Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/htU2zQ_aI4M9dQkgtH1xummHFKQ.roa
File: htU2zQ_aI4M9dQkgtH1xummHFKQ.roa (raw, json)
Hash identifier: UokcjiZBrQzMiPYJ8GJ2v/urVsGU67ojMK00yN4jh8w=
Subject key identifier: 86:D5:36:CD:0F:DA:23:83:3D:75:09:20:B4:7D:71:BA:69:87:14:A4
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01915ABDEF5555F1E1F5DECD8386E760C6F0
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/htU2zQ_aI4M9dQkgtH1xummHFKQ.roa
Signing time: Fri 16 Aug 2024 10:31:22 +0000
ROA not before: Fri 16 Aug 2024 10:31:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21840
IP address blocks: 83.147.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:5a:bd:ef:55:55:f1:e1:f5:de:cd:83:86:e7:60:c6:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Aug 16 10:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86d536cd0fda23833d750920b47d71ba698714a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4e:7b:8b:d2:3d:69:7d:25:3f:7b:ec:b4:f2:
cb:0d:41:ad:07:c1:19:56:c0:e4:0b:d6:0f:fc:36:
dd:70:4f:b5:45:af:3d:88:a6:6c:24:23:c1:29:57:
f0:28:fd:c4:ab:3b:22:06:b0:54:cb:f6:60:1c:11:
a8:bc:5e:48:9c:0f:2b:90:97:05:8c:8c:45:a2:05:
1d:72:5f:38:9a:44:7f:82:ca:e8:be:a0:fc:76:c1:
bb:96:06:05:49:67:43:7b:5a:fc:44:d5:2b:bb:66:
f2:1d:2b:c6:6c:9a:0d:79:c8:a4:64:b1:0c:8b:a6:
5e:74:b4:b4:88:55:86:31:72:88:9e:11:23:f9:40:
0c:ad:a9:bb:30:49:96:22:1b:ff:ce:f7:e0:6c:2a:
73:85:f1:8f:d8:89:91:f0:8d:ef:2a:d2:a1:10:aa:
b6:c3:6e:20:04:a7:ed:c5:c4:90:c9:d9:da:1a:9c:
d6:21:37:a0:47:8a:f2:07:84:f4:24:5b:2c:c5:60:
2b:5e:ae:d3:c3:4d:5a:62:67:08:4f:a6:c5:8d:5f:
00:61:60:d4:14:96:c4:bf:ce:36:0b:76:39:7e:ab:
a2:01:f0:75:d7:67:46:37:09:64:a0:b7:be:27:4a:
7d:6a:04:1b:e5:de:53:a8:1d:6c:6d:1d:a0:82:f2:
cf:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D5:36:CD:0F:DA:23:83:3D:75:09:20:B4:7D:71:BA:69:87:14:A4
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/htU2zQ_aI4M9dQkgtH1xummHFKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.62.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:5b:9f:25:78:ba:9c:8d:02:80:49:2f:52:c3:30:ea:00:78:
63:ec:14:81:31:19:75:64:f7:dc:48:21:81:00:ca:4a:bf:4c:
11:4b:08:b1:c4:6c:4e:50:60:67:23:1a:3b:fd:58:7a:91:1e:
63:da:ff:cd:91:a1:a7:39:7f:e8:62:17:fe:80:1b:a1:f9:97:
3d:f0:7c:1a:23:b8:19:31:34:50:39:12:92:b6:1f:57:67:b2:
4f:bc:e6:dd:31:10:a3:d8:9b:81:d1:c4:67:da:5b:d2:df:48:
ee:00:1f:eb:2b:6c:49:98:8b:87:88:59:5f:97:c0:9f:3b:3e:
77:4c:3c:03:75:f9:1a:8f:e1:f1:2c:6a:6e:9b:5a:c0:25:ba:
14:b9:62:f4:a7:fc:39:d7:e8:68:18:e0:c8:52:62:54:0c:3a:
07:9f:3b:10:dc:a1:69:91:19:cb:c7:a1:7c:8d:0a:91:3e:a9:
48:3d:c4:d3:88:8d:ca:e0:03:38:c1:3f:b8:c2:4f:a9:6b:a4:
6f:3e:5f:3a:a5:33:55:21:ec:14:01:dd:ee:19:ac:6b:e2:3a:
1a:8e:0c:94:98:d3:77:19:81:25:ec:f2:0a:6f:ae:c6:cc:14:
18:ec:08:10:34:a8:ce:58:3f:6b:7e:89:75:19:98:45:e0:16:
3f:6c:bc:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:32:36 2024 by rpki-client on console-fra.rpki-client.org