Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/zxOOVaQxZCsuoovtejMYuScjI8o.roa
File: zxOOVaQxZCsuoovtejMYuScjI8o.roa (raw, json)
Hash identifier: LDEZSLVz+t8ZGQvsKj/MSr5CS8tXcy/ENL+KLbTXhvo=
Subject key identifier: CF:13:8E:55:A4:31:64:2B:2E:A2:8B:ED:7A:33:18:B9:27:23:23:CA
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01942747F987CE3A86544F7E1804094472A2
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/zxOOVaQxZCsuoovtejMYuScjI8o.roa
Signing time: Thu 02 Jan 2025 13:50:15 +0000
ROA not before: Thu 02 Jan 2025 13:50:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31577
IP address blocks: 83.147.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f9:87:ce:3a:86:54:4f:7e:18:04:09:44:72:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Jan 2 13:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf138e55a431642b2ea28bed7a3318b9272323ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:21:65:b1:5e:9f:18:01:42:dc:9f:e0:36:76:
f3:f9:3a:26:7e:8a:81:43:16:8d:ec:bb:2a:49:2f:
22:a5:4d:32:15:79:88:ce:f0:05:95:bd:db:f1:12:
d4:b3:17:e7:a3:e6:75:c3:9a:27:0f:e8:a8:54:c7:
2c:ca:57:dd:0f:c2:f9:8c:c6:08:10:7e:2a:c4:0c:
a1:ea:e9:50:e4:b0:57:5d:f1:16:b0:08:a7:3b:43:
76:b2:93:ee:8d:4e:1e:34:4b:80:cc:cc:35:ed:f6:
96:60:2a:00:d4:38:98:38:28:ee:55:84:33:46:f8:
0e:c8:45:74:9c:f7:de:76:a5:73:93:95:f7:96:26:
db:9b:f8:55:95:fa:52:b4:d7:65:a0:f1:16:05:75:
4f:c1:0f:43:73:1e:97:f2:50:98:33:83:96:6b:3c:
69:8f:80:4c:26:8d:12:51:0f:0e:3e:d2:03:07:ca:
f8:ea:18:20:34:3a:db:93:30:e8:b1:25:e9:80:f2:
e0:6b:b4:4f:83:a8:02:3b:a6:59:46:4a:40:7e:b7:
91:64:4a:c1:77:0e:9d:ff:9b:53:57:6e:e9:3e:61:
e6:d4:d9:27:32:98:8a:07:e3:ed:14:5e:d6:ee:79:
56:7c:64:e4:43:2f:bb:cf:ef:e4:93:81:71:da:70:
89:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:13:8E:55:A4:31:64:2B:2E:A2:8B:ED:7A:33:18:B9:27:23:23:CA
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/zxOOVaQxZCsuoovtejMYuScjI8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.63.0/24
Signature Algorithm: sha256WithRSAEncryption
87:63:33:bb:10:43:0e:06:4c:63:eb:c3:a1:1e:0f:c7:65:0b:
e0:de:74:b9:15:44:3e:2f:c5:b3:e6:d7:53:b8:98:af:67:29:
b9:a8:24:dc:0f:7c:84:44:63:4c:f9:74:7a:85:a5:da:f3:2a:
0e:34:dd:d4:f7:06:ff:b0:69:ad:cc:9b:87:40:e3:48:53:89:
9a:c2:db:99:73:39:37:73:bf:b5:28:34:13:74:96:fb:17:c5:
ed:a4:a5:83:be:72:8c:f7:c0:28:8e:c2:4d:f9:ac:4d:7b:f0:
dd:32:c8:02:20:38:dc:47:ad:f5:1e:5e:e0:af:5b:fc:e3:92:
30:63:11:80:5a:38:f6:5f:1c:44:fc:14:c6:e6:87:f6:10:36:
b3:4f:bd:cf:2d:c3:95:cd:2e:b7:d1:4a:ed:33:fd:84:e2:1a:
72:c2:51:2e:44:72:e0:9a:0e:fe:c2:b7:fa:9e:aa:5e:bd:79:
6c:1d:10:cc:4d:89:af:25:9e:29:a1:d6:a5:c1:4c:4a:ab:4a:
41:74:71:5a:fa:d8:f7:de:04:43:2c:cb:4e:43:68:65:2b:99:
86:b9:41:72:5c:32:ca:22:b6:95:91:d6:ab:65:13:b3:cb:38:
c7:d2:ef:f3:e0:f9:dc:a5:21:89:8b:aa:81:bf:8c:8c:70:58:
79:24:04:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 17:03:40 2025 by rpki-client