Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/074Jvd5JWgf9YCck4gVxEiKzVQk.roa
File: 074Jvd5JWgf9YCck4gVxEiKzVQk.roa (raw, json)
Hash identifier: yTk7Jf4qpCphSl3Dos4RYHM7WZKFizLPRknP6G0QDnQ=
Subject key identifier: D3:BE:09:BD:DE:49:5A:07:FD:60:27:24:E2:05:71:12:22:B3:55:09
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBBC31F93633EB865EB52F322F56FE
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/074Jvd5JWgf9YCck4gVxEiKzVQk.roa
Signing time: Wed 01 Jan 2025 17:48:30 +0000
ROA not before: Wed 01 Jan 2025 17:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396552
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:bc:31:f9:36:33:eb:86:5e:b5:2f:32:2f:56:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3be09bdde495a07fd602724e205711222b35509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cf:25:90:f8:ec:c2:28:bd:e3:82:b7:9d:5f:
c9:a2:ff:f0:47:92:01:1d:21:d2:0c:b6:ec:e0:65:
22:7f:5d:3c:7c:b1:c6:e1:8c:7a:36:e8:ea:f2:89:
7c:cb:00:d0:3e:3b:4d:30:b8:67:ee:79:fd:a9:5f:
b8:1e:bd:5d:d6:87:07:41:6c:7a:24:00:7e:15:2d:
9d:c0:58:51:7f:da:8d:1e:70:ff:0f:81:0b:58:10:
58:65:9a:23:7f:7a:99:e2:f8:d5:96:cf:15:b5:fc:
86:4f:d3:77:69:8f:f0:42:8b:3c:04:19:f5:46:c3:
fb:af:a6:52:f6:e0:ad:0e:1f:50:9b:f6:50:32:95:
34:24:2f:d9:89:0e:70:70:81:1b:12:03:7a:49:9d:
f1:8d:ec:cc:3d:ff:8f:cc:59:fb:e9:de:9d:ea:7b:
64:e5:c5:ff:a8:fa:eb:48:20:de:7b:1b:c1:03:a7:
93:7c:e9:8f:13:16:16:e7:0e:d2:b0:21:1e:31:71:
eb:97:f6:81:4f:8f:e9:6f:68:e7:28:74:03:c7:2a:
fc:11:24:38:0e:25:47:79:68:5c:fe:c0:d5:06:83:
05:88:7f:93:de:be:57:20:04:18:34:f2:b8:14:d4:
45:b0:85:fa:64:6c:d0:5d:59:30:56:a0:90:7e:77:
2c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BE:09:BD:DE:49:5A:07:FD:60:27:24:E2:05:71:12:22:B3:55:09
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/074Jvd5JWgf9YCck4gVxEiKzVQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
9a:d4:d0:71:0c:6f:10:4a:35:55:cf:1b:e3:48:70:a0:c2:5b:
f6:66:55:64:6e:89:0e:f0:8f:6b:ae:94:c4:55:8e:2f:45:c3:
f3:4d:b3:8b:86:83:f3:4a:f0:85:f5:53:2f:ae:e7:ea:56:fe:
bb:b1:10:b1:c3:7a:f9:03:2b:97:25:5f:54:bf:6e:f9:fd:fe:
15:73:17:67:b3:5b:9d:4c:2c:01:a1:db:6f:5b:5e:58:a2:eb:
34:8a:a7:a9:c5:1b:83:53:6a:6d:98:77:7f:9a:da:d1:08:5c:
2f:7a:e3:f3:18:4c:55:ca:00:03:11:49:65:35:dd:f1:78:c4:
08:8f:11:57:70:57:bf:70:47:51:0a:c4:8f:20:ec:df:0c:47:
ba:b6:d3:c4:4e:44:ce:36:88:ff:08:eb:fb:18:73:7b:b4:fd:
20:a3:7c:f5:dc:35:58:4d:02:80:4e:df:e4:a6:62:c1:77:33:
be:c6:3d:0b:ec:ca:3d:d7:97:24:0c:2e:a2:cd:e3:26:c8:5a:
8a:87:2f:ae:89:13:a3:a0:24:99:96:09:5e:9d:b7:de:ff:c9:
44:c7:36:06:12:42:a2:63:bb:75:c3:b4:61:94:2f:e2:6e:a0:
44:18:3b:c8:f0:74:b5:84:ee:71:84:29:e2:12:d7:1d:9e:ce:
5e:53:45:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:46 2025 by rpki-client