Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/65bcff-ba01-498c-b54d-84026bc852f0/1/1SqAG3Japdqs2uBvGFHguJLvhqE.roa
File: 1SqAG3Japdqs2uBvGFHguJLvhqE.roa (raw, json)
Hash identifier: tRLIPOPh9GLi7wL54w2K0S63l5p5YYde2YPqeJx3wD8=
Subject key identifier: D5:2A:80:1B:72:5A:A5:DA:AC:DA:E0:6F:18:51:E0:B8:92:EF:86:A1
Certificate issuer: /CN=b54ddf6f03331cd773c7e7abb15429ba8d20bd78
Certificate serial: 01941F8C8282D9E1F543AE5999A5AB3C105B
Authority key identifier: B5:4D:DF:6F:03:33:1C:D7:73:C7:E7:AB:B1:54:29:BA:8D:20:BD:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tU3fbwMzHNdzx-ersVQpuo0gvXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/65bcff-ba01-498c-b54d-84026bc852f0/1/1SqAG3Japdqs2uBvGFHguJLvhqE.roa
Signing time: Wed 01 Jan 2025 01:48:09 +0000
ROA not before: Wed 01 Jan 2025 01:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210197
IP address blocks: 81.30.101.0/24 maxlen: 24
85.204.38.0/24 maxlen: 24
2a13:f400::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/65bcff-ba01-498c-b54d-84026bc852f0/1/tU3fbwMzHNdzx-ersVQpuo0gvXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/65bcff-ba01-498c-b54d-84026bc852f0/1/tU3fbwMzHNdzx-ersVQpuo0gvXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tU3fbwMzHNdzx-ersVQpuo0gvXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:82:82:d9:e1:f5:43:ae:59:99:a5:ab:3c:10:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b54ddf6f03331cd773c7e7abb15429ba8d20bd78
Validity
Not Before: Jan 1 01:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d52a801b725aa5daacdae06f1851e0b892ef86a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1b:e0:ca:f3:c9:c7:09:8f:bd:c1:52:6e:5d:
f7:80:b4:69:b6:29:b2:e4:fb:b3:06:4b:14:18:b0:
e3:62:6f:b3:78:4e:63:97:e5:35:d9:78:0c:a1:9e:
3c:5c:3f:af:2c:d6:52:08:ec:31:c2:1e:f4:d9:b5:
34:15:4a:9a:76:5b:91:cf:6f:36:a4:61:6c:f8:d2:
11:1f:7d:16:b8:8b:eb:b1:c5:8e:30:4c:5e:d3:aa:
e3:0b:bc:b9:97:d0:f8:fc:cf:0e:f5:5a:67:84:9c:
26:6e:f6:1c:2b:f0:c9:c1:e8:87:26:8c:e1:5f:96:
99:b9:65:ea:07:7b:21:64:45:9e:3e:5b:c5:db:4a:
f9:c7:db:91:4b:58:f6:ba:1a:f2:ad:16:08:41:1f:
a6:79:8e:7e:a2:a2:80:d0:07:3c:89:a4:87:af:e4:
b8:ff:99:ff:35:89:e0:e8:21:e0:3f:2c:c3:65:fe:
92:51:9e:4e:8f:d5:f9:03:f7:b8:2f:25:9b:7c:b9:
5b:af:d6:1f:79:df:37:70:57:94:7a:17:ea:0d:59:
96:42:f6:98:5c:a9:07:dc:03:65:25:e4:48:24:67:
10:f7:92:7a:5e:c1:6f:74:22:ea:39:14:d2:fb:58:
38:c3:26:ff:78:ce:be:8d:e7:f1:00:69:ac:fd:4e:
5e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2A:80:1B:72:5A:A5:DA:AC:DA:E0:6F:18:51:E0:B8:92:EF:86:A1
X509v3 Authority Key Identifier:
keyid:B5:4D:DF:6F:03:33:1C:D7:73:C7:E7:AB:B1:54:29:BA:8D:20:BD:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tU3fbwMzHNdzx-ersVQpuo0gvXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bcff-ba01-498c-b54d-84026bc852f0/1/1SqAG3Japdqs2uBvGFHguJLvhqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bcff-ba01-498c-b54d-84026bc852f0/1/tU3fbwMzHNdzx-ersVQpuo0gvXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.101.0/24
85.204.38.0/24
IPv6:
2a13:f400::/29
Signature Algorithm: sha256WithRSAEncryption
15:66:92:af:cc:5b:12:d0:a5:06:1e:02:d6:e9:ba:4d:2e:96:
02:d0:fb:30:28:70:fe:62:cf:9c:fb:6b:f4:6a:65:bc:35:5f:
1f:3f:84:b8:99:a1:76:39:fa:1a:4e:48:7b:62:75:99:52:1c:
43:a7:db:41:2f:04:5c:d6:2d:62:1e:12:5b:1c:f5:99:1f:f7:
e0:7f:ba:c6:25:ec:83:d7:37:f0:8e:0b:d3:75:65:8b:5e:c4:
ff:da:e9:c6:f0:e7:cb:d4:35:74:fc:ef:82:4a:44:3d:e5:78:
08:e6:09:9c:78:cd:c2:77:04:eb:36:4b:97:3d:89:b7:4f:83:
f5:4c:2a:1c:2e:b7:5e:ef:60:b3:eb:64:4f:c9:fb:a4:12:46:
0c:79:70:4f:3e:7a:42:d5:d7:0e:e1:0d:e9:34:74:d1:40:90:
b1:1c:35:98:98:1d:77:4c:e4:13:d8:3a:18:e9:74:36:62:58:
a1:48:05:db:2e:dd:37:ff:99:37:05:bc:b9:2c:43:1f:b1:78:
80:c0:3d:80:36:d4:7c:55:45:38:52:7c:2a:f0:c6:5f:dc:1e:
ee:d0:a3:13:d6:dc:9c:3d:51:ae:88:d4:4c:45:89:28:2f:e3:
c2:7e:ab:1e:45:99:9b:ae:69:e7:73:13:fc:24:2e:a9:8a:e1:
ae:01:c3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:47:43 2025 by rpki-client