Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/5SEq9tqIZ31oCkILPpPvtUc9zDQ.roa
File: 5SEq9tqIZ31oCkILPpPvtUc9zDQ.roa (raw, json)
Hash identifier: J9rEG7UFH4iktFH0Cny3i+W8HFwoUVlcfhz3v1F6Yuw=
Subject key identifier: E5:21:2A:F6:DA:88:67:7D:68:0A:42:0B:3E:93:EF:B5:47:3D:CC:34
Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Certificate serial: 018CC493556F1B274E81D60F5BED07A30AD8
Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/5SEq9tqIZ31oCkILPpPvtUc9zDQ.roa
Signing time: Mon 01 Jan 2024 10:30:39 +0000
ROA not before: Mon 01 Jan 2024 10:30:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5606
IP address blocks: 2a00:ece1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:55:6f:1b:27:4e:81:d6:0f:5b:ed:07:a3:0a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Validity
Not Before: Jan 1 10:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5212af6da88677d680a420b3e93efb5473dcc34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b7:84:72:2c:14:17:69:7a:63:a6:88:91:43:
13:27:44:6f:e3:49:88:ca:a2:2e:22:c3:54:28:b8:
81:de:f7:af:a0:e5:13:de:66:df:6c:49:f6:2f:9d:
47:f5:4a:74:45:58:83:f4:6a:70:05:b7:b7:12:47:
20:15:c6:85:e5:31:68:c8:d5:5d:2c:2e:c9:58:31:
35:13:ba:6d:34:ac:4d:bd:a7:67:8f:aa:5c:5a:65:
14:e1:c2:d5:66:e6:ad:2b:b1:6e:bc:ee:2e:a1:14:
64:da:ab:c0:5a:8d:13:52:41:87:c7:d4:b8:6e:ad:
e0:6d:65:da:dc:dc:4a:cd:1a:1c:fe:b0:ab:6a:36:
d0:8d:ba:dd:22:2d:1e:52:58:d4:bc:4f:e7:18:0c:
9b:64:33:35:bd:f7:f7:04:17:6e:cd:0d:37:c2:b6:
64:f3:1a:74:ce:19:bb:ad:e3:9a:d9:3b:d8:ca:95:
4e:63:f6:10:c6:87:ee:78:46:53:48:de:6f:f6:82:
9b:0d:3c:b6:8a:3a:2e:2e:73:d6:3d:0e:31:50:58:
de:8d:da:2a:2d:fc:ff:38:61:ac:d6:6b:e5:9b:ff:
05:87:60:3e:c3:5b:0e:fb:07:ff:1f:02:b5:51:a4:
9b:db:e9:4a:3c:1c:1e:ae:e8:e5:90:c0:7f:6e:02:
84:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:21:2A:F6:DA:88:67:7D:68:0A:42:0B:3E:93:EF:B5:47:3D:CC:34
X509v3 Authority Key Identifier:
keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/5SEq9tqIZ31oCkILPpPvtUc9zDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:ece1::/48
Signature Algorithm: sha256WithRSAEncryption
13:78:07:cd:ea:6d:5b:fc:fc:c3:2c:e8:e4:a6:67:7b:69:31:
93:ef:c9:a1:3e:87:cf:f9:3c:8c:63:51:9d:76:8f:f4:85:c8:
77:4c:2e:d8:1b:56:03:15:62:d1:c4:fd:03:6c:70:3e:a8:b4:
c5:c3:fc:8d:2f:62:81:68:69:ad:66:1d:95:0f:09:6d:fc:3e:
7b:29:cb:44:d9:d4:12:02:b6:f9:26:88:8f:0a:e6:56:1b:dd:
68:ce:d2:92:1b:1a:27:b7:84:57:7f:02:1d:bc:de:96:29:ec:
4b:82:ff:1b:ce:af:b7:8d:a8:ed:d6:02:e4:2f:da:5d:bb:49:
32:ed:9d:41:ce:94:95:ef:d7:6d:62:ea:7f:dc:f9:66:1c:63:
b2:1e:5c:00:cc:14:05:2e:9f:45:ee:b8:01:b9:cb:00:53:75:
d8:8e:96:b5:29:3b:03:a4:c8:83:d4:8d:e2:56:43:95:74:40:
45:b7:0b:4e:c4:f9:92:a7:ee:27:b3:2d:30:9d:29:f7:b5:02:
11:a0:11:17:48:e4:71:2a:db:3b:ff:c3:32:c5:02:73:98:92:
8c:55:fd:3c:cc:94:db:f6:32:f6:e4:3d:b4:f2:ef:53:07:0e:
16:24:dd:21:bb:1f:29:9c:2a:d6:ba:ef:f9:29:89:81:f6:51:
3d:35:fe:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:51:20 2024 by rpki-client on console-ams.rpki-client.org