Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/dYLwboeWBvO3gpHCAjNwtlieQNk.roa
File: dYLwboeWBvO3gpHCAjNwtlieQNk.roa (raw, json)
Hash identifier: 2jLvU4CNbhYTl2bGjOJdC2r3uf2yj199O23PpNMrMwU=
Subject key identifier: 75:82:F0:6E:87:96:06:F3:B7:82:91:C2:02:33:70:B6:58:9E:40:D9
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 018E5571CDFAB1A8D8F237D6AD7F1E950E8C
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/dYLwboeWBvO3gpHCAjNwtlieQNk.roa
Signing time: Tue 19 Mar 2024 06:41:45 +0000
ROA not before: Tue 19 Mar 2024 06:41:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397423
IP address blocks: 83.147.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 00:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:55:71:cd:fa:b1:a8:d8:f2:37:d6:ad:7f:1e:95:0e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Mar 19 06:41:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7582f06e879606f3b78291c2023370b6589e40d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2e:d2:28:b9:32:c1:ae:28:c2:31:09:24:cb:
6b:ba:92:93:69:68:70:dc:77:24:66:83:a7:76:0d:
43:98:3f:90:aa:7d:32:50:bb:06:50:1c:bf:95:5e:
5e:f2:2e:68:dc:78:89:40:ee:3c:eb:62:7e:63:bf:
f9:4c:e5:e9:83:72:fa:05:52:3a:49:49:b2:86:a5:
bc:96:b0:61:f5:ab:db:4d:b9:7c:f9:5e:c3:bb:86:
39:c0:d0:c0:43:ff:93:80:62:4a:a2:81:f0:3c:72:
1d:18:6e:8d:93:2c:a9:e9:1a:43:70:2e:1f:a1:76:
99:35:d5:ef:5d:9b:d8:0f:16:65:2c:07:55:b6:b0:
49:43:3e:d9:c3:fc:27:1c:15:e2:cd:cc:22:3e:97:
5f:16:35:bb:94:bd:01:76:63:0e:2e:dc:a3:e1:ee:
e8:53:19:8a:3b:52:bc:43:82:a6:74:e2:02:3e:af:
b9:54:4a:2c:dd:4e:a6:5b:56:55:3d:8c:fb:52:5a:
aa:ae:d2:83:d0:46:a1:fe:01:00:99:0e:24:4a:8d:
bb:ba:3a:cd:a9:7b:9e:d4:6a:25:d7:68:49:40:0b:
1b:a7:50:83:d2:1e:8c:66:9c:91:11:cc:65:ea:67:
5f:65:58:cd:3b:c1:e2:9a:52:65:4c:47:93:1b:ce:
0f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:82:F0:6E:87:96:06:F3:B7:82:91:C2:02:33:70:B6:58:9E:40:D9
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/dYLwboeWBvO3gpHCAjNwtlieQNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.16.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:31:3a:6f:96:96:0c:3f:85:46:55:83:dc:45:b8:a2:8f:7d:
f8:64:a6:10:6d:9b:ff:51:2b:fc:63:7a:2f:b1:dd:50:06:36:
9c:51:9c:62:33:68:f7:2b:41:09:81:3e:f6:9c:62:16:73:cb:
a4:8b:8f:33:18:b4:f0:13:05:d7:b1:e5:2b:c4:e5:83:aa:06:
e1:ca:ae:1b:29:d6:be:65:1c:6a:17:c7:65:a4:c9:8c:9b:16:
22:45:e8:35:3c:29:da:96:33:da:97:19:b5:75:87:34:88:33:
7e:4c:ee:c2:75:e2:17:74:6d:76:85:ea:bc:ba:45:e9:68:f5:
21:cc:69:b7:49:46:0c:6c:f3:84:03:c1:21:be:cd:68:5b:9b:
7c:83:48:2f:55:ff:18:a5:fc:c5:c5:a8:ee:af:2d:42:fd:19:
ba:a6:1e:a7:1b:aa:20:91:c0:2a:cc:27:dc:c6:8c:18:e5:f2:
d8:fd:17:f8:14:2d:d7:f4:22:58:1d:75:d2:da:6e:60:57:91:
e1:51:e5:5b:ca:1e:e8:ed:5b:0b:59:76:59:a3:1c:64:de:e2:
5a:49:ba:70:5e:aa:9c:88:20:df:cf:8a:64:b0:f2:57:26:ed:
ab:c2:f7:d6:c6:7b:e1:7f:ba:34:da:47:c6:75:12:a3:ce:5a:
6e:da:6d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 09:57:12 2024 by rpki-client on console-ams.rpki-client.org