Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/nklu39GiIl21oAX6jnk8H02Zx5s.roa
File: nklu39GiIl21oAX6jnk8H02Zx5s.roa (raw, json)
Hash identifier: fBfJyE3aCgO6wGEdku4ZwFjd7ciYW3itYatwSDy1bEk=
Subject key identifier: 9E:49:6E:DF:D1:A2:22:5D:B5:A0:05:FA:8E:79:3C:1F:4D:99:C7:9B
Certificate issuer: /CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Certificate serial: 0191999853D9987D6C94E328FA69214A3D87
Authority key identifier: E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/nklu39GiIl21oAX6jnk8H02Zx5s.roa
Signing time: Wed 28 Aug 2024 15:26:22 +0000
ROA not before: Wed 28 Aug 2024 15:26:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15437
IP address blocks: 62.220.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:99:98:53:d9:98:7d:6c:94:e3:28:fa:69:21:4a:3d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Validity
Not Before: Aug 28 15:26:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e496edfd1a2225db5a005fa8e793c1f4d99c79b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c5:d2:7d:01:1e:c5:2f:70:0b:9a:5e:63:a4:
8d:aa:f8:7d:7d:6f:25:8f:5b:d7:b4:da:18:ba:85:
82:9c:af:03:51:39:ab:1d:95:a3:74:ca:22:28:11:
4c:ae:79:54:75:02:2a:e8:b9:6f:4c:5a:08:16:59:
3b:37:23:78:67:31:96:6e:bb:35:ee:9a:58:92:35:
a2:e7:8c:e9:24:86:d0:8b:47:ee:bc:9c:51:5f:28:
24:50:e0:da:35:7c:51:f8:01:70:4e:4e:59:dd:40:
ac:a0:57:36:e7:08:99:12:a9:77:a2:75:4c:7a:bd:
4c:8c:8e:4c:3d:67:b8:d4:3f:34:a6:2d:01:96:66:
a7:d6:f9:46:89:a7:16:3e:db:f8:37:33:62:47:a0:
30:ea:ea:d5:a6:b5:c7:c9:a8:c3:c4:a3:a0:18:4e:
40:8e:df:f0:56:e4:a3:fa:46:43:24:9a:18:9a:37:
37:30:fe:c4:1f:75:83:80:c8:db:6d:17:b7:1f:e9:
b7:5c:7b:ac:03:6b:2a:eb:6c:64:84:ec:c4:7a:a1:
9c:69:93:39:6f:5a:bb:9f:d1:25:97:21:aa:c4:ec:
26:fd:65:1b:a5:cc:28:80:88:4a:fc:f4:15:63:29:
b3:44:f7:cf:a1:c7:13:18:f1:a2:fb:b6:83:cd:f2:
22:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:49:6E:DF:D1:A2:22:5D:B5:A0:05:FA:8E:79:3C:1F:4D:99:C7:9B
X509v3 Authority Key Identifier:
keyid:E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/nklu39GiIl21oAX6jnk8H02Zx5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.220.64.0/20
Signature Algorithm: sha256WithRSAEncryption
07:ac:d0:9a:d0:21:5c:9d:26:b7:c8:f2:77:ba:1f:f9:38:13:
b4:db:91:85:8c:7f:df:74:61:2f:22:27:7a:4f:ab:cd:58:b9:
ba:f5:e2:21:7b:9a:62:d0:95:a8:89:69:54:41:c9:01:07:26:
56:1b:b2:8b:bd:ce:e3:3d:d4:d7:b3:81:35:6d:ad:d9:8d:65:
69:12:a9:de:e6:e7:04:94:c4:81:88:c0:71:35:c2:f9:5a:85:
7f:77:66:52:86:97:60:26:7b:2a:d9:d0:e8:c8:89:1a:8f:de:
30:d4:99:92:f9:50:8d:cd:54:78:d7:47:65:b9:3c:45:62:45:
b2:0a:e4:70:9a:04:87:87:07:1b:41:37:bb:90:d3:0d:b3:c9:
e8:de:3a:17:57:fe:f3:a7:d7:2f:c8:0c:41:f9:b5:a5:c7:d4:
ff:42:fc:bc:e8:d5:8a:41:86:b1:03:0c:93:a3:d7:87:e2:b6:
17:63:88:e5:09:12:63:8f:69:25:cd:4e:b3:40:2d:dd:8c:c2:
7f:f3:d2:3c:17:fb:ca:67:07:61:f9:1b:3b:4f:8b:1a:21:c4:
0e:dc:4e:94:06:7e:67:9a:f0:c7:61:c6:86:2e:ef:78:a5:46:
2d:63:3d:57:0f:65:e0:65:40:f4:5c:00:bc:29:eb:1d:6a:23:
cb:7a:81:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:53:02 2024 by rpki-client on console-fra.rpki-client.org