Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/nLi_8lldZiggSxWlDrQITr21bIk.roa
File: nLi_8lldZiggSxWlDrQITr21bIk.roa (raw, json)
Hash identifier: qU4+Gdgk4+pGHlaYmZ0w8G0l9Tgk3mDsqDxkq1kT0Ug=
Subject key identifier: 9C:B8:BF:F2:59:5D:66:28:20:4B:15:A5:0E:B4:08:4E:BD:B5:6C:89
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018CC94AB6FD70E247E340ED937D0F0D63C7
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/nLi_8lldZiggSxWlDrQITr21bIk.roa
Signing time: Tue 02 Jan 2024 08:29:26 +0000
ROA not before: Tue 02 Jan 2024 08:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197992
IP address blocks: 83.147.44.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:b6:fd:70:e2:47:e3:40:ed:93:7d:0f:0d:63:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 2 08:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9cb8bff2595d6628204b15a50eb4084ebdb56c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ff:22:3a:cf:26:73:74:63:1f:79:00:53:c6:
8e:ad:fb:a5:34:8b:10:88:68:96:54:54:ff:39:e2:
c1:a8:bf:9b:3c:49:b2:e3:b8:bf:b2:ba:85:7d:00:
4d:93:f7:df:f6:35:0e:e3:39:8b:d3:c4:aa:cf:6a:
ac:03:e3:9f:9e:5b:d1:05:0e:cb:d7:9c:73:a5:05:
56:0b:fc:b3:cc:a2:ee:75:5c:43:e4:7c:b0:2e:a9:
59:f8:8a:53:9c:40:09:69:f3:cb:ff:3d:17:1a:60:
51:1d:6d:ef:62:37:c4:02:6f:d6:3b:d8:cf:7b:3f:
e0:10:73:61:b1:7a:21:9a:1c:f8:a0:62:57:be:4d:
86:24:4c:32:b4:0d:95:fe:b2:66:56:c5:23:da:a1:
72:65:7b:1e:59:34:30:c9:d0:09:26:f5:5d:50:5f:
99:d1:40:28:43:60:58:d7:27:2d:21:ef:50:f2:3e:
01:c3:1d:60:4b:bd:94:a8:e9:18:3f:15:ab:28:4c:
a8:11:73:a9:66:ad:be:6a:37:ca:77:5a:cd:61:f1:
e8:ef:59:1b:4b:9f:9b:b9:0b:58:9e:d8:59:0e:2f:
2a:1e:8f:6c:c6:29:ac:5d:bc:e7:ac:e7:bb:a9:82:
04:d9:d0:7f:6e:e2:fd:5f:f9:fb:de:de:fe:f9:14:
0e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B8:BF:F2:59:5D:66:28:20:4B:15:A5:0E:B4:08:4E:BD:B5:6C:89
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/nLi_8lldZiggSxWlDrQITr21bIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.44.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:c4:c8:84:c0:e3:15:01:ea:a3:f8:0f:bf:0e:a0:a0:7b:97:
37:76:88:42:d3:bb:b9:7e:45:d9:2b:4a:a6:a5:48:82:f5:c7:
c3:78:54:2e:09:71:87:ce:33:a2:69:0a:35:02:ec:17:a4:81:
fe:b3:9d:5d:88:3a:84:28:e8:c3:fc:0d:35:20:c3:21:56:da:
bb:33:fd:95:58:d4:87:9e:fc:9b:a1:f1:d8:89:10:8a:7d:bd:
78:e6:39:63:f3:6b:b3:49:0f:08:db:b2:d3:c2:0c:57:33:e3:
c2:01:64:1a:5f:81:9f:9f:4d:e5:35:6f:59:2e:d1:fe:59:da:
8b:e5:96:cd:60:5d:9f:01:ed:30:ee:22:3b:80:4e:a5:38:13:
14:8e:2e:74:8c:94:f5:85:72:bf:92:9c:46:a2:24:c4:8b:dd:
11:74:6f:85:9b:83:88:8d:7c:33:14:65:3d:0f:3e:b4:f3:a9:
9b:79:84:94:21:55:23:0c:ae:15:06:03:61:f7:92:28:67:bc:
93:f8:3c:fc:a4:d9:9e:56:a6:65:2a:1f:96:c8:9d:c5:83:6d:
a7:11:b4:73:b4:1e:04:06:b9:19:2d:69:c7:e2:04:73:a5:9c:
3a:f7:c3:05:2b:37:0f:5e:00:f8:41:d6:03:fb:a4:16:ed:3c:
22:b3:b2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:21:57 2024 by rpki-client on console-fra.rpki-client.org