Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/mGce437-IWJCeN_w7-KdoX0NRiA.roa
File: mGce437-IWJCeN_w7-KdoX0NRiA.roa (raw, json)
Hash identifier: qhUFj8zTQCwxwbug7YLWy1B6/CflwDOnClI8+P3Bq20=
Subject key identifier: 98:67:1E:E3:7E:FE:21:62:42:78:DF:F0:EF:E2:9D:A1:7D:0D:46:20
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01942747FF381CEB7E2E900C6AF028355D91
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/mGce437-IWJCeN_w7-KdoX0NRiA.roa
Signing time: Thu 02 Jan 2025 13:50:17 +0000
ROA not before: Thu 02 Jan 2025 13:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 270187
IP address blocks: 83.147.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ff:38:1c:eb:7e:2e:90:0c:6a:f0:28:35:5d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 2 13:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98671ee37efe21624278dff0efe29da17d0d4620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:68:b3:50:a0:2a:1b:9e:e3:d2:81:20:d7:d8:
7d:fe:6c:a6:9a:76:98:84:3d:78:19:cb:9c:c2:6c:
35:a4:e1:4d:5c:75:99:ff:3a:b3:c1:d7:07:4d:4a:
57:b3:22:a5:37:49:b2:b8:8d:ef:1b:69:a5:d6:33:
26:7f:3d:08:14:55:f0:c5:06:a6:b5:d3:3a:93:1a:
33:f0:d1:39:6d:78:ca:14:44:bf:ce:28:0c:14:e7:
19:7f:8e:da:86:ee:e8:ae:2b:9a:d0:e0:86:b9:37:
d2:fe:da:b5:aa:e6:9a:9d:30:a7:74:9d:d5:96:b5:
a8:29:28:88:30:41:22:a9:46:c1:ce:df:c0:03:3d:
9c:3c:09:e7:7e:eb:71:03:c9:b5:b1:ee:b9:38:12:
59:f0:a4:94:c1:01:bc:c7:0a:02:1e:4d:f2:03:7a:
a8:34:37:07:ef:2f:7d:b9:52:41:8b:e6:35:56:27:
67:c4:f6:31:09:87:69:e0:60:24:83:4a:39:73:1d:
90:40:0c:3d:c0:a3:8b:59:a6:ac:16:de:29:5c:b3:
3c:77:a5:a5:f0:04:2d:30:77:83:61:05:42:e4:f5:
5a:f7:22:a9:b1:0f:4c:7e:8d:a8:5c:90:f4:a7:eb:
ec:6e:58:48:ab:e2:fc:16:83:35:64:ed:fd:ec:36:
9b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:67:1E:E3:7E:FE:21:62:42:78:DF:F0:EF:E2:9D:A1:7D:0D:46:20
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/mGce437-IWJCeN_w7-KdoX0NRiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.48.0/22
Signature Algorithm: sha256WithRSAEncryption
65:56:82:4e:79:0c:78:b5:fd:e5:94:06:56:36:d9:01:bf:3c:
1b:af:35:24:60:1b:40:35:9a:31:51:ee:4e:4c:df:e3:28:bd:
ae:c5:36:67:23:a5:ab:e8:7f:b8:ac:f4:17:8a:f6:c4:8c:83:
f6:ab:4b:18:5e:4d:72:82:0a:37:ed:d0:f9:7d:d2:f6:13:01:
c0:c2:15:24:52:99:4b:bf:27:6b:e2:03:eb:1b:67:c8:d2:ce:
0c:74:26:4f:45:ca:0a:5d:47:1a:be:90:c6:99:6f:6f:72:84:
c4:98:df:2c:8d:c4:e1:ee:18:ea:a7:e8:fe:e9:74:a7:e8:10:
27:d3:7f:35:81:4a:c0:b2:bd:e7:c6:6a:3a:e6:cc:e7:6e:11:
eb:b8:05:22:6b:a6:e8:21:b8:a8:5e:27:08:fe:6f:b6:6f:8e:
b0:36:7e:a0:a3:98:b1:f5:e6:8d:ec:b0:b4:d2:58:9a:b9:01:
03:79:69:b1:43:83:a8:9e:9a:a4:94:31:01:91:7a:04:34:c8:
03:79:4b:db:c3:a5:18:39:f8:53:72:36:cc:b1:0b:b8:58:06:
ec:6b:4b:b2:f2:1d:59:8d:75:c7:c6:aa:46:74:5c:74:45:b1:
11:bf:58:d9:97:4e:8c:23:d2:48:18:74:f4:4e:0c:1b:ca:ce:
90:c9:e1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 16:48:49 2025 by rpki-client