Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/9vf3DClMDGeDtLBRMquHbjcoZnU.roa
File: 9vf3DClMDGeDtLBRMquHbjcoZnU.roa (raw, json)
Hash identifier: w+FvHtooMZnUAI/cV3nmeDHN13gzuNQV1Qh2QQ8y+34=
Subject key identifier: F6:F7:F7:0C:29:4C:0C:67:83:B4:B0:51:32:AB:87:6E:37:28:66:75
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01942747FC7352397201633545F92B4FC971
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/9vf3DClMDGeDtLBRMquHbjcoZnU.roa
Signing time: Thu 02 Jan 2025 13:50:16 +0000
ROA not before: Thu 02 Jan 2025 13:50:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64073
IP address blocks: 83.147.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:fc:73:52:39:72:01:63:35:45:f9:2b:4f:c9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 2 13:50:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6f7f70c294c0c6783b4b05132ab876e37286675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d3:b0:cc:fe:69:56:53:24:2b:9b:4b:b2:43:
b9:1c:19:f5:58:8a:79:d4:6f:81:61:8c:20:3f:5a:
0d:4c:35:02:c3:ab:8c:77:fc:7e:c5:3a:4f:c6:92:
12:32:70:df:11:de:fb:b6:b0:87:a5:3b:c9:c4:c9:
8d:11:0c:41:53:43:64:94:35:52:6f:fc:4f:e8:af:
32:92:8f:71:0d:69:9f:56:1c:27:c6:84:3a:94:57:
14:13:12:a3:12:f8:9b:20:c0:b1:d9:b8:87:3c:1b:
5d:95:ae:a7:6f:9c:d5:3d:7a:ca:4f:f6:46:67:2e:
44:f2:60:54:8b:27:55:fa:4b:6c:a9:17:0f:74:43:
be:ad:b9:ad:79:20:73:9a:e6:c0:81:45:4b:b8:b7:
34:81:42:26:86:03:19:4d:d9:44:ee:3d:0c:fb:db:
2c:3a:2e:b9:de:7c:15:5a:ca:84:82:93:c4:1f:eb:
3d:7b:88:bd:2f:31:7a:35:a8:30:dd:42:6d:91:94:
38:c0:49:9a:77:f2:a5:9e:78:13:22:89:59:84:d9:
f6:75:76:02:2f:49:4c:13:d6:39:49:1b:26:f3:5d:
79:d1:c0:c3:a8:0b:02:8f:90:71:0f:fd:db:6c:62:
11:3c:1c:e7:4e:33:79:f4:e2:bf:dd:0f:4b:10:bb:
08:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F7:F7:0C:29:4C:0C:67:83:B4:B0:51:32:AB:87:6E:37:28:66:75
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/9vf3DClMDGeDtLBRMquHbjcoZnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.4.0/22
Signature Algorithm: sha256WithRSAEncryption
16:15:29:ca:a2:53:1f:89:e5:a6:11:a9:f1:bc:f7:3d:74:f1:
5a:37:8b:29:92:8e:6b:e7:22:fd:fb:2a:61:4e:ff:69:c5:30:
86:b5:45:de:c6:4f:99:99:cd:21:cb:f1:8f:f9:27:76:60:3b:
ce:11:de:03:0d:cf:f8:85:8d:8f:00:77:e9:46:b1:32:d0:9f:
8c:4f:0b:fe:46:3a:8f:23:de:cd:07:d8:40:d4:19:a6:77:e3:
e1:b4:41:63:cc:87:53:00:bf:1b:c5:3e:d5:f8:04:be:df:69:
42:5e:ae:4f:c0:f1:c3:58:0b:20:d7:4a:ca:e7:25:e2:69:89:
85:3e:9e:79:5d:3e:b1:16:57:06:c9:d9:55:b0:5f:aa:c0:93:
cc:e3:cf:10:4c:2c:26:93:1c:16:14:b4:30:43:9e:b6:5a:09:
25:b8:38:51:cd:fb:5f:98:e3:10:fa:85:08:7c:ba:ed:61:1b:
63:ee:c9:27:2f:e5:5e:4e:6d:30:60:cc:0d:3a:c4:5d:43:e6:
dd:31:ae:8c:b0:c9:74:01:04:41:d4:75:ed:ab:99:ca:b1:f0:
3c:4f:39:d2:5f:d9:25:33:91:89:84:ab:6b:3d:b7:1f:56:37:
d9:2b:08:cb:02:9b:b2:ba:90:c5:9d:c0:7c:bc:d8:2c:ba:b2:
b2:ff:de:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 16:48:16 2025 by rpki-client