Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/5NuHOnzLoKnzgNsAZlwllczl__k.roa
File: 5NuHOnzLoKnzgNsAZlwllczl__k.roa (raw, json)
Hash identifier: o0UErmVgqHwHTMMxfxFyTLEJtk8XMfXkeRHNi2jxxcU=
Subject key identifier: E4:DB:87:3A:7C:CB:A0:A9:F3:80:DB:00:66:5C:25:95:CC:E5:FF:F9
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 018CC348C9C33D91431F15BB554644179191
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/5NuHOnzLoKnzgNsAZlwllczl__k.roa
Signing time: Mon 01 Jan 2024 04:29:36 +0000
ROA not before: Mon 01 Jan 2024 04:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208828
IP address blocks: 2a07:8f00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:c9:c3:3d:91:43:1f:15:bb:55:46:44:17:91:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Jan 1 04:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4db873a7ccba0a9f380db00665c2595cce5fff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0a:fd:b6:94:67:4b:63:7d:18:0c:d8:02:f4:
a2:e0:7c:33:bb:aa:4a:8d:19:d0:5c:c2:63:ad:71:
b1:c8:e0:02:51:8a:8c:aa:cd:a3:84:e6:66:a5:71:
ee:d6:9b:1c:63:0d:af:73:33:bd:3f:a6:31:45:33:
88:04:6b:90:d9:ab:40:54:f7:87:bb:cf:64:5d:08:
ef:ee:37:be:0f:8f:ca:ab:52:6f:d6:b8:d1:fb:d4:
69:55:1a:05:45:89:76:59:38:9f:55:cb:6d:44:c3:
53:cf:8e:49:b6:29:f2:50:69:2e:b4:f0:55:d3:68:
cd:6b:d0:e7:7d:9a:69:5f:8d:5e:8d:28:9e:b1:4a:
6c:33:17:e5:0b:d5:73:49:73:35:9a:40:3b:54:d5:
b4:a4:bf:9d:8a:d5:4d:f4:03:d3:cb:78:db:ed:6e:
97:55:33:f1:cb:82:9d:1a:a4:ae:80:6f:39:b0:05:
ff:11:e9:5e:f0:92:43:78:91:bd:f5:6c:9c:f6:51:
e8:6a:35:2b:0b:27:52:51:68:04:60:9a:6f:8b:60:
b3:fc:05:76:ec:f5:44:56:ce:40:f7:0f:f9:d8:4e:
92:3e:08:9a:ba:22:69:c4:0a:ce:05:a0:62:d0:f6:
97:68:e5:12:ce:3f:d0:0b:f9:14:65:1a:08:e8:7d:
39:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:DB:87:3A:7C:CB:A0:A9:F3:80:DB:00:66:5C:25:95:CC:E5:FF:F9
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/5NuHOnzLoKnzgNsAZlwllczl__k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:8f00::/29
Signature Algorithm: sha256WithRSAEncryption
a2:ca:13:84:a4:c7:ec:6e:43:36:5d:d5:4a:e2:ab:01:70:da:
fa:b0:d9:b9:d2:4a:fd:20:f0:67:a3:08:a9:1f:d7:74:42:44:
82:10:b9:0a:b9:a1:81:43:50:60:5f:a0:a2:f0:e8:d4:18:43:
d2:4e:6f:91:a5:af:b1:6c:d8:27:37:27:ec:97:72:01:29:e8:
7f:f6:f5:b6:14:0b:a0:be:58:08:de:23:9c:e2:72:3c:15:16:
9e:72:aa:a1:66:96:e2:c6:dd:82:cf:19:f9:24:e7:28:5f:f0:
3e:15:1a:bd:d3:73:c0:ff:d6:41:17:c6:99:cc:e4:0c:4a:a0:
5f:c6:a3:78:0f:26:7e:a1:a0:b5:4a:2c:ed:16:3a:3b:7f:3e:
3c:3d:b5:f5:75:51:ae:07:61:89:d3:da:ce:45:ea:06:18:da:
7d:05:55:ee:ec:5a:66:d1:11:69:ea:45:ac:c4:f9:f8:8a:7e:
b0:b8:bb:66:d4:10:c1:65:d8:e6:97:7f:98:34:4b:28:48:9d:
44:e1:e2:74:8a:13:8f:b7:5b:53:61:af:3c:41:90:64:30:56:
a5:41:25:df:75:5b:ab:77:47:87:c9:65:ab:86:6b:4c:51:e6:
75:e1:7c:3e:1d:5a:79:05:e5:98:77:ad:a7:93:66:cf:aa:c1:
8b:b1:d9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:04:48 2024 by rpki-client on console-fra.rpki-client.org