Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/JYyGLHzh0Uk0fidrMfdj4eEYsKw.roa
File: JYyGLHzh0Uk0fidrMfdj4eEYsKw.roa (raw, json)
Hash identifier: +YlIfGMGdHTS01LrwmKfk61ocSb2AZBx2SKJTU9jInE=
Subject key identifier: 25:8C:86:2C:7C:E1:D1:49:34:7E:27:6B:31:F7:63:E1:E1:18:B0:AC
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01942747F641DD5D06F04CCCDBE3B68D398F
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/JYyGLHzh0Uk0fidrMfdj4eEYsKw.roa
Signing time: Thu 02 Jan 2025 13:50:14 +0000
ROA not before: Thu 02 Jan 2025 13:50:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 83.147.16.0/22 maxlen: 24
83.147.20.0/24 maxlen: 24
83.147.21.0/24 maxlen: 24
83.147.22.0/24 maxlen: 24
83.147.26.0/23 maxlen: 24
83.147.26.0/24 maxlen: 24
83.147.27.0/24 maxlen: 24
83.147.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f6:41:dd:5d:06:f0:4c:cc:db:e3:b6:8d:39:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 2 13:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=258c862c7ce1d149347e276b31f763e1e118b0ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e4:71:cd:ba:7c:68:c6:55:d9:ff:08:fe:a5:
4b:3a:13:ef:64:1b:85:68:21:79:49:1d:de:35:e3:
0a:ca:aa:98:4b:1e:a1:5f:8d:73:db:89:02:80:ff:
4a:8e:e1:5d:c4:24:a7:0b:24:03:a7:f2:b6:be:bc:
7d:76:9a:82:dc:72:43:5c:19:c8:86:3e:6c:c5:9f:
2e:45:1a:62:a4:74:f4:a6:a4:4e:c2:5b:d4:95:52:
81:b6:35:12:6b:ea:de:31:3a:2d:8e:9a:ed:ef:0f:
26:82:27:ae:1f:c4:b4:fd:86:83:08:34:a1:91:cd:
cb:81:1d:dc:e7:51:88:42:80:6b:9f:f9:44:6a:83:
a9:9d:f4:6d:59:13:5d:00:ec:36:e6:d3:19:f5:01:
71:9e:98:fa:3c:c9:e2:92:fc:88:a4:6f:95:b3:29:
10:3c:bb:dd:e4:af:24:aa:10:cb:aa:d9:42:84:cd:
b2:6b:88:7e:60:84:89:a6:d8:40:02:aa:cb:5a:4e:
14:e3:ba:a0:53:4a:75:5a:1b:27:5f:ba:d5:6a:1b:
04:4a:07:31:8c:7d:26:9b:06:f1:8b:b6:04:c2:c4:
5f:af:2b:f1:9e:34:fa:a8:ef:86:c8:fb:db:5c:95:
a7:77:bf:85:72:48:24:2e:42:35:54:4a:1d:2e:a6:
8e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8C:86:2C:7C:E1:D1:49:34:7E:27:6B:31:F7:63:E1:E1:18:B0:AC
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/JYyGLHzh0Uk0fidrMfdj4eEYsKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.16.0-83.147.22.255
83.147.26.0-83.147.28.255
Signature Algorithm: sha256WithRSAEncryption
43:0b:14:b6:3f:d8:01:65:3a:a0:b4:00:86:de:70:94:38:10:
70:bc:04:e6:27:d5:89:a9:f8:3d:34:4d:0d:48:9c:c4:e8:d8:
69:ad:65:78:3a:e8:9d:43:a0:b8:b4:61:1d:2d:15:96:01:d7:
31:40:48:82:91:c3:ad:e9:e7:fe:98:d3:78:c6:e5:a8:1d:34:
71:85:a1:9a:46:a1:ef:e6:ca:f2:70:ec:9a:7c:0a:81:e9:7d:
b5:02:2c:59:b8:80:8e:a8:77:e7:19:82:83:8e:af:ba:46:7c:
91:68:6c:cb:3b:23:54:d3:78:ae:4c:00:17:cb:f6:2d:43:9e:
9b:d3:a5:08:02:7b:13:be:23:d1:0a:c6:85:a3:aa:45:00:ee:
b5:cb:10:60:72:02:a8:d4:8a:52:e8:69:75:97:32:ab:0e:12:
5c:26:6e:12:c2:ca:39:bf:5b:0d:bd:cb:7a:0c:28:d4:1c:e3:
ff:e6:f0:af:98:ce:e6:4c:3b:1c:c8:1d:2d:59:a7:5d:2f:85:
ba:75:6c:6c:7b:c6:4a:9d:78:71:d8:a1:93:f5:af:18:49:aa:
e3:34:07:82:6e:49:6e:a7:2a:6f:1e:9e:0f:bf:bc:ec:db:bf:
e8:14:32:0d:5c:2b:36:65:69:10:b4:1b:48:a1:32:80:59:3f:
43:66:90:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 16:52:36 2025 by rpki-client