Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/5cDmWPfkoHmK06mnQt-iX_w2L_s.roa
File: 5cDmWPfkoHmK06mnQt-iX_w2L_s.roa (raw, json)
Hash identifier: xdxYdC5DFn57Hdouqu071GQsO9HjTuaNTDaYYMSHdvk=
Subject key identifier: E5:C0:E6:58:F7:E4:A0:79:8A:D3:A9:A7:42:DF:A2:5F:FC:36:2F:FB
Certificate issuer: /CN=e1900e5596c0837497f1189410b1ed22acdb7e13
Certificate serial: 018CC870A0E49DE1F1D3018DB3827A00624D
Authority key identifier: E1:90:0E:55:96:C0:83:74:97:F1:18:94:10:B1:ED:22:AC:DB:7E:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/5cDmWPfkoHmK06mnQt-iX_w2L_s.roa
Signing time: Tue 02 Jan 2024 04:31:13 +0000
ROA not before: Tue 02 Jan 2024 04:31:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21430
IP address blocks: 2001:67c:15a1::/48 maxlen: 48
2001:67c:1590::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 10:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:a0:e4:9d:e1:f1:d3:01:8d:b3:82:7a:00:62:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1900e5596c0837497f1189410b1ed22acdb7e13
Validity
Not Before: Jan 2 04:31:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5c0e658f7e4a0798ad3a9a742dfa25ffc362ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a8:27:fa:f2:0f:cb:a3:3a:34:e9:61:5a:66:
8f:b6:54:ef:0c:82:91:02:03:23:c6:99:fa:52:97:
bb:4e:8a:de:d7:80:a2:3b:20:9d:74:01:ed:f9:a5:
40:6c:93:b4:7e:43:c8:b7:2b:0a:fa:4e:de:c8:4a:
13:de:72:8d:4d:c8:ae:b5:24:92:9a:60:2a:c3:4f:
32:4c:0b:ee:32:6c:a5:13:9b:59:eb:d5:0f:1c:3d:
ce:3e:c8:87:b9:32:22:ad:44:8a:3f:e2:5e:f3:d6:
21:4e:21:f1:27:14:a6:96:80:c4:46:55:dd:55:d7:
ba:34:63:e7:ef:32:21:ce:1b:50:eb:f7:c7:0a:37:
d3:e0:93:bc:0e:e5:d5:90:45:ed:91:85:58:26:86:
f2:ac:17:1b:f0:b3:99:97:59:04:2d:2a:4b:34:d5:
81:22:ae:c3:2d:79:e2:c2:a5:78:6f:01:d6:da:f3:
f7:52:1b:0e:11:87:f6:1b:83:51:85:27:fc:e4:dc:
6d:c2:c5:aa:e8:ab:a2:53:34:ea:17:49:de:cd:72:
e7:40:a6:3c:25:42:ad:6c:64:be:1f:15:8e:79:cb:
7b:04:3d:94:44:69:f3:e0:3f:59:b3:ab:8e:99:6b:
20:72:d3:5d:01:bd:10:51:bb:32:dc:d6:bd:21:46:
b6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:C0:E6:58:F7:E4:A0:79:8A:D3:A9:A7:42:DF:A2:5F:FC:36:2F:FB
X509v3 Authority Key Identifier:
keyid:E1:90:0E:55:96:C0:83:74:97:F1:18:94:10:B1:ED:22:AC:DB:7E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/5cDmWPfkoHmK06mnQt-iX_w2L_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1590::/48
2001:67c:15a1::/48
Signature Algorithm: sha256WithRSAEncryption
52:c4:24:43:78:b7:e2:f1:9e:08:6e:74:c8:5a:15:68:b9:02:
ec:98:d3:78:53:d3:ae:51:11:43:24:00:3f:10:13:81:fc:49:
fe:a5:74:27:e7:37:f1:a8:39:4e:f7:d1:f3:d6:bd:a7:ee:12:
43:06:c7:2e:ae:92:25:1b:cf:b1:84:59:22:09:c1:04:88:c5:
f4:e2:70:94:5d:07:54:65:e4:33:d4:f3:dc:2c:dc:7c:a0:4d:
e5:65:a1:2f:5b:46:93:c8:3b:be:77:bc:36:40:20:65:f2:45:
c8:d7:82:dd:d0:c0:55:97:90:7d:2d:3d:e2:fc:e6:74:3f:42:
b2:50:79:b8:e6:f0:3a:67:bf:05:94:e9:11:76:60:86:4b:40:
47:6e:87:b0:09:4e:3c:d7:5a:6f:29:a5:e8:a4:bc:13:e1:06:
b1:f2:21:80:8e:1a:8b:42:ef:3f:91:05:2c:93:d0:40:09:7e:
8d:8c:0f:9a:23:5d:77:ff:70:7b:1a:82:f3:c3:4a:b2:4c:12:
51:84:de:b6:c4:45:c0:1c:91:0f:3b:6a:89:c7:06:1d:4c:ab:
99:a9:e6:c4:bb:19:08:36:75:a1:6a:05:a4:60:61:d4:c1:d5:
52:95:18:fc:58:9b:38:c6:10:39:9d:e1:6e:cd:2d:18:2b:a9:
15:8d:4b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 19:05:53 2024 by rpki-client on console-fra.rpki-client.org