Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/1FkEtmviwaWPMOYPXwrnD0M4dCo.roa
File: 1FkEtmviwaWPMOYPXwrnD0M4dCo.roa (raw, json)
Hash identifier: 87SspIM9ku8cOSYQ1crJ6oZscxgY90bP/zu35tJsNj8=
Subject key identifier: D4:59:04:B6:6B:E2:C1:A5:8F:30:E6:0F:5F:0A:E7:0F:43:38:74:2A
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBBE3CA4CFA0BDCCD86ADB847A38B7
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/1FkEtmviwaWPMOYPXwrnD0M4dCo.roa
Signing time: Wed 01 Jan 2025 17:48:31 +0000
ROA not before: Wed 01 Jan 2025 17:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396557
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:be:3c:a4:cf:a0:bd:cc:d8:6a:db:84:7a:38:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d45904b66be2c1a58f30e60f5f0ae70f4338742a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:23:07:3f:83:5a:a9:a9:47:a0:a0:23:e3:1a:
18:61:99:c4:19:f5:9a:27:8a:65:f3:76:b9:9f:8e:
ee:23:a8:38:33:37:87:d3:42:00:02:3b:cc:b6:6f:
88:9d:5d:d5:dc:8a:50:4d:83:00:c4:1c:f8:a5:df:
b3:40:34:fb:12:e3:b2:fe:e9:5d:3c:3d:a9:d1:2b:
39:b9:cb:8f:2a:e1:74:78:f8:2c:f0:a6:20:53:c0:
40:c5:81:7a:7b:3e:00:2e:a5:70:d6:35:82:f9:1c:
65:9e:d0:a3:84:9d:a9:26:50:bd:21:74:49:e3:37:
7f:84:c3:6a:23:c0:0b:22:ef:e9:11:80:ff:6c:52:
3e:1a:1e:41:11:bc:63:90:73:b7:f5:73:13:20:b6:
57:2b:20:45:aa:d9:01:54:8e:fc:f3:7a:33:34:65:
c0:1d:76:ba:b5:a1:d8:2d:23:ee:c0:10:19:4e:2e:
19:16:77:e1:77:9e:78:0b:ac:2c:92:fb:aa:f1:20:
27:0c:82:05:fe:d5:dc:63:ae:6c:e0:58:1e:92:7e:
78:41:db:69:4b:a3:f1:40:36:84:a0:b2:0c:f7:4c:
c8:fd:ab:d6:23:b7:3b:5d:4a:d1:ec:70:02:96:54:
d9:80:8e:87:eb:af:1d:51:a0:74:a0:08:52:52:f4:
c9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:59:04:B6:6B:E2:C1:A5:8F:30:E6:0F:5F:0A:E7:0F:43:38:74:2A
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/1FkEtmviwaWPMOYPXwrnD0M4dCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
07:8d:7d:0a:c1:01:cd:75:a9:56:c1:1a:e9:60:de:a0:41:00:
d9:19:51:12:42:9e:32:70:35:76:e1:ee:70:6b:a8:99:81:08:
e3:d0:28:7f:68:98:1a:13:ed:cc:d4:22:7a:bb:13:95:3c:de:
09:e3:ca:8b:c4:a8:7d:2d:35:d6:29:ed:f1:c6:0c:4d:5c:59:
44:da:97:69:07:f9:9d:86:57:32:87:7f:9d:01:50:c6:41:ce:
9d:08:91:2b:08:46:ad:bf:33:e5:14:a9:3f:96:30:0d:33:28:
50:c6:6e:6e:f4:97:55:d6:24:56:93:da:f9:97:dd:d7:4d:c5:
6c:d5:15:98:dd:b2:8e:26:f9:b4:66:64:f3:85:8e:aa:63:18:
8d:f5:ed:36:60:97:1f:08:e4:20:60:b8:af:0a:96:40:d1:2b:
e7:9f:5b:3d:cd:f0:ef:33:db:6b:73:65:3a:d7:21:0c:c6:25:
4f:db:60:2d:6e:f6:fb:cb:5a:2a:45:68:73:a9:00:34:e9:ad:
48:ec:c3:ef:98:16:c2:35:3e:b8:e7:69:4a:a8:32:e9:4d:82:
3d:c9:bd:8a:4a:c2:b5:68:16:a0:97:7f:24:66:e3:fc:f8:8a:
84:18:7f:af:5a:c1:7d:36:cd:ad:11:24:0e:8d:08:8f:1a:f9:
0f:78:bd:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:22 2025 by rpki-client