Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/xIfC6vpWijczvKud4RVTgD-H4WQ.roa
File: xIfC6vpWijczvKud4RVTgD-H4WQ.roa (raw, json)
Hash identifier: eSCMuLS2tNJwzvLCar9jjz1nbN5IrVTqXL2c8LP2aMI=
Subject key identifier: C4:87:C2:EA:FA:56:8A:37:33:BC:AB:9D:E1:15:53:80:3F:87:E1:64
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 0193778D9F0771BFA33C67722DEBDF6F1EBA
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/xIfC6vpWijczvKud4RVTgD-H4WQ.roa
Signing time: Fri 29 Nov 2024 10:53:10 +0000
ROA not before: Fri 29 Nov 2024 10:53:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 83.147.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Dec 2024 21:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:77:8d:9f:07:71:bf:a3:3c:67:72:2d:eb:df:6f:1e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Nov 29 10:53:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c487c2eafa568a3733bcab9de11553803f87e164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b3:f1:fb:f1:4d:2e:ae:f7:0a:a4:a4:cc:b4:
4b:55:0b:be:ea:ba:88:69:df:94:b5:8d:fa:73:a0:
02:dd:63:4b:7b:02:e8:80:f9:db:9c:8f:b3:20:83:
da:2e:f3:09:1e:ad:86:b4:df:32:7b:d8:f0:a2:46:
4a:bd:2e:1d:f9:87:36:4f:82:4c:21:09:cd:d9:f5:
72:b1:50:4b:1e:d9:11:9a:23:e3:db:0a:03:78:15:
a8:09:e6:19:46:da:da:c9:bb:ad:29:11:98:8b:0b:
fd:2c:e9:9c:98:61:fc:53:3d:dc:b2:d2:c8:1a:b8:
43:04:67:19:34:eb:6d:0a:42:f2:8a:20:b4:ee:8d:
84:38:53:66:6a:a1:d1:c3:4f:78:d6:33:20:28:e7:
8e:d7:ed:7a:06:1e:c1:79:6b:b8:77:da:2b:4b:96:
d2:b3:db:b5:1f:73:8c:52:e8:5b:5c:12:92:c4:66:
da:17:d2:38:de:8f:83:97:d0:0e:fa:21:51:69:4a:
bd:d2:25:10:8e:6c:89:ff:63:73:6b:4f:3d:82:f4:
ac:1a:51:e8:f8:e7:b9:cb:d3:58:cf:eb:b9:7b:2c:
75:c4:ed:af:b7:af:43:68:5e:04:cd:f1:b0:7c:d5:
55:7a:7d:88:88:18:b8:79:1c:21:96:f2:77:9d:4a:
f2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:87:C2:EA:FA:56:8A:37:33:BC:AB:9D:E1:15:53:80:3F:87:E1:64
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/xIfC6vpWijczvKud4RVTgD-H4WQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.32.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:e2:85:69:6e:19:f3:85:99:85:c6:da:3d:be:2b:6c:b4:c5:
e2:d3:18:f7:59:27:40:8a:1c:8e:74:6d:63:c3:0a:32:5d:a7:
5f:72:66:5f:05:46:18:c5:d3:74:28:d7:7c:1b:e2:8a:69:a9:
9c:4e:ed:bf:ea:57:1f:42:b4:6d:a8:18:d8:f6:14:ac:48:b2:
9f:b5:a7:64:6f:82:a3:02:04:6f:1d:78:6f:13:93:7b:c0:6c:
5f:16:95:e3:2f:01:95:a8:b3:35:4c:9d:9a:d8:29:63:55:06:
76:e4:c7:f4:f4:dd:b2:e2:14:1a:1b:d9:03:63:c5:ec:0a:6b:
ea:15:b4:5e:da:38:9a:d7:e6:6f:77:0c:a9:cb:bc:c3:26:91:
82:1e:5b:6c:82:ed:03:68:a0:7c:f0:40:6a:b1:3c:c0:53:0a:
b7:5d:c9:bf:d6:54:87:ba:5b:62:c2:3f:db:ea:d7:bd:6c:1d:
99:2c:33:76:c7:20:2d:cb:5b:83:c9:24:34:c4:be:90:62:87:
bc:48:e3:ab:a9:13:3d:0e:4a:f1:4a:34:c4:8f:88:41:9f:f6:
35:a6:56:b9:55:e6:df:b7:c8:61:9f:38:da:06:d3:7b:3f:4c:
e5:fe:1a:01:00:e7:b2:16:19:9e:77:ea:4f:fe:44:43:2c:6d:
7f:2e:ea:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 07:35:47 2024 by rpki-client on console-ams.rpki-client.org