Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/26dTchcgf7lDcfY0A6NqhU6l81Q.roa
File: 26dTchcgf7lDcfY0A6NqhU6l81Q.roa (raw, json)
Hash identifier: hckE1woKBHCIF1hsS3kcjqPTCPA2tO8E0GBJh3bly/o=
Subject key identifier: DB:A7:53:72:17:20:7F:B9:43:71:F6:34:03:A3:6A:85:4E:A5:F3:54
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F6274CC086B51646F09F70D342BFEFC
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/26dTchcgf7lDcfY0A6NqhU6l81Q.roa
Signing time: Tue 25 Jun 2024 12:32:50 +0000
ROA not before: Tue 25 Jun 2024 12:32:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397210
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:74:cc:08:6b:51:64:6f:09:f7:0d:34:2b:fe:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dba7537217207fb94371f63403a36a854ea5f354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ac:13:a8:7a:c7:69:c3:eb:a5:d8:f8:34:85:
dd:33:4f:0a:f7:c0:6e:de:3c:7e:82:cc:1f:c9:df:
df:e0:c9:04:3a:c3:8a:26:9f:c3:e2:e7:9a:61:f0:
88:1a:1c:74:77:c1:9b:7e:90:08:99:1a:30:01:c8:
ed:33:27:05:f7:de:bf:0a:a9:7c:77:bf:5c:7e:a1:
19:d9:b7:76:63:27:b2:14:b1:2c:7a:c6:c0:af:b2:
5b:7d:85:0f:65:00:f5:95:91:e5:35:e3:6c:2f:ce:
8d:2f:1b:4d:06:8f:f7:7b:72:bf:20:52:58:a8:c2:
01:2e:65:6a:fb:86:c9:8f:e9:fd:5e:fb:b5:d5:b6:
e8:f0:39:33:ef:62:9b:0a:fb:4e:bd:50:ae:c4:5f:
80:c0:b0:ad:6d:aa:a5:88:3f:8d:85:25:a0:2b:18:
3d:9e:89:cd:81:25:0c:73:95:64:aa:29:ba:d9:28:
45:1d:99:f0:74:5d:5f:69:5b:09:84:5b:c7:af:0f:
eb:30:50:16:08:f7:ba:4a:b0:c2:2d:6c:6f:4c:1e:
8f:a3:26:44:fe:01:7f:fe:70:0b:12:1d:0e:a0:26:
67:35:05:78:0f:10:53:e8:82:a5:72:74:85:91:9f:
29:97:42:0f:4d:f1:c2:6b:ad:5e:8b:8e:59:78:53:
29:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A7:53:72:17:20:7F:B9:43:71:F6:34:03:A3:6A:85:4E:A5:F3:54
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/26dTchcgf7lDcfY0A6NqhU6l81Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
99:f5:de:b6:23:fc:b9:2a:6f:24:49:44:28:f3:fd:be:fd:bf:
6a:b4:3c:ec:df:1e:ab:c3:34:85:b0:25:0e:fb:af:08:df:6b:
c5:3e:b4:da:23:2c:20:74:ea:1d:40:70:f7:05:20:e6:94:ad:
e0:24:6d:07:c5:d9:98:a1:29:6e:e5:35:23:c8:b8:73:5b:78:
07:9a:05:94:71:ce:f3:c0:99:05:1e:83:ca:38:e4:98:c8:4c:
69:c9:8b:85:3b:96:48:82:62:72:c5:e8:21:4a:52:28:58:ab:
49:02:4d:d3:c1:6f:9e:d0:cc:5b:a8:44:60:ca:99:69:4d:4b:
03:bb:10:8d:c8:a8:4b:90:3c:91:4b:26:97:2a:38:f1:a7:cd:
54:9f:4c:a6:65:c8:ad:ab:32:ec:2a:cc:54:fb:57:77:9f:c5:
aa:ff:f9:e0:d4:ce:46:63:5b:62:d3:fa:27:98:79:b6:75:b6:
56:09:cf:07:15:42:d5:20:c9:17:6e:9d:e8:c7:71:b3:4c:b8:
b5:42:c4:d4:78:31:0e:56:50:9c:5e:17:f3:89:43:73:8e:f4:
33:12:5f:eb:75:02:25:b0:e5:fe:e8:18:5c:c0:bb:72:bf:42:
d1:43:cc:a0:57:57:b2:77:fa:d7:1e:e4:e3:31:cb:c8:4e:5e:
de:84:f3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:47:18 2024 by rpki-client on console-ams.rpki-client.org