Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/n-r4n43EiSmkd7ibbn8iH_P6lbw.roa
File: n-r4n43EiSmkd7ibbn8iH_P6lbw.roa (raw, json)
Hash identifier: bgLM8ttMnvBXle9GGEpTf60dgVbxEruwGxCx+NLM1Ds=
Subject key identifier: 9F:EA:F8:9F:8D:C4:89:29:A4:77:B8:9B:6E:7F:22:1F:F3:FA:95:BC
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01942747FEE6AAF3A69BD17964F1D1ECAA71
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/n-r4n43EiSmkd7ibbn8iH_P6lbw.roa
Signing time: Thu 02 Jan 2025 13:50:17 +0000
ROA not before: Thu 02 Jan 2025 13:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215311
IP address blocks: 83.147.17.0/24 maxlen: 24
83.147.18.0/24 maxlen: 24
83.147.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:fe:e6:aa:f3:a6:9b:d1:79:64:f1:d1:ec:aa:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 2 13:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9feaf89f8dc48929a477b89b6e7f221ff3fa95bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1b:a2:16:d6:f9:f4:3d:d1:31:6a:91:e0:ec:
0f:19:0d:ff:63:ce:e9:2d:ac:14:c5:48:2c:9f:29:
32:b0:36:e0:4e:0b:9f:9b:70:31:1e:ff:99:45:7e:
21:8f:4a:f3:c0:7d:9a:de:f7:52:66:2c:45:e2:eb:
2c:28:5f:a8:a2:12:87:f9:a4:3e:f4:94:97:77:66:
3f:bf:80:81:37:a3:9b:f9:99:85:89:77:77:92:4d:
6c:b7:c1:dd:7d:4e:db:44:aa:17:b3:95:4a:32:fe:
34:3d:9d:54:fd:0f:20:39:86:6f:10:aa:54:97:8e:
d0:05:33:84:d7:b2:15:72:e3:35:ad:f1:94:05:cc:
dd:60:ef:cc:e6:c1:69:f8:f5:90:9d:59:77:75:16:
48:3a:67:e9:ae:f3:64:e9:a3:22:4d:bc:31:1b:25:
9c:5f:9e:0d:bf:d8:81:42:1e:82:ef:ed:b9:10:93:
65:1f:e2:1b:3f:39:3b:df:8e:5d:2f:b3:86:12:29:
36:c4:24:31:9f:db:72:83:5d:86:ae:48:91:c8:18:
d1:38:a7:5b:8e:23:f9:0f:0f:f0:bc:c9:3a:10:0a:
d9:1d:7b:d6:34:71:1f:96:bb:87:d3:e2:f0:9d:e1:
8e:a0:1b:bc:42:5c:b3:9d:99:66:af:d0:cd:4b:81:
f5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:EA:F8:9F:8D:C4:89:29:A4:77:B8:9B:6E:7F:22:1F:F3:FA:95:BC
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/n-r4n43EiSmkd7ibbn8iH_P6lbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.17.0-83.147.19.255
Signature Algorithm: sha256WithRSAEncryption
a0:44:02:f7:c5:a2:1d:99:13:6d:07:5f:8e:2f:d2:b5:98:7f:
b3:cc:ef:03:b7:e0:90:46:29:63:31:2e:89:63:3f:62:73:d6:
01:15:8d:44:17:15:67:e8:12:e6:1b:13:7e:6e:86:48:eb:35:
9b:74:a4:f2:fd:03:47:4d:7e:f1:42:6a:b4:a0:bd:9d:50:aa:
67:7c:f0:e4:ff:9b:1e:d1:1b:41:2e:62:bf:f2:b6:1c:e5:e5:
ee:31:e0:46:d7:85:96:13:75:2d:aa:a9:2f:d9:a0:b9:40:ad:
30:a0:ef:6b:b4:f5:39:85:71:c8:13:cb:5f:2a:ec:5e:4d:53:
b6:7f:a8:b3:8b:11:7b:3a:41:59:8e:87:92:79:16:bc:15:e7:
8c:df:05:8a:c1:a7:0f:aa:dd:d6:4d:21:b7:58:0c:c0:5e:86:
79:e5:83:8f:2f:1a:62:15:cf:9d:82:3d:1c:1c:8e:28:21:96:
0c:5c:d9:e3:b9:4e:05:4e:b9:37:03:ed:96:5b:16:2a:18:86:
e4:08:20:12:a0:fe:ce:6e:7d:db:c2:64:59:d7:8c:3f:d8:f3:
d5:e0:6a:7c:2e:1c:a8:0d:b2:fe:fd:0c:02:28:77:ce:0a:23:
15:36:ed:4f:ce:13:b5:e1:eb:b8:be:49:64:5e:e9:c0:b3:7a:
25:db:a8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 16:55:41 2025 by rpki-client