e:5a:02:e5:04:f3:bd:69:93:b2:
43:55:32:0c:42:28:ea:ad:b4:b6:68:78:cb:ca:97:
ac:76:41:67:f6:d9:15:d7:19:1b:83:c6:81:6a:28:
e9:78:43:7d:d5:b2:2c:72:dc:1c:1a:6d:b8:53:8e:
04:e5:1b:a0:ab:b5:6e:19:24:2d:0c:a0:42:c3:f1:
6f:dc:a0:17:a7:0a:9f:af:93:07:5a:7b:55:05:eb:
5a:33:f9:c3:e4:95:5f:f5:03:48:4a:20:72:65:d6:
d2:73:6c:53:4d:67:25:8b:7f:2f:ac:10:8e:e2:8f:
f5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:90:78:E2:E0:E0:80:A6:FA:6C:B3:59:76:8B:CD:15:D6:0E:93:A7
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/N5B44uDggKb6bLNZdovNFdYOk6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e01b::/48
Signature Algorithm: sha256WithRSAEncryption
01:09:55:16:e0:1b:81:2d:e9:7d:0d:34:60:0d:83:ae:22:31:
d8:b5:22:b8:6a:33:76:47:0b:25:56:eb:fb:0a:a5:76:fb:58:
31:a5:40:d3:ea:0f:b7:04:1d:a5:23:d4:23:72:03:d5:9e:94:
a1:66:d5:50:49:18:13:3e:bb:3c:9b:ee:22:f9:76:13:12:2a:
a9:ca:d2:0b:14:cf:b1:47:c5:06:d6:b7:ab:55:2a:40:3a:54:
31:c9:47:19:42:37:8c:06:0d:00:66:b1:79:ec:7d:40:98:3d:
29:d2:25:1a:f5:ce:44:23:9c:1b:d3:c3:26:33:bd:2e:fc:a6:
33:c3:e3:87:a9:98:8a:bc:ac:3b:c7:00:aa:f7:40:07:87:9e:
32:25:8b:ba:e9:a0:ba:43:5a:94:b2:fa:51:70:11:2b:f4:63:
e5:b0:09:1b:b4:e9:72:8d:22:5b:dd:d2:f6:d9:af:fe:48:b5:
d4:72:91:24:fa:7f:18:7a:6f:d0:6a:69:58:05:ba:1e:75:37:
a2:f2:7a:4d:00:8f:63:9e:3f:1e:89:79:79:62:00:35:b6:4d:
85:8b:fd:d6:0f:23:22:56:aa:6a:89:15:66:44:64:4f:45:8c:
33:8c:c2:6f:a8:f0:22:59:4e:4c:5f:c1:42:f0:17:46:c0:d9:
65:4e:b7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:49:39 2024 by rpki-client on console-fra.rpki-client.org