Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/vv6BKPP34I6WXtuOgmcKiagJ0K8.roa
File: vv6BKPP34I6WXtuOgmcKiagJ0K8.roa (raw, json)
Hash identifier: oOr9T4Frbvt8QKh/1KP5Fp4ou8lWyzwpiUlq9gFGsN4=
Subject key identifier: BE:FE:81:28:F3:F7:E0:8E:96:5E:DB:8E:82:67:0A:89:A8:09:D0:AF
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018E14CECDBC54C55DF0ED82BF2AA0C31225
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/vv6BKPP34I6WXtuOgmcKiagJ0K8.roa
Signing time: Wed 06 Mar 2024 17:28:01 +0000
ROA not before: Wed 06 Mar 2024 17:28:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23470
IP address blocks: 83.147.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:14:ce:cd:bc:54:c5:5d:f0:ed:82:bf:2a:a0:c3:12:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Mar 6 17:28:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=befe8128f3f7e08e965edb8e82670a89a809d0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a9:14:b6:91:f1:1b:12:d1:cb:ce:26:8b:66:
7d:0e:a0:8c:78:5c:19:4a:59:37:8b:c4:91:76:cb:
db:6b:c7:b2:35:11:1e:84:6e:4f:9c:4c:cb:12:1b:
34:14:44:45:64:66:8c:c9:d5:05:f4:79:cf:5e:4b:
75:b5:2a:0a:18:a9:69:5b:53:29:63:6c:f2:10:c2:
4d:52:d6:ea:8e:89:e7:3e:d2:20:20:97:b8:0b:f6:
ac:9d:5a:6e:f8:18:20:91:51:8c:cf:86:7b:f8:64:
ed:6c:32:b7:a2:7c:44:7b:c2:e4:1d:83:b4:4f:4b:
4b:96:36:95:b7:c1:49:1d:50:b2:6d:3f:00:0f:8e:
a4:cc:e5:fa:85:07:f2:43:d3:40:64:66:ae:d4:89:
0a:d6:78:2a:cc:a1:e0:28:17:b1:c5:9e:53:07:ec:
f3:71:c3:d9:5e:1e:6b:73:64:c4:bd:a5:86:f7:55:
1c:a3:17:f6:26:3f:95:2e:bb:95:35:9c:60:cb:f0:
c8:15:6a:b8:2f:07:fe:35:33:43:66:11:3d:3b:c7:
ad:48:8e:da:e4:8f:84:0e:8a:4a:86:ff:8c:ae:3e:
37:0d:61:19:dc:27:e1:a6:d0:4c:7b:54:84:72:50:
e5:a3:72:32:26:8e:5a:52:3d:ea:8a:6b:03:2a:c5:
5c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:FE:81:28:F3:F7:E0:8E:96:5E:DB:8E:82:67:0A:89:A8:09:D0:AF
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/vv6BKPP34I6WXtuOgmcKiagJ0K8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.40.0/22
Signature Algorithm: sha256WithRSAEncryption
54:81:ec:31:1f:09:ed:d7:c6:90:fc:49:ed:31:88:15:2c:9c:
bf:13:e5:05:3d:76:fa:d6:15:3e:7e:ba:02:05:dc:83:62:75:
8b:ae:94:79:b8:58:36:60:49:00:7f:d0:2f:0e:1b:6a:78:a1:
3e:a4:bc:1f:46:09:ff:3e:10:67:84:8d:c5:29:46:ea:1a:94:
e9:7b:7f:0c:20:65:5d:d0:f7:6f:e2:92:d5:ea:05:13:0f:8e:
e9:84:f4:a1:af:39:58:88:be:92:d1:76:3f:94:59:8d:72:4f:
d6:16:bc:aa:24:a9:eb:c4:a4:bf:20:b3:72:44:33:c8:03:2c:
89:0a:04:49:2e:42:6b:47:47:3b:17:b2:a1:8c:e9:e3:44:86:
98:9c:48:26:6c:fd:4c:49:81:4d:86:d8:74:4d:bd:e9:4e:12:
09:0d:10:f1:21:f2:df:87:ca:d7:3e:47:46:fd:5e:c2:52:13:
88:9a:76:96:fe:37:91:9f:a0:39:99:5b:ae:00:1b:c2:53:8d:
9e:a9:da:01:ba:08:36:67:ee:76:fc:22:d6:9c:60:8a:d3:52:
96:2f:78:eb:1e:ef:9b:46:16:92:4b:e0:95:e6:46:a7:ba:63:
b3:e2:65:bc:c4:b0:37:40:e6:fe:b8:c9:73:09:7c:1c:1b:d2:
91:a3:bb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 23:58:56 2024 by rpki-client on console-fra.rpki-client.org