Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/2LB6tbHxWLU_Zikx-tbfDLTZfuI.roa
File: 2LB6tbHxWLU_Zikx-tbfDLTZfuI.roa (raw, json)
Hash identifier: qU/Yo/A0DlBRbiE1575HxG29V06upSxFqscOwwgjufg=
Subject key identifier: D8:B0:7A:B5:B1:F1:58:B5:3F:66:29:31:FA:D6:DF:0C:B4:D9:7E:E2
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBC89E4FEAF645CA606C6CDE94A4D4
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/2LB6tbHxWLU_Zikx-tbfDLTZfuI.roa
Signing time: Wed 01 Jan 2025 17:48:33 +0000
ROA not before: Wed 01 Jan 2025 17:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396577
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:c8:9e:4f:ea:f6:45:ca:60:6c:6c:de:94:a4:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8b07ab5b1f158b53f662931fad6df0cb4d97ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:df:41:57:8c:50:c7:b2:6a:31:e1:f5:19:3d:
22:32:e8:6f:38:29:7c:5c:f7:aa:20:49:ad:67:77:
89:64:22:d6:aa:b7:4d:fa:58:13:a1:35:68:cf:cf:
a2:59:6e:e3:9e:4c:29:d2:7f:5b:01:d2:d9:e3:72:
62:34:28:c4:c7:e0:5b:ac:ee:d0:b1:e8:4f:24:88:
3a:89:0a:aa:5a:7d:c2:10:fb:af:cc:de:3c:2a:3f:
e0:7f:f5:5d:5f:24:62:20:ba:5b:fd:1a:5e:ea:a7:
de:a7:94:41:2a:53:92:0e:3f:ce:79:a6:4a:90:5a:
51:c7:b6:a3:97:65:96:df:72:67:f1:8a:f0:b8:56:
e9:fe:70:54:7c:01:bf:07:1c:e4:8b:b5:6e:07:a6:
9e:58:57:30:96:d0:82:79:c0:7c:59:52:75:6e:c3:
fe:51:39:9d:62:a0:8a:dd:05:a4:f5:86:be:63:a8:
db:8a:9b:92:07:be:d7:a6:31:15:fa:7e:87:06:3f:
18:26:cb:42:cc:2e:bd:2d:9f:2f:ca:da:74:13:d0:
a4:51:56:f6:70:10:20:98:4d:df:94:fe:63:cf:36:
34:6f:1f:30:70:f2:be:37:91:b3:34:b4:2c:a7:f3:
4b:5c:bd:66:78:9d:ae:04:ec:82:a0:4f:22:d4:32:
a5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B0:7A:B5:B1:F1:58:B5:3F:66:29:31:FA:D6:DF:0C:B4:D9:7E:E2
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/2LB6tbHxWLU_Zikx-tbfDLTZfuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
c4:3b:09:41:1a:32:b2:2a:6b:0b:4b:3b:a9:5d:0d:69:3b:8f:
31:f7:87:19:35:2f:ac:72:33:15:af:23:a6:24:81:64:97:b7:
a2:eb:3d:d8:18:ff:e8:6c:72:27:03:b8:6e:61:7e:34:17:f3:
2a:94:ea:5b:44:a5:01:85:5f:27:9d:21:17:23:cb:d7:c2:18:
d9:19:0c:26:b2:e4:b8:88:af:7e:df:9f:a9:92:59:b6:c9:43:
68:44:78:ca:b2:f5:e5:4a:28:39:5b:91:75:52:ca:f9:f1:6f:
7d:d2:71:e8:ae:a8:ed:f8:11:6e:15:35:f6:f2:34:3d:fb:ed:
54:a2:6d:1c:4d:f5:0b:65:25:8b:df:5c:95:bb:e9:a0:8a:97:
d5:0b:85:07:2b:89:ce:fe:43:c3:27:53:c5:4c:c8:36:6a:49:
2a:55:e3:5a:e8:2b:c2:86:aa:9c:cc:d4:25:fc:3e:39:31:fb:
4c:fe:b2:85:6f:c7:07:e6:b1:65:3d:bc:cb:33:e8:08:27:5b:
ea:3b:f1:af:ab:67:6b:7a:4d:0f:27:9f:cd:eb:70:3a:4f:1c:
45:9d:75:01:eb:39:fc:96:02:4f:a9:9c:16:0f:17:96:22:63:
e7:d3:7d:36:8d:21:82:96:ba:21:bb:cd:15:43:d8:a7:5b:87:
37:4f:da:8c
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQi+8ieT+r2RcpgbGzelKTUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjUwMTAxMTc0ODMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOGIwN2FiNWIxZjE1OGI1M2Y2NjI5MzFmYWQ2ZGYwY2I0ZDk3ZWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN9BV4xQx7JqMeH1GT0iMuhvOCl8
XPeqIEmtZ3eJZCLWqrdN+lgToTVoz8+iWW7jnkwp0n9bAdLZ43JiNCjEx+BbrO7Q
sehPJIg6iQqqWn3CEPuvzN48Kj/gf/VdXyRiILpb/Rpe6qfep5RBKlOSDj/OeaZK
kFpRx7ajl2WW33Jn8YrwuFbp/nBUfAG/Bxzki7VuB6aeWFcwltCCecB8WVJ1bsP+
UTmdYqCK3QWk9Ya+Y6jbipuSB77XpjEV+n6HBj8YJstCzC69LZ8vytp0E9CkUVb2
cBAgmE3flP5jzzY0bx8wcPK+N5GzNLQsp/NLXL1meJ2uBOyCoE8i1DKloQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFNiwerWx8Vi1P2YpMfrW3wy02X7iMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvMkxCNnRiSHhXTFVfWmlreC10YmZETFRaZnVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF
ALlkADUwDQYJKoZIhvcNAQELBQADggEBAMQ7CUEaMrIqawtLO6ldDWk7jzH3hxk1
L6xyMxWvI6YkgWSXt6LrPdgY/+hscicDuG5hfjQX8yqU6ltEpQGFXyedIRcjy9fC
GNkZDCay5LiIr37fn6mSWbbJQ2hEeMqy9eVKKDlbkXVSyvnxb33SceiuqO34EW4V
NfbyND377VSibRxN9QtlJYvfXJW76aCKl9ULhQcric7+Q8MnU8VMyDZqSSpV41ro
K8KGqpzM1CX8Pjkx+0z+soVvxwfmsWU9vMsz6AgnW+o78a+rZ2t6TQ8nn83rcDpP
HEWddQHrOfyWAk+pnBYPF5YiY+fTfTaNIYKWuiG7zRVD2KdbhzdP2ow=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:34 2025 by rpki-client