Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/5r7kL72SiAW3kmGHVKa--DAHUMM.roa
File: 5r7kL72SiAW3kmGHVKa--DAHUMM.roa (raw, json)
Hash identifier: O/MDqGdDaqTtPgHrHo+tpMrY1ns4VYo6kNrf8lppL8A=
Subject key identifier: E6:BE:E4:2F:BD:92:88:05:B7:92:61:87:54:A6:BE:F8:30:07:50:C3
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC50128542C104ED2C7426DD95D0EB503
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/5r7kL72SiAW3kmGHVKa--DAHUMM.roa
Signing time: Mon 01 Jan 2024 12:30:36 +0000
ROA not before: Mon 01 Jan 2024 12:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207821
IP address blocks: 45.129.134.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:28:54:2c:10:4e:d2:c7:42:6d:d9:5d:0e:b5:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6bee42fbd928805b792618754a6bef8300750c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7a:9f:18:ad:bb:b3:94:7a:bc:8e:38:b9:e9:
73:cb:fb:de:c9:01:5d:2c:96:2a:6e:09:a8:65:99:
c4:86:0a:c3:3d:c3:e6:d4:93:f9:ae:a4:a3:4c:e8:
68:51:73:eb:50:84:b6:3e:3a:d1:da:a5:33:db:a0:
9a:d3:da:6b:a9:48:94:a0:3f:45:84:3d:6f:d3:99:
85:09:11:3f:76:97:0e:35:a9:64:00:e1:76:7b:5e:
29:87:7f:da:0e:f7:93:4b:3e:e7:a3:9c:38:b0:1d:
57:99:16:fe:be:da:a3:ea:a9:9c:33:9f:b9:9a:2c:
68:66:52:62:37:b5:9b:fc:5c:c8:f1:f2:d9:d6:31:
ec:6f:07:c4:5f:3e:cd:17:6c:df:b8:1e:6e:bb:e7:
65:7a:1d:bb:f5:87:c1:e7:cf:eb:68:0f:10:a8:53:
7b:dc:58:c0:b3:a2:69:71:27:41:bb:6a:20:93:17:
45:ee:d3:7d:76:76:d2:6d:b0:9e:92:f1:47:59:06:
ff:b5:9c:38:a0:94:8c:2a:e4:d6:cb:08:53:9e:de:
c9:b2:c8:4c:09:42:ca:d3:23:09:f8:ca:93:e4:ba:
3b:9e:00:69:47:3d:bb:16:8b:42:0e:d9:29:15:31:
0c:81:4f:d6:7e:a1:66:ad:81:d9:59:34:a6:0d:d7:
f2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:BE:E4:2F:BD:92:88:05:B7:92:61:87:54:A6:BE:F8:30:07:50:C3
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/5r7kL72SiAW3kmGHVKa--DAHUMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.134.0/23
Signature Algorithm: sha256WithRSAEncryption
39:80:fb:32:a3:4b:1d:16:49:d0:6d:32:a7:e9:c0:51:47:a6:
11:20:bf:49:1c:ea:88:f7:ec:4f:2a:c7:7b:4e:a8:65:20:15:
04:ce:f0:2c:ab:e7:e1:24:31:56:70:af:99:48:95:9b:e2:e2:
57:cd:75:b7:93:09:49:db:52:4c:f7:0d:f3:0b:3a:88:7a:4e:
ac:ef:3f:f7:49:65:4d:ac:32:8e:1f:79:9d:75:c6:dd:14:a8:
35:73:d8:f9:26:47:ee:ee:0d:b7:a9:41:27:20:97:3b:17:53:
88:be:40:82:d9:6d:44:f9:e8:71:cb:fc:27:86:ae:87:41:af:
7b:34:08:cb:91:85:95:42:69:62:ca:fb:55:0b:ce:04:fb:c0:
98:56:49:dd:d8:40:90:92:79:bb:96:41:96:28:0d:a1:96:35:
73:01:b3:5a:fb:df:2b:48:e0:7d:30:2b:55:be:28:71:f9:70:
25:82:cc:71:0b:55:3f:0a:4d:25:d4:d6:94:a1:2c:d9:fe:39:
7f:a9:81:c7:57:c5:d6:07:fc:20:ee:65:9f:42:19:ef:d6:3a:
5b:91:27:41:87:b9:eb:dd:f7:db:6a:2f:90:07:ff:85:92:e2:
43:8f:5a:51:fd:23:a7:0b:8f:07:cd:19:1c:c6:63:a0:8f:27:
85:1f:be:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 02:22:05 2024 by rpki-client on console-fra.rpki-client.org