Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/4AO3SpndUwyszRfBO_v4FV8BjOo.roa
File: 4AO3SpndUwyszRfBO_v4FV8BjOo.roa (raw, json)
Hash identifier: HXTneJlJshTw/KbaroRvwI9TETLJ4nz499TYFXNxBzk=
Subject key identifier: E0:03:B7:4A:99:DD:53:0C:AC:CD:17:C1:3B:FB:F8:15:5F:01:8C:EA
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F62643A5AC745E8285839D125A2473B
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/4AO3SpndUwyszRfBO_v4FV8BjOo.roa
Signing time: Tue 25 Jun 2024 12:32:46 +0000
ROA not before: Tue 25 Jun 2024 12:32:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396609
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:64:3a:5a:c7:45:e8:28:58:39:d1:25:a2:47:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e003b74a99dd530caccd17c13bfbf8155f018cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:14:ba:f5:c0:54:c8:70:96:4b:99:c3:97:a6:
99:ae:f4:fb:c4:dc:4c:dd:2a:11:2e:af:9f:32:35:
e4:e5:46:b3:9b:0e:d5:55:a6:43:ca:ea:13:1e:63:
0f:42:e6:85:a1:bf:38:10:98:b0:1a:92:39:3a:53:
8b:30:a5:c0:6b:97:3d:09:c1:46:84:71:aa:8e:8f:
aa:9e:b0:3d:ad:f3:7b:8f:af:7f:3c:51:11:e2:81:
2f:98:76:ac:ce:92:20:63:8e:5c:e5:bb:49:40:fd:
7a:ff:48:2f:c2:92:8e:72:26:e4:14:fb:11:99:48:
11:0b:2e:e8:df:eb:cc:ff:06:45:3c:5b:80:a1:7b:
f7:a3:31:0a:b0:e8:6c:d8:55:95:21:ec:e5:e2:dc:
e9:ff:22:ff:5a:02:13:e1:d8:06:21:a6:6f:f9:b1:
ff:87:83:5a:9a:d1:44:f0:a3:eb:b8:c1:c1:5f:09:
6d:a1:41:d9:ba:97:45:0b:0a:44:46:07:e7:9a:16:
c5:c0:68:24:7d:df:d8:22:57:2d:5f:0b:fb:2f:6a:
75:3c:95:0b:00:5c:11:61:09:68:75:4f:d4:a4:50:
0b:9a:70:06:14:8f:21:5b:c1:35:ba:4e:3c:88:94:
a1:17:75:6e:37:f3:04:d8:4c:45:ac:b7:97:ea:3a:
4a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:03:B7:4A:99:DD:53:0C:AC:CD:17:C1:3B:FB:F8:15:5F:01:8C:EA
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/4AO3SpndUwyszRfBO_v4FV8BjOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
2f:98:fa:4c:35:a5:c9:23:39:97:55:09:03:9b:b6:82:b0:6d:
b0:70:da:be:43:20:48:89:39:4d:b2:78:5e:74:8a:2c:71:ba:
c9:d9:33:7c:88:3e:be:da:0c:91:1d:1b:25:7c:7a:55:a3:01:
ac:0a:70:6c:8b:81:68:5f:5f:27:a5:61:1f:73:74:ed:87:7e:
37:68:32:0f:2b:e7:bc:cf:ee:25:e7:50:a3:0c:e9:98:18:fd:
57:35:7e:4d:8d:74:65:25:e5:45:c9:94:aa:3c:19:db:c9:5e:
91:6f:08:7d:cf:18:90:2f:38:be:0c:6f:82:4d:d9:b9:36:63:
7f:b1:f5:c7:53:9f:16:22:a9:99:03:03:7d:a6:83:80:60:72:
7a:e0:0a:6b:95:e8:a7:f4:29:f7:bd:36:50:3b:e8:17:77:3e:
24:47:eb:e9:a9:04:3d:e1:87:c1:ce:26:45:ab:3e:6d:f7:81:
aa:4e:40:c8:6b:af:e7:d9:bc:c3:40:c5:e4:49:9c:58:01:5d:
bf:c5:f3:8e:7a:43:db:59:58:08:81:80:87:7a:71:72:1d:8e:
c7:c7:a9:d3:45:6d:a0:2b:fd:84:29:7b:d0:a2:be:ed:92:98:
c7:99:35:4d:28:af:30:b2:d2:be:73:b7:b8:bc:b7:3f:b9:6b:
c2:42:cb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:13:23 2024 by rpki-client on console-fra.rpki-client.org