Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/1-vKtXVoqsV84E-y9uQ2Lg20LSVs.roa
File: 1-vKtXVoqsV84E-y9uQ2Lg20LSVs.roa (raw, json)
Hash identifier: uRMm7pr7bxFlnROfRbCeL1nzRNqJYbyUgDJ9KLLNjeg=
Subject key identifier: FA:F2:AD:5D:5A:2A:B1:5F:38:13:EC:BD:B9:0D:8B:83:6D:0B:49:5B
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBBBFF573C527AF743E1B759984E4B
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/1-vKtXVoqsV84E-y9uQ2Lg20LSVs.roa
Signing time: Wed 01 Jan 2025 17:48:30 +0000
ROA not before: Wed 01 Jan 2025 17:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396551
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:bb:ff:57:3c:52:7a:f7:43:e1:b7:59:98:4e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=faf2ad5d5a2ab15f3813ecbdb90d8b836d0b495b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cc:77:9e:56:4d:e4:c6:20:27:44:0d:18:69:
53:7d:14:73:cd:d1:7d:9d:d4:ae:2d:ca:17:2b:2f:
ed:ce:3d:60:8b:80:ae:7f:b7:93:bc:49:ac:82:db:
49:15:d7:a7:67:32:62:5a:88:f4:ed:76:75:ba:2d:
4a:ea:2f:05:b0:b4:a0:8c:26:38:6d:0e:c8:ca:44:
06:37:a3:f6:64:f4:53:84:9e:f4:98:d5:bc:1c:9d:
e4:78:8f:1c:30:cd:b4:fb:16:58:65:47:ea:23:35:
dc:95:78:5b:f7:20:9d:70:a2:43:29:1f:83:83:54:
70:c6:f2:f7:37:e4:49:79:3b:33:bc:02:f1:14:2e:
4d:74:10:fc:5e:a9:0e:d5:0e:5f:8e:f8:a1:b1:40:
24:09:e9:38:66:65:0a:37:fa:4e:2b:ca:d3:c1:ca:
00:c0:d2:9c:1e:72:6c:a6:b6:0c:df:dc:55:04:8f:
ef:ec:ed:51:62:db:68:d3:39:8d:7f:9d:1c:d0:9e:
0f:a1:dc:e3:25:29:6d:ed:a4:e8:e8:11:20:4a:6c:
c9:12:77:a6:5c:8c:a2:a0:73:4f:e7:49:98:34:11:
c2:e2:15:eb:81:45:84:0d:3a:8f:5c:46:e2:b7:c3:
1d:d4:48:bf:ff:7e:03:eb:56:bf:44:38:12:9f:3e:
4f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F2:AD:5D:5A:2A:B1:5F:38:13:EC:BD:B9:0D:8B:83:6D:0B:49:5B
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/1-vKtXVoqsV84E-y9uQ2Lg20LSVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
8d:51:77:c2:93:f6:2d:46:97:7f:0c:e2:90:2d:e1:37:a5:f8:
1b:cf:51:d1:aa:3a:3d:4e:4f:b2:1c:37:86:e3:cd:28:f1:df:
09:47:07:2d:dd:70:87:6e:b9:ea:f9:04:81:2b:41:03:e2:a0:
ef:37:03:93:0b:c0:bb:ad:82:74:1d:78:8c:4f:83:6c:c6:58:
c6:47:85:76:87:9a:21:76:b0:a9:78:37:d5:d7:be:c5:be:fe:
0e:ed:4c:3a:05:09:cf:41:cb:40:ac:39:78:09:a2:b8:86:7b:
e4:c6:74:71:57:34:f8:22:f1:07:00:5c:d4:fb:fe:49:75:46:
d4:3f:cb:ae:50:58:54:ed:da:e2:69:a0:86:4f:1a:d9:b8:33:
96:5b:4e:63:07:e9:75:a0:a6:82:5c:10:c3:2c:59:f2:a7:bc:
1b:9f:de:77:59:81:bb:e5:01:c8:91:d0:dd:19:14:e6:71:a5:
1a:cb:50:4b:6b:2c:d2:9c:d8:a0:81:83:e2:46:50:f9:bd:91:
fb:61:a1:57:ed:f4:b0:17:eb:c1:05:a3:43:f2:98:5d:c5:3e:
d1:b0:cc:54:dc:c7:57:67:49:79:52:6b:c6:12:26:b1:ff:47:
04:68:20:e7:9c:f1:70:51:d2:0e:e2:e7:a8:77:78:90:7f:8c:
42:7c:33:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:08 2025 by rpki-client