Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/fnKX5f769Te8QG9am0LCc-_EX6M.roa
File: fnKX5f769Te8QG9am0LCc-_EX6M.roa (raw, json)
Hash identifier: XCbr5Ak+yOp2aeHv0hj0Y1kgNB/dIAnyttEDgmH0nvs=
Subject key identifier: 7E:72:97:E5:FE:FA:F5:37:BC:40:6F:5A:9B:42:C2:73:EF:C4:5F:A3
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01942747F680B0064511706E05B011C3F5DC
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/fnKX5f769Te8QG9am0LCc-_EX6M.roa
Signing time: Thu 02 Jan 2025 13:50:15 +0000
ROA not before: Thu 02 Jan 2025 13:50:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 83.147.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f6:80:b0:06:45:11:70:6e:05:b0:11:c3:f5:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 2 13:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e7297e5fefaf537bc406f5a9b42c273efc45fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:dc:ca:14:6f:52:bf:16:f1:43:bf:f8:4c:0e:
d4:04:76:a1:a9:a7:11:52:e2:5b:05:6f:68:69:67:
e5:75:27:f3:f9:f9:10:5d:e6:03:16:4a:07:98:6c:
4a:ac:cf:7d:d4:ca:a4:44:b9:5e:b1:6f:6d:ba:5e:
ad:59:ad:37:0d:79:24:80:3c:51:48:de:c6:01:a6:
19:15:67:60:15:cc:39:15:10:55:42:47:96:c6:c4:
f4:1b:d4:af:48:49:e5:a1:19:fa:ef:39:4b:52:78:
ff:bd:12:d1:e4:1c:39:95:1d:48:2a:6b:d3:34:ec:
ed:35:dc:25:a1:cb:6f:84:e0:bc:d2:c3:35:8a:13:
8f:04:f4:01:9d:04:59:bf:95:e9:36:bf:35:fa:c6:
de:9d:5f:72:6d:3c:c6:c9:43:bd:e7:09:6b:1f:69:
26:7e:72:ba:22:4d:59:70:ee:64:23:1d:e1:95:09:
0d:1a:92:79:c1:32:96:fc:2f:0f:bb:34:8a:ee:58:
87:78:0c:53:55:9b:26:55:c7:04:f5:eb:24:01:0b:
cb:a5:09:e9:e6:90:4c:af:13:42:e8:90:10:03:cf:
79:8c:bd:1e:32:cf:bb:43:0a:3c:d5:76:37:f9:20:
1f:ca:18:b2:5c:d6:9a:59:8d:38:c9:2b:4a:84:82:
5a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:72:97:E5:FE:FA:F5:37:BC:40:6F:5A:9B:42:C2:73:EF:C4:5F:A3
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/fnKX5f769Te8QG9am0LCc-_EX6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.8.0/22
Signature Algorithm: sha256WithRSAEncryption
53:7f:99:8c:98:e7:2f:ce:43:72:9d:05:8d:27:e8:43:a9:af:
01:1c:4b:10:26:c7:b9:08:99:d2:14:f7:e4:11:c2:75:20:c9:
b4:cc:62:43:e6:69:63:1e:61:9a:c5:5c:6c:e5:64:4e:20:77:
4d:34:cf:fc:21:4e:fd:8c:2d:0a:7d:f7:8d:58:4b:0e:54:e8:
6d:05:f2:6e:0b:ca:57:d4:e7:21:64:97:90:39:a8:fd:5f:d4:
f6:cd:80:ca:c7:17:6a:8e:bf:74:31:02:91:13:f0:94:f5:26:
29:4f:51:a9:12:ee:b6:b5:f7:02:94:50:e3:9e:0e:72:09:a7:
cd:f1:ee:64:3c:97:bd:3b:83:9e:db:c6:a0:81:24:2f:41:cc:
fc:be:b6:55:10:dc:62:fe:d2:f0:98:17:f2:96:56:f1:ad:65:
28:7f:df:1a:78:1d:d0:9c:8a:ae:46:9d:aa:4e:44:4c:55:1c:
51:4f:83:a4:26:3f:d4:82:e8:fc:86:25:c9:bf:fc:34:5c:40:
99:70:9a:12:ad:57:71:0d:fc:69:02:3a:c0:73:0a:3c:ea:b8:
b1:49:10:3c:28:a1:7f:b2:3f:76:20:37:5a:c8:b0:f8:99:7a:
7b:ba:50:ac:9f:d7:46:a1:32:e6:3f:1e:0a:b6:c6:78:44:b0:
b9:76:df:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 17:07:08 2025 by rpki-client