Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/LI5Nt-2K3gsdcICE11EckjmUZWw.roa
File: LI5Nt-2K3gsdcICE11EckjmUZWw.roa (raw, json)
Hash identifier: U9kr2zE52mxUvFJQ2bTsoVIgmPxCzGqU0iGQCUbr8t0=
Subject key identifier: 2C:8E:4D:B7:ED:8A:DE:0B:1D:70:80:84:D7:51:1C:92:39:94:65:6C
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01942747FBA1D8842FCB45D45BCBD4220012
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/LI5Nt-2K3gsdcICE11EckjmUZWw.roa
Signing time: Thu 02 Jan 2025 13:50:16 +0000
ROA not before: Thu 02 Jan 2025 13:50:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 83.147.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:fb:a1:d8:84:2f:cb:45:d4:5b:cb:d4:22:00:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 2 13:50:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c8e4db7ed8ade0b1d708084d7511c923994656c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bc:de:a3:cf:48:6f:4c:f2:4e:4a:51:c1:ea:
eb:86:6c:d1:d5:fb:aa:73:d3:f6:0c:02:c3:be:fe:
6c:d0:e7:f0:ac:f6:0d:7a:c9:6f:e0:75:5c:0f:f4:
c1:69:20:18:86:0f:8a:d7:99:18:f8:17:ed:52:e6:
da:4c:8e:4b:5c:30:5d:25:3f:c8:f1:bd:13:7c:9c:
7e:21:f8:4f:2d:44:4c:32:a9:82:5e:d6:2e:33:14:
02:d8:2f:fe:10:ea:9e:1c:5f:37:a9:86:76:2c:95:
bb:e3:c3:1a:97:81:f9:cd:94:00:2b:0d:b8:2e:82:
f8:db:ed:a5:96:5e:1b:a6:7e:76:fe:ba:cf:dd:f1:
b9:75:1f:46:22:10:2e:6c:b7:fb:de:55:ac:be:67:
ba:0a:16:47:68:0f:cd:8e:01:8d:76:6c:6e:14:23:
de:ab:ca:49:55:c4:f1:ba:fa:10:80:f5:05:2b:89:
09:5d:53:92:3c:d3:4e:52:94:4b:8f:11:4e:84:32:
d3:16:f4:6d:d5:88:db:52:31:d8:c4:29:33:9c:3c:
cd:2b:69:1b:7c:22:87:f9:a2:a7:87:fb:58:1a:64:
34:f2:5a:11:04:f9:a0:0a:0d:0f:39:71:81:6d:18:
86:dd:25:89:28:85:bd:cd:c9:50:28:c6:10:7c:39:
89:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:8E:4D:B7:ED:8A:DE:0B:1D:70:80:84:D7:51:1C:92:39:94:65:6C
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/LI5Nt-2K3gsdcICE11EckjmUZWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.32.0/22
Signature Algorithm: sha256WithRSAEncryption
83:0c:c1:9d:19:b4:de:e2:4e:6c:3e:eb:3f:21:f7:7c:03:1f:
84:b3:8e:ba:8e:44:2a:a3:7f:cd:b4:d5:fa:63:f2:67:81:60:
c1:aa:33:de:44:2e:0a:9a:b4:d7:bf:ad:84:a9:63:ad:1b:d1:
0e:96:79:db:9f:b9:2b:f2:10:ee:72:aa:df:bd:34:79:a4:29:
fe:c6:ca:e0:57:7f:9b:82:20:55:53:9d:31:88:f4:ca:78:d0:
b0:06:4d:5b:5f:5d:8b:1f:c4:c4:30:d8:86:9e:c1:2d:34:ca:
4f:e3:1a:2f:c0:ad:95:8a:1a:ba:ba:e6:15:93:54:ab:3c:a7:
bb:77:36:b9:91:c0:8c:37:52:9f:83:1a:5f:ad:d8:a9:89:2e:
d3:b3:2f:61:7f:17:55:e0:6e:dd:e0:08:bb:9b:a3:4d:2a:9d:
9a:cf:7f:48:17:c4:55:88:3c:01:c9:c7:c0:c2:2b:e8:69:03:
0b:9a:87:8e:c7:47:26:45:81:c9:29:2f:1a:bb:c1:89:9e:02:
38:ce:03:5e:4d:e4:52:67:fb:f0:ef:a7:92:a8:28:22:67:ae:
99:f4:b1:74:f7:39:41:21:2d:94:e3:98:d6:2a:06:e3:1b:a8:
fd:80:d0:57:1f:79:ac:91:1b:e0:ae:f2:55:19:65:70:db:4f:
1e:a1:47:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 16:55:39 2025 by rpki-client