Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/5r2b4yc4rT2Pf5RN1H9-HonqBjY.roa
File: 5r2b4yc4rT2Pf5RN1H9-HonqBjY.roa (raw, json)
Hash identifier: WaV9pReLPUfykb/ifyJWmsuNqLfihgw2zpSCaUS3ygc=
Subject key identifier: E6:BD:9B:E3:27:38:AD:3D:8F:7F:94:4D:D4:7F:7E:1E:89:EA:06:36
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019096C16375A08A936A073CD612A4ABDBBF
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/5r2b4yc4rT2Pf5RN1H9-HonqBjY.roa
Signing time: Tue 09 Jul 2024 09:09:34 +0000
ROA not before: Tue 09 Jul 2024 09:09:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Jul 2024 08:54:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:96:c1:63:75:a0:8a:93:6a:07:3c:d6:12:a4:ab:db:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 9 09:09:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6bd9be32738ad3d8f7f944dd47f7e1e89ea0636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9a:73:c8:60:cc:ab:29:36:db:60:30:ff:ae:
b7:08:43:0e:4f:16:d2:1f:2c:ef:56:01:aa:53:98:
4f:7e:0a:4c:2c:57:4b:7b:64:d6:a8:bd:fa:13:45:
29:9c:e5:cb:44:f5:1b:9f:d5:dc:4d:d2:c0:b2:41:
b8:01:3b:14:7f:ec:72:cf:ab:a4:af:8d:07:a4:ea:
e2:84:78:b5:a9:6d:6f:bf:94:2e:b1:98:62:af:33:
4f:a3:f1:1e:fa:fe:cd:ee:71:10:0f:31:2b:fd:d2:
c2:61:09:c2:2f:99:06:00:e8:6a:28:eb:57:c3:b5:
9f:53:fa:e5:ab:bf:b3:13:b8:ba:51:86:bf:34:46:
bd:6e:9c:f9:a3:73:4d:34:b9:fd:a2:59:52:fc:e6:
89:9a:fd:7d:60:43:36:6b:fc:4f:b2:b5:9c:2d:9e:
f8:f1:d9:3b:42:e8:23:8c:6f:bb:64:16:4a:4c:d0:
d7:cb:53:92:50:83:27:f3:76:68:82:22:ff:7a:bc:
d3:4f:77:8f:e6:07:52:ab:c4:7b:e1:67:a2:50:4f:
e6:0a:15:df:7b:2e:d4:19:91:7a:6e:23:1e:1f:0c:
a3:3d:0c:ab:3e:67:d6:49:a7:ea:41:ca:d1:4a:3c:
8d:00:18:72:67:51:77:d1:94:9b:79:40:f4:77:77:
ac:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:BD:9B:E3:27:38:AD:3D:8F:7F:94:4D:D4:7F:7E:1E:89:EA:06:36
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/5r2b4yc4rT2Pf5RN1H9-HonqBjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
01:62:b9:f8:22:cf:df:d9:b1:8e:8f:28:45:1d:8d:72:e2:8a:
08:07:20:6d:e9:d1:e3:59:f6:82:18:2b:42:de:b3:70:98:ee:
a9:47:95:5b:d8:71:c3:1f:23:3a:f8:92:8c:12:64:d8:40:b6:
ad:42:2b:54:a4:dc:e8:56:8f:be:5f:f8:97:a5:18:72:5e:77:
3d:ef:77:99:9d:2b:45:79:a8:32:65:37:1e:89:be:36:a0:12:
5e:d5:16:78:ad:fe:f0:c8:ef:5e:42:3d:8d:c0:6d:f5:ea:e7:
da:f1:14:fb:93:75:19:87:ca:c7:cc:1b:79:4d:0f:df:b8:eb:
04:1e:41:10:57:93:a6:fd:ee:64:87:98:a2:f5:91:76:77:ac:
18:18:f7:1d:16:1b:4f:5d:18:89:8a:ab:d5:43:b2:83:7f:50:
fe:0a:54:76:dc:58:98:a2:72:e6:40:50:fc:50:83:10:1f:c6:
8a:17:45:3e:15:1c:8b:a1:91:23:aa:44:58:30:ac:53:a3:77:
1d:e7:b5:15:cf:31:ec:1d:13:0e:58:18:29:ff:36:2f:e3:6d:
05:cf:99:e1:cb:e6:ae:18:d8:cf:a2:f5:fc:02:af:24:2c:97:
32:65:bf:aa:59:1a:2c:f1:c6:07:49:9e:30:0d:e5:ce:cb:cb:
ae:8f:61:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 11:35:28 2024 by rpki-client on console.sobornost.net