Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/rMiGbs7-FQs8_ORoPv4QNfKryhg.roa
File: rMiGbs7-FQs8_ORoPv4QNfKryhg.roa (raw, json)
Hash identifier: n/VAII6UmUdHSSyio94w7g59PL2HlvN5WYUB1jdsc2s=
Subject key identifier: AC:C8:86:6E:CE:FE:15:0B:3C:FC:E4:68:3E:FE:10:35:F2:AB:CA:18
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01942747F900E65F8152B071AE257043DD3B
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/rMiGbs7-FQs8_ORoPv4QNfKryhg.roa
Signing time: Thu 02 Jan 2025 13:50:15 +0000
ROA not before: Thu 02 Jan 2025 13:50:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21840
IP address blocks: 83.147.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f9:00:e6:5f:81:52:b0:71:ae:25:70:43:dd:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 2 13:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=acc8866ecefe150b3cfce4683efe1035f2abca18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:88:c1:f5:da:f7:c0:17:53:ca:a1:1f:53:f1:
d7:b8:54:2b:65:db:e7:ab:a0:1f:27:d3:20:32:0b:
25:bf:7d:6b:b4:64:a4:79:9f:f6:27:f1:f3:4c:85:
d9:db:e9:dc:e8:20:41:71:7e:86:67:3d:1b:aa:57:
da:0d:43:c9:88:cd:57:77:80:0b:c9:57:19:46:40:
e5:25:90:a5:26:7c:54:c2:bc:ee:bc:6e:e5:8e:4b:
c5:10:21:29:63:fc:36:8f:05:36:c2:27:cd:c6:65:
6b:ba:b5:b6:1b:e1:25:ce:95:96:db:25:a1:0d:a9:
eb:dc:4a:73:ba:fd:4b:a2:41:cc:11:5b:80:fb:40:
57:2f:4d:23:35:e0:aa:f8:24:9d:56:43:0b:ab:c6:
fc:e7:93:b9:67:d2:92:6d:87:c9:31:85:9a:2e:87:
58:75:61:f9:3e:7c:6b:fa:de:24:65:03:1f:ca:05:
08:eb:bf:37:da:ff:19:62:40:45:64:28:4e:18:79:
db:83:1b:ff:41:9a:e9:52:cb:4c:c8:1a:b4:39:f2:
be:fa:06:cc:76:18:c4:c1:73:91:4b:18:35:c8:c9:
73:9d:8e:f1:fb:e5:a3:53:74:eb:e1:c6:5c:9c:27:
cd:26:db:f0:28:45:60:70:85:e9:f6:e6:55:6d:d8:
19:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C8:86:6E:CE:FE:15:0B:3C:FC:E4:68:3E:FE:10:35:F2:AB:CA:18
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/rMiGbs7-FQs8_ORoPv4QNfKryhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.62.0/24
Signature Algorithm: sha256WithRSAEncryption
29:48:02:43:71:7f:d7:16:fc:87:9a:8c:bf:3f:3a:04:b3:f6:
68:ff:63:b0:a7:98:b6:56:3b:0b:46:56:57:24:6e:47:0e:33:
51:19:ab:06:5d:f4:b8:b9:f4:2e:46:1f:e7:a5:84:5a:df:16:
c2:13:a7:6f:c9:44:21:a9:ee:c8:c7:0c:88:6e:dc:90:b8:4e:
04:44:20:30:5d:60:36:11:6a:46:b6:bc:22:d3:2c:c2:05:c2:
3b:98:29:fb:7c:27:f2:f2:89:9f:ed:d2:2f:80:6a:3f:77:49:
8c:9f:59:01:9d:2c:e2:c8:09:82:48:72:8b:de:23:3a:2e:bf:
da:d7:21:7c:aa:42:b2:db:d5:58:58:28:f8:f4:0d:82:52:d9:
ca:09:15:53:5d:ec:50:5d:95:3e:e6:ee:03:58:75:15:5d:4b:
ec:7e:0d:4b:71:1c:03:c4:f8:7a:80:64:18:7a:8a:26:a6:92:
b9:54:71:2d:00:76:fe:15:42:15:36:41:2b:c2:bf:f2:96:ff:
84:02:8f:01:b8:bb:ab:90:4f:5c:bf:44:12:00:e2:30:9c:da:
a3:a5:a6:8f:e9:a5:a5:5f:aa:20:ab:ce:ce:d6:1e:85:89:a3:
3f:04:00:94:5e:38:f4:10:3c:37:41:fb:fa:e3:e1:3a:1f:7c:
89:e0:2b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 16:58:22 2025 by rpki-client