Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/cV9Aw8by33MUy3Ti93WiYGc8GPI.roa
File: cV9Aw8by33MUy3Ti93WiYGc8GPI.roa (raw, json)
Hash identifier: KM/7AbIZi0XIqpXF4lg7Ig7+LUD7UneGG7mrfQyaIhU=
Subject key identifier: 71:5F:40:C3:C6:F2:DF:73:14:CB:74:E2:F7:75:A2:60:67:3C:18:F2
Certificate issuer: /CN=d11f6d924d6f6cc0e940837d9301fce732065771
Certificate serial: 018FE797AB2FB5ADB44CE9CC2DF5B73C4C15
Authority key identifier: D1:1F:6D:92:4D:6F:6C:C0:E9:40:83:7D:93:01:FC:E7:32:06:57:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/cV9Aw8by33MUy3Ti93WiYGc8GPI.roa
Signing time: Wed 05 Jun 2024 08:50:27 +0000
ROA not before: Wed 05 Jun 2024 08:50:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209881
IP address blocks: 83.171.192.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 17:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e7:97:ab:2f:b5:ad:b4:4c:e9:cc:2d:f5:b7:3c:4c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d11f6d924d6f6cc0e940837d9301fce732065771
Validity
Not Before: Jun 5 08:50:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=715f40c3c6f2df7314cb74e2f775a260673c18f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:44:63:ab:88:af:29:a0:c9:b1:f1:36:40:33:
c8:cf:ad:07:ac:d9:36:b4:5d:48:f0:4f:d0:f9:eb:
6a:49:a2:fa:46:eb:fe:bb:2b:9e:af:cc:76:8e:fd:
e2:9e:d8:7b:6b:dd:19:5c:5d:3d:80:68:9b:53:97:
ad:9d:d1:bb:6f:66:bf:7a:03:37:29:64:f2:13:f9:
94:9a:ad:46:4e:54:c3:0e:b3:c2:db:46:38:01:8a:
4f:23:be:75:fb:99:04:8d:38:2e:b5:04:a9:2f:24:
66:72:3c:5c:fc:e2:91:a8:3e:0b:33:a7:28:12:9d:
66:25:9c:84:c3:6e:64:be:ee:14:da:78:51:01:50:
3c:87:9b:a8:b6:44:b2:28:00:08:cf:2e:b8:99:f9:
fa:b4:f5:04:7d:01:df:b0:46:12:6f:44:85:39:a5:
20:cd:43:e9:ab:83:31:8a:ab:53:69:da:ec:6b:2c:
64:41:6e:83:f6:7d:0a:9f:1b:0c:bb:f0:e6:e2:52:
d8:b9:2b:5f:eb:20:b2:bf:5a:4b:84:4d:6d:4b:d3:
82:d8:e1:bf:bd:af:0d:d7:d3:12:7d:b3:24:ac:c8:
3c:da:12:98:bf:c9:38:b2:21:d7:8a:94:50:f3:a7:
3e:11:65:05:84:d1:3a:46:a7:e4:ff:82:b3:29:1e:
0b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5F:40:C3:C6:F2:DF:73:14:CB:74:E2:F7:75:A2:60:67:3C:18:F2
X509v3 Authority Key Identifier:
keyid:D1:1F:6D:92:4D:6F:6C:C0:E9:40:83:7D:93:01:FC:E7:32:06:57:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/cV9Aw8by33MUy3Ti93WiYGc8GPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.192.0/22
Signature Algorithm: sha256WithRSAEncryption
33:30:16:5c:ee:39:82:58:57:20:67:d0:10:9a:d9:84:0e:02:
45:02:51:22:d7:6b:bf:d1:e2:da:cc:cb:15:38:f1:f6:8e:3f:
40:f1:22:63:c9:64:b6:e7:76:8a:06:42:c0:2b:8b:be:79:a5:
cf:5c:2d:e5:99:a9:b3:18:10:5e:d8:6b:a0:f3:0d:02:57:82:
e5:93:5e:20:63:fc:c6:3b:85:db:89:77:e0:c5:5d:5c:8e:91:
a8:bb:fb:b8:b7:82:5f:97:a7:be:d7:22:c3:25:42:22:78:3a:
87:df:26:e3:db:53:27:7c:c7:55:5e:78:e2:22:89:a2:fc:87:
0c:a2:2f:8f:63:7a:43:ef:c2:2e:cb:a9:44:43:6f:26:49:b3:
25:14:f8:35:27:a9:3e:47:0e:ee:ef:75:66:7f:77:5e:e5:33:
fc:fb:e6:c5:c3:d1:37:80:e0:d8:11:46:9a:57:56:a4:d3:c5:
98:92:e6:82:7c:d5:dd:da:24:5b:a2:11:f1:22:82:15:55:01:
42:fd:76:e9:89:c5:95:1e:ca:ee:30:42:71:6f:f5:23:a7:dd:
55:02:ba:92:a0:5e:9f:47:04:a7:a8:90:7e:6d:70:da:d2:94:
7a:ae:2b:37:65:81:6b:88:b4:c6:8c:9b:79:8e:6e:a1:d1:d3:
ab:57:5c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:59:09 2024 by rpki-client on console-fra.rpki-client.org