Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/AAlIUhYKZK2vk4l3ia79AwMCR1E.roa
File: AAlIUhYKZK2vk4l3ia79AwMCR1E.roa (raw, json)
Hash identifier: RRWpadbWwBpZZlmUscBUB3C6JRJHuOmMiTDl4TROVbc=
Subject key identifier: 00:09:48:52:16:0A:64:AD:AF:93:89:77:89:AE:FD:03:03:02:47:51
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01942747FF7E48781BEABFDE1803E76BD003
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/AAlIUhYKZK2vk4l3ia79AwMCR1E.roa
Signing time: Thu 02 Jan 2025 13:50:17 +0000
ROA not before: Thu 02 Jan 2025 13:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397423
IP address blocks: 83.147.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ff:7e:48:78:1b:ea:bf:de:18:03:e7:6b:d0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 2 13:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00094852160a64adaf93897789aefd0303024751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7f:92:5b:08:26:d5:06:35:d1:c2:6e:7a:07:
26:e2:71:df:ed:d9:7f:72:91:73:c3:fa:0b:d6:7d:
ad:ad:b2:27:78:3e:b5:bd:7a:e9:85:3d:4c:a5:7b:
56:a7:95:2d:c8:a3:fc:1f:17:ac:ab:ff:55:75:0e:
b4:4d:78:40:cd:40:da:b3:2e:fa:3a:77:cc:0d:de:
6b:7d:8e:c0:3b:04:c1:11:af:73:c2:e2:92:2a:f6:
ac:21:2f:7b:a1:99:c2:5f:d1:44:2e:c8:aa:dd:13:
c2:2b:a3:44:4c:dd:76:3d:d4:5a:24:40:28:e9:19:
a8:e5:92:d5:63:fc:37:6e:a0:07:b9:24:63:99:6a:
76:21:bf:17:c8:d9:62:36:8d:42:a2:35:9f:e8:18:
12:6a:a0:be:06:e0:e0:6a:5a:3a:1f:30:5f:86:80:
f4:37:23:45:c2:6f:87:92:1b:cb:ef:44:2a:c3:e8:
7d:2f:ba:30:d6:b0:3b:ec:b3:51:dd:0f:62:38:a8:
42:91:91:c6:34:ae:ac:81:95:85:bb:f1:a7:16:71:
14:e5:c7:d2:ad:4d:1e:28:18:85:9d:e7:c6:85:d9:
14:bc:7e:3c:bb:0d:24:76:59:27:95:58:13:c1:ea:
51:6c:bf:b5:e1:e2:78:92:65:b6:89:74:2f:19:6f:
18:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:09:48:52:16:0A:64:AD:AF:93:89:77:89:AE:FD:03:03:02:47:51
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/AAlIUhYKZK2vk4l3ia79AwMCR1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.16.0/24
Signature Algorithm: sha256WithRSAEncryption
91:5f:1f:d7:40:07:e6:37:d0:35:76:33:ae:93:d6:16:6c:6b:
71:14:db:3f:31:64:15:d9:3a:7a:3a:ff:62:bb:ec:2a:04:88:
ef:78:ec:83:76:c4:2e:0f:9c:9b:46:38:c8:51:33:1e:ad:cd:
4f:d5:9a:f3:70:6b:f3:2d:69:9c:c8:a6:f9:53:f6:c2:c4:d3:
63:15:29:80:a0:fc:77:f2:8b:f7:67:fb:44:35:65:1f:2c:c1:
3a:b2:96:7f:5f:20:0d:06:f1:72:3a:bb:c9:64:2d:27:bf:6a:
ce:b9:7c:ec:9b:b2:ac:5e:3c:03:66:c3:ce:1e:12:8d:77:7c:
fa:24:a5:05:5a:76:2d:20:61:68:70:e2:5a:6b:17:b4:ab:7a:
10:0d:46:16:19:3b:58:95:4f:7d:ff:f4:37:3d:12:06:23:ff:
4c:4c:62:04:3e:7e:35:bf:f7:f1:fc:b5:59:0c:fd:0e:9a:86:
14:fd:18:af:0a:b0:1f:1b:06:3d:0b:00:cc:29:09:79:f2:7e:
9a:d7:f9:d4:d7:69:76:7c:c7:0f:eb:cb:f7:fd:4e:bb:fb:fb:
d8:e8:e1:92:95:2f:2c:a4:99:4a:ec:f6:07:4f:df:0c:02:53:
26:e8:60:6d:19:f5:06:06:c0:89:5a:0c:52:b8:5a:e2:1a:0c:
46:63:a0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 17:09:23 2025 by rpki-client