Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/0eeKWorNsdp9msu0O9mQvrL4elI.roa
File: 0eeKWorNsdp9msu0O9mQvrL4elI.roa (raw, json)
Hash identifier: nu1L+6rVNZgDkEaK2nI/C7bFUKSbAyzTLTp0lFlIn5o=
Subject key identifier: D1:E7:8A:5A:8A:CD:B1:DA:7D:9A:CB:B4:3B:D9:90:BE:B2:F8:7A:52
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F627092B2D16CD346DA9591F817B118
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/0eeKWorNsdp9msu0O9mQvrL4elI.roa
Signing time: Tue 25 Jun 2024 12:32:49 +0000
ROA not before: Tue 25 Jun 2024 12:32:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397201
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:70:92:b2:d1:6c:d3:46:da:95:91:f8:17:b1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1e78a5a8acdb1da7d9acbb43bd990beb2f87a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:22:f2:b3:76:bc:64:e5:35:67:22:03:f1:6e:
6b:0e:81:e3:34:d1:4b:fa:23:90:f8:19:d0:1a:84:
57:94:43:41:c7:b9:9c:8f:64:69:69:02:33:02:18:
3f:94:06:7f:92:05:ce:6e:14:35:41:ab:9a:f7:0c:
cd:94:b1:6d:97:ed:1d:3c:b3:30:41:46:c3:f4:8a:
ab:04:a8:c1:c1:46:56:83:47:96:81:bb:8b:9e:6a:
95:0d:79:ce:e9:a7:67:c7:32:7d:3b:d6:3d:ff:f2:
18:0a:08:df:a6:a0:25:8b:3d:d0:7d:c1:68:dc:47:
f6:6e:6f:7a:bd:49:ec:5d:c8:c4:01:e1:a3:b3:09:
db:b7:7f:6a:3a:00:83:8d:a5:39:de:db:1e:f3:39:
ea:fa:6f:1a:1e:41:ff:99:66:1d:1e:30:2e:64:c7:
b1:ed:f8:6b:81:65:d1:4f:a7:6b:87:b4:31:69:99:
31:3d:b0:f6:40:28:95:b4:e2:de:5e:82:43:49:63:
63:8d:24:b0:44:a0:f2:9e:5c:0a:a0:d1:25:ef:b5:
27:bd:7b:e3:b0:db:97:b2:58:04:ea:f7:2d:0c:e0:
b0:c6:08:ea:4c:8b:11:8c:3d:a4:93:5a:ab:84:89:
b2:ce:df:b9:b3:79:3a:8d:1c:f8:0b:9c:63:bb:35:
27:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E7:8A:5A:8A:CD:B1:DA:7D:9A:CB:B4:3B:D9:90:BE:B2:F8:7A:52
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/0eeKWorNsdp9msu0O9mQvrL4elI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
95:9d:16:49:d1:7b:0d:fd:46:39:80:60:c3:fe:65:a4:b0:a8:
6e:95:0f:27:f5:3b:a1:f0:f4:43:0f:a1:d8:64:dd:88:f7:1d:
7e:87:80:cf:22:1a:58:bf:04:2c:82:0f:35:48:c7:38:c0:4e:
43:4e:f6:a9:16:4a:84:57:42:a2:bd:1a:fc:a4:23:24:95:93:
37:df:7c:08:f2:6c:8a:33:a9:90:a4:34:d1:61:c5:67:d2:a2:
24:54:aa:b3:1a:f8:79:66:38:53:59:be:4c:a8:46:f1:92:8b:
3d:99:f2:9e:ac:16:ab:22:7d:fc:8e:39:93:cf:b9:48:e2:88:
8d:0c:c2:50:2d:1c:94:3d:ca:6c:38:0d:49:f4:2f:fb:79:4b:
ff:90:f6:df:2e:f5:d7:6d:f8:7d:19:7a:0a:15:b5:2b:38:38:
51:c5:74:52:32:ec:0d:2e:88:fa:81:29:8c:e0:cb:b2:86:0f:
3e:54:66:00:36:7a:0b:04:49:d1:ad:d2:d1:2c:34:65:53:ab:
1b:5d:4c:2e:b8:1f:a4:f7:db:ba:65:fa:55:52:11:9d:10:5a:
cf:bd:89:dd:c0:a0:2f:c4:a2:9e:59:e4:e3:de:3e:07:7f:71:
82:8b:b7:67:27:99:37:94:52:97:c2:7d:8f:9f:df:0c:a4:43:
ef:2f:df:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:13:23 2024 by rpki-client on console-fra.rpki-client.org