Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/0B6u3gj7WvQIxGAilv32uCgqnUs.roa
File: 0B6u3gj7WvQIxGAilv32uCgqnUs.roa (raw, json)
Hash identifier: 8PJs4yQI9eYvA/6v2YFpPFNLnpZiJIUu2LgAw//gyDg=
Subject key identifier: D0:1E:AE:DE:08:FB:5A:F4:08:C4:60:22:96:FD:F6:B8:28:2A:9D:4B
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F62575CC4E53E0CBF962206805707FB
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/0B6u3gj7WvQIxGAilv32uCgqnUs.roa
Signing time: Tue 25 Jun 2024 12:32:43 +0000
ROA not before: Tue 25 Jun 2024 12:32:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396580
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:57:5c:c4:e5:3e:0c:bf:96:22:06:80:57:07:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d01eaede08fb5af408c4602296fdf6b8282a9d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:25:bf:cb:4f:55:9c:75:df:20:50:1d:96:d6:
0c:ad:29:c6:e2:72:01:5d:08:26:8f:a7:f1:1a:c9:
97:78:31:42:90:62:aa:95:f3:ad:35:7d:be:d7:1d:
61:8f:89:15:f0:ca:e6:e5:37:73:a5:4e:5b:46:6a:
74:dc:13:69:8d:e9:1c:69:0a:f6:32:89:57:02:d0:
fa:e7:27:df:ff:14:a9:dc:66:8f:8c:80:2b:03:e8:
05:a0:2c:9c:d1:eb:79:a2:fe:94:37:a2:bd:67:54:
f1:40:e9:76:60:a6:6d:a9:22:77:ce:eb:77:d8:a4:
9c:38:94:7d:2e:1f:e6:27:95:e2:5e:c0:e8:65:93:
f5:8d:a9:84:56:a3:37:66:3d:e0:9e:c9:f3:14:6a:
38:de:7c:67:a1:28:34:56:8b:57:b6:ac:7a:c2:ad:
04:26:f8:cb:85:9a:49:40:c6:3e:6f:69:d6:35:6f:
fc:09:ce:8d:4e:5a:63:75:db:71:09:b0:bc:b0:f1:
7e:d9:96:15:e8:9a:8b:af:37:08:62:7e:9e:94:ab:
57:76:76:d5:f3:f9:9c:4a:a7:57:ed:9d:5f:3a:19:
16:95:bf:c0:10:d7:07:92:6d:50:59:2d:8f:f4:2e:
7b:33:7f:25:22:d3:15:31:a3:3a:2d:76:60:0d:06:
51:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1E:AE:DE:08:FB:5A:F4:08:C4:60:22:96:FD:F6:B8:28:2A:9D:4B
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/0B6u3gj7WvQIxGAilv32uCgqnUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
2c:18:35:62:8c:7e:15:37:cc:e4:ce:3a:9f:26:65:8b:b5:9b:
a7:d7:f1:b6:cd:7e:f9:98:d9:91:4c:ad:27:b3:4f:9e:d2:8c:
c1:5a:76:52:0b:23:56:ed:da:80:1b:42:41:bb:34:a1:26:af:
b6:49:dd:99:bb:ba:d0:48:ff:21:c6:29:e0:5b:0c:2d:46:27:
83:8d:e6:a9:5a:76:b8:36:dd:c3:db:2b:0f:a2:64:b9:4d:99:
0e:b3:c7:0d:60:72:e6:7e:c2:05:4e:c5:1a:35:80:20:f2:f6:
fc:cd:a8:a1:ef:99:17:35:71:e9:24:0c:65:55:64:f8:61:d8:
09:a3:36:c1:3c:8f:37:b2:35:6f:35:3e:32:fd:45:c8:40:37:
d9:41:3f:eb:30:c1:ec:9d:46:60:55:d5:26:8d:90:14:30:ae:
97:97:c9:f8:40:fb:76:4b:85:35:9c:28:41:3b:eb:6b:c3:b4:
80:3f:18:69:8d:91:98:d3:7b:9f:f5:a6:2c:b4:a8:0c:34:50:
8f:5b:4c:df:3c:d6:b5:67:52:29:ab:78:a2:31:ea:d7:11:a3:
fb:aa:52:be:3f:9f:73:71:b6:38:f8:f2:82:08:ca:ed:cb:ef:
2d:b5:9e:a5:27:ca:69:60:cb:9d:5d:f6:1f:7f:e0:e2:45:7f:
49:77:51:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:13:23 2024 by rpki-client on console-fra.rpki-client.org