Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/7b6B4lXJNe06UkSyf8h6swZSPr4.roa
File: 7b6B4lXJNe06UkSyf8h6swZSPr4.roa (raw, json)
Hash identifier: XDfokTp4Wtn2eUVghMV4p0X8a08vEzPgelb1tubOC+U=
Subject key identifier: ED:BE:81:E2:55:C9:35:ED:3A:52:44:B2:7F:C8:7A:B3:06:52:3E:BE
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01933E000947F64601E6338F622B8BA9C97B
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/7b6B4lXJNe06UkSyf8h6swZSPr4.roa
Signing time: Mon 18 Nov 2024 06:40:09 +0000
ROA not before: Mon 18 Nov 2024 06:40:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60781
IP address blocks: 83.147.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3e:00:09:47:f6:46:01:e6:33:8f:62:2b:8b:a9:c9:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Nov 18 06:40:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=edbe81e255c935ed3a5244b27fc87ab306523ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:88:82:86:77:3f:52:34:3d:79:7a:0b:11:2e:
15:b3:1a:3a:42:93:92:31:40:ee:5b:e2:35:dc:a6:
89:84:09:c2:e4:fb:e6:61:67:4d:f2:22:52:44:c4:
ca:30:45:f1:00:ef:73:dd:4e:93:65:ce:5a:2e:c1:
de:1e:06:16:04:d6:82:6c:e9:e5:ef:6e:50:ea:5e:
f9:10:a1:aa:9f:8b:7e:44:cd:7e:b7:66:b1:bc:ae:
13:76:0e:00:ae:7c:17:94:6a:3f:0b:83:dc:f4:07:
ff:72:28:02:b6:2c:af:70:db:d3:f3:94:38:fe:f2:
5b:3a:dc:10:9e:34:14:57:02:73:7c:01:81:c6:c3:
47:eb:ca:5e:5f:65:d6:f6:a0:1c:5f:d6:40:c9:ed:
74:7c:8e:13:29:e9:8e:0c:6c:a4:3f:4f:cb:10:3a:
b2:f3:91:df:88:8e:d3:2d:93:b3:16:58:d5:fc:25:
ae:4e:40:0a:98:1b:27:32:d4:05:80:33:c3:54:b0:
1c:25:2d:dc:86:22:57:33:e9:ec:91:66:b2:ab:4e:
07:a1:cd:3b:cb:f7:e9:82:5b:91:70:a0:bf:8a:ca:
37:78:c3:ba:8b:eb:51:40:fe:a1:f7:24:09:5b:90:
be:30:72:58:ef:20:ae:de:fc:c8:89:35:0c:8d:5d:
e6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:BE:81:E2:55:C9:35:ED:3A:52:44:B2:7F:C8:7A:B3:06:52:3E:BE
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/7b6B4lXJNe06UkSyf8h6swZSPr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.44.0/22
Signature Algorithm: sha256WithRSAEncryption
36:93:c6:df:62:35:93:3a:0d:60:1f:5f:6e:5a:97:11:ab:99:
7e:15:fd:51:ab:e9:50:05:ec:8b:fd:e9:3d:8a:3f:d6:b5:6e:
4e:b6:16:90:60:84:6f:5a:d8:5a:22:c2:ae:18:bf:ab:32:35:
a4:3e:c6:87:3e:ee:b5:28:f7:a2:d7:04:55:8e:2f:aa:75:6b:
28:99:a2:17:99:6c:ad:e0:3d:7a:78:87:a0:53:93:e6:f4:6e:
82:4e:65:0c:0c:44:c6:88:92:59:8a:b4:69:5f:25:ad:9f:53:
20:7d:06:55:c0:a3:d7:0a:89:65:a2:b8:84:e3:6b:4e:1a:02:
13:14:ac:9a:e6:9b:63:82:db:f0:68:5f:b7:98:26:4a:56:5e:
ed:14:57:87:7f:da:9e:eb:29:bb:37:f9:84:f4:f4:89:fc:fc:
15:a1:58:f8:30:78:4b:ea:b7:d4:88:ce:be:d2:63:46:9b:d7:
36:c6:f1:dc:21:5e:ca:3c:43:70:ea:95:4e:7f:ba:21:8a:b0:
c9:01:e0:1b:53:bd:f7:39:30:9c:c2:9f:bb:8b:6c:8a:55:c5:
20:51:a4:2b:d6:a4:97:c2:b9:46:08:96:9d:09:96:87:6d:ac:
46:11:f3:b7:bb:76:e5:f4:ab:11:91:e4:0e:da:73:84:27:f7:
e5:a3:a1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:33:17 2024 by rpki-client on console-ams.rpki-client.org