Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/RF_0ZoopT2OYD94ESLS8-RKGn1I.roa
File: RF_0ZoopT2OYD94ESLS8-RKGn1I.roa (raw, json)
Hash identifier: KhCqQ44gDiQf+0xobcUZmx22l7sjaIdtLBPHOJK8Y90=
Subject key identifier: 44:5F:F4:66:8A:29:4F:63:98:0F:DE:04:48:B4:BC:F9:12:86:9F:52
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01942747F6C78D96D778D97A522316C018CA
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/RF_0ZoopT2OYD94ESLS8-RKGn1I.roa
Signing time: Thu 02 Jan 2025 13:50:15 +0000
ROA not before: Thu 02 Jan 2025 13:50:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5089
IP address blocks: 83.147.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f6:c7:8d:96:d7:78:d9:7a:52:23:16:c0:18:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 2 13:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=445ff4668a294f63980fde0448b4bcf912869f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:41:b3:a0:bb:b6:25:36:42:0c:34:7b:f9:65:
d8:1a:a3:f7:9b:59:51:cf:24:a2:16:e2:9d:62:86:
bf:59:90:cd:e1:04:de:d3:5c:1d:94:a3:f5:ee:4f:
8f:0e:c9:ff:aa:2c:95:c5:d2:99:da:74:27:4f:03:
75:33:d4:ce:51:6e:e8:c7:41:c9:bb:1a:96:28:fb:
c7:7c:4c:ac:9b:00:ef:ec:15:13:6c:d4:a4:17:70:
a8:be:65:9c:a7:1d:53:bf:04:81:3a:2e:71:8f:a2:
48:d8:57:c9:71:27:09:23:23:a6:49:3e:ef:67:01:
93:89:c2:6a:03:10:da:8b:52:f4:70:d2:b6:26:c7:
52:ee:1b:38:f4:0d:21:4a:be:41:79:6f:d9:32:e5:
6c:c2:dc:b6:90:8d:ba:05:6e:e3:c3:a6:eb:0b:ea:
38:3d:92:73:2d:44:d1:93:fb:16:3b:38:a2:d3:79:
f4:ab:a1:a6:62:31:f8:ce:d4:58:07:1b:b9:f0:f3:
26:ce:48:08:0d:f9:32:4d:9f:6e:40:13:99:8f:1d:
a6:35:08:80:2b:44:b3:12:f0:13:38:b2:0c:04:8c:
3d:e5:5d:2b:37:75:a6:14:85:91:4b:c7:7d:76:26:
d5:47:51:18:32:b4:49:f9:59:8e:d7:fe:88:2c:43:
eb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:5F:F4:66:8A:29:4F:63:98:0F:DE:04:48:B4:BC:F9:12:86:9F:52
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/RF_0ZoopT2OYD94ESLS8-RKGn1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.56.0/22
Signature Algorithm: sha256WithRSAEncryption
84:b3:b6:00:3b:6f:ca:95:77:a9:c6:e0:5b:75:32:5a:e4:7c:
10:d1:fc:26:93:39:69:fb:d1:6d:91:c4:35:14:5b:8e:c0:19:
97:d8:92:c1:6b:69:bc:f8:7d:80:a1:4a:70:ce:7b:71:47:4c:
0e:e2:ce:e6:f4:3c:20:b1:b9:1a:70:1d:30:f7:dd:f2:1a:76:
2f:93:dd:3a:1a:5a:98:c2:88:28:d0:11:89:d3:38:54:21:da:
a0:16:03:c4:49:19:f2:31:f7:52:7c:aa:2e:ed:1f:a7:28:35:
ed:82:65:43:e8:e4:94:0b:47:d9:6f:ad:b1:ef:14:d6:87:cc:
3d:7a:17:1d:fd:b7:2c:30:5f:f2:cb:e8:ac:17:17:a9:4b:03:
48:da:42:b9:fa:f0:82:34:d6:af:35:9d:60:10:b6:db:4d:64:
e8:96:32:36:cc:9a:b0:73:11:f9:67:97:6c:3d:f2:04:e1:c7:
be:6f:d6:fe:dc:78:2d:ec:c0:72:0c:b9:ee:16:76:20:ae:32:
40:e4:cd:a2:bd:47:c7:11:5c:8d:f1:f4:90:07:45:6e:f7:36:
2d:1c:25:a8:93:86:46:83:44:7b:e4:00:4c:b9:ee:96:f0:b0:
f1:d4:66:6c:16:de:11:de:61:68:65:f5:8c:e9:10:00:ab:12:
b6:99:29:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 16:51:43 2025 by rpki-client