Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/4jmGITMHc1KqwA5kx7fOix7Q-Uw.roa
File: 4jmGITMHc1KqwA5kx7fOix7Q-Uw.roa (raw, json)
Hash identifier: XuhDvg404lU1wC8fQmwflCFqSbHj7IpbOtg5nUQ9m24=
Subject key identifier: E2:39:86:21:33:07:73:52:AA:C0:0E:64:C7:B7:CE:8B:1E:D0:F9:4C
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 019630604CFD9A230D90CB66E79A29BB7D87
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/4jmGITMHc1KqwA5kx7fOix7Q-Uw.roa
Signing time: Sun 13 Apr 2025 18:18:59 +0000
ROA not before: Sun 13 Apr 2025 18:18:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209671
IP address blocks: 83.147.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:30:60:4c:fd:9a:23:0d:90:cb:66:e7:9a:29:bb:7d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Apr 13 18:18:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e239862133077352aac00e64c7b7ce8b1ed0f94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a2:d4:80:c9:46:3f:47:b7:4e:0f:06:09:93:
d2:b5:ac:7e:30:cc:98:82:2c:b4:d6:a0:a9:2f:ec:
24:df:5e:0f:cf:a2:73:3d:94:b0:d3:42:63:00:5b:
c8:5a:87:89:55:c3:38:8d:ed:af:51:2c:c2:eb:76:
66:d3:ce:5c:b1:d7:ae:99:9b:08:aa:c3:88:db:c1:
96:5c:93:20:f6:00:98:c1:5f:60:38:e2:ee:f3:28:
39:da:98:7a:0c:dd:f3:31:a3:ee:7b:c8:32:3a:66:
77:64:f9:4d:95:a3:2d:68:ba:b5:06:1c:ec:ba:38:
e3:7b:b6:a0:f3:d6:7c:d9:1a:87:f0:12:65:e3:02:
fa:d3:11:73:b8:fc:69:d9:d8:83:06:12:f7:0f:ef:
11:68:e1:3d:c4:c0:b5:3b:41:a4:e4:72:82:5b:b4:
5b:2b:e0:17:99:eb:67:f1:cf:ae:a2:bf:85:52:26:
3f:c6:20:b6:c8:cc:45:02:e1:f6:ef:f4:52:0c:c5:
09:64:05:12:86:3f:7d:8e:18:76:c4:49:21:38:ce:
7a:96:2e:db:55:b8:a3:8d:86:a6:d0:4d:6c:fa:d5:
21:83:13:27:2e:9b:1d:4c:86:65:e7:83:3c:f0:ae:
8f:f4:7e:cf:d2:19:4a:59:29:5b:18:fa:58:f0:fe:
1d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:39:86:21:33:07:73:52:AA:C0:0E:64:C7:B7:CE:8B:1E:D0:F9:4C
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/4jmGITMHc1KqwA5kx7fOix7Q-Uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.21.0/24
Signature Algorithm: sha256WithRSAEncryption
27:d4:15:94:5e:54:b7:c4:c4:cb:00:29:1f:8b:d4:e9:6c:b7:
87:32:c3:c7:37:a2:4f:ac:29:58:84:fd:e9:67:58:6f:90:0e:
24:50:15:9c:33:d8:26:80:ba:a0:ac:34:81:61:a9:eb:fd:72:
3d:4f:bf:12:c5:7b:2a:e5:36:ea:52:aa:cf:e8:c4:47:94:e9:
ae:5d:00:73:d5:38:94:f5:db:7a:85:7f:eb:7f:43:a3:f0:7d:
53:d5:3b:40:9d:1c:de:28:a3:94:38:1c:bb:84:c7:fd:99:e0:
0b:03:40:16:b1:ed:88:4c:d2:7f:49:9d:48:79:4a:e0:19:41:
23:73:c4:ee:62:8a:b4:49:af:96:e4:a6:8c:f5:3e:9f:c4:86:
94:92:5a:5d:3e:3b:dd:16:3f:92:08:4d:48:85:9b:29:f0:d2:
65:bb:9d:65:ef:41:3b:bf:e6:a1:8f:49:b8:d5:62:8a:2b:07:
8f:e2:67:9f:0f:b1:12:12:7a:a3:33:d5:1e:d7:f6:55:8e:17:
23:64:54:77:c5:4e:a7:20:92:4b:5b:1c:62:40:57:7b:fb:a6:
87:54:10:1a:93:b2:df:77:63:5a:22:eb:69:74:b3:07:2e:8b:
01:2c:0c:7f:a7:4c:2e:a3:47:47:66:fe:c1:16:bf:2a:20:72:
28:f9:0c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:04:58 2025 by rpki-client