Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/4iXLvPEQQhNG7Zjva52m22CbQVA.roa
File: 4iXLvPEQQhNG7Zjva52m22CbQVA.roa (raw, json)
Hash identifier: Wry+aODUP1lTSYACTjyKSouoX1yZVhBWkTzGh2JgNHg=
Subject key identifier: E2:25:CB:BC:F1:10:42:13:46:ED:98:EF:6B:9D:A6:DB:60:9B:41:50
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBBEC5BDD4441C10536B197CEB4D7C
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/4iXLvPEQQhNG7Zjva52m22CbQVA.roa
Signing time: Wed 01 Jan 2025 17:48:31 +0000
ROA not before: Wed 01 Jan 2025 17:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396558
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:be:c5:bd:d4:44:1c:10:53:6b:19:7c:eb:4d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e225cbbcf110421346ed98ef6b9da6db609b4150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:32:70:c8:df:52:75:e3:9d:4e:26:da:33:97:
42:ea:d5:88:61:b4:57:59:1a:36:08:e6:b5:cd:87:
27:4a:e8:c3:84:54:cc:c1:6a:a7:20:82:3e:f0:67:
84:fe:c1:21:f3:06:f6:1d:7b:5c:a9:3f:00:9a:1f:
cb:0e:a7:ea:89:1c:3b:fc:87:f8:ae:da:45:54:ae:
21:f3:dd:fe:16:65:af:21:49:2e:ce:26:c4:d4:12:
f9:41:0f:ed:9c:62:9a:da:b6:cb:a2:5a:52:21:35:
33:c8:d8:f3:6a:82:34:0a:c0:3a:da:06:0f:1f:cb:
ba:b2:0a:e0:c6:6b:25:61:f3:91:f8:08:89:07:7c:
05:0f:df:76:53:f9:a0:e6:40:6b:54:bc:78:ee:27:
e8:4c:bf:9e:8a:0f:88:72:1b:c4:54:59:43:93:b2:
9e:56:77:20:64:98:34:b8:e4:6b:90:41:d1:b7:2d:
8b:5c:7e:58:af:a5:fc:09:71:94:1b:3d:31:89:a6:
25:af:63:f0:0f:ec:92:ce:48:e5:a8:ea:0e:49:0d:
d9:8f:d7:44:75:5b:77:95:e0:b1:67:33:43:41:25:
00:11:21:ee:c6:79:f2:17:f8:20:51:eb:f7:48:f4:
28:a1:90:c3:92:1b:f8:db:6d:4a:a5:36:bb:05:ee:
04:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:25:CB:BC:F1:10:42:13:46:ED:98:EF:6B:9D:A6:DB:60:9B:41:50
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/4iXLvPEQQhNG7Zjva52m22CbQVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
68:08:ae:f7:d0:a1:94:40:0a:48:05:1d:78:fa:85:02:d1:a1:
28:c3:bb:ab:07:56:d1:43:e8:a1:f9:2a:7e:7b:32:a2:90:15:
06:36:75:7f:97:1e:1d:1c:8b:be:01:0d:f7:39:ce:49:22:e8:
7b:f5:78:33:d6:74:f7:c8:fe:63:f2:4f:39:3c:6b:96:d6:5b:
78:f2:48:61:88:4a:8e:63:52:af:bf:06:ad:7c:61:08:82:7c:
d7:21:3f:70:f2:b9:d8:1e:29:b6:28:2a:cd:a5:9f:5f:3a:c6:
68:4a:81:1c:d0:2f:75:85:b7:63:55:24:30:0f:4f:52:4a:65:
73:b3:23:1f:68:48:b3:28:67:7f:9d:7d:99:92:1e:38:b5:f3:
af:bd:ce:69:d4:7c:8c:2e:2d:32:09:7e:3f:a9:ba:82:ee:30:
fc:84:3c:51:5d:9d:f6:13:57:61:20:61:8f:85:f5:a2:60:6e:
91:b5:31:b8:6a:fa:ac:85:e7:50:0e:a5:77:d5:43:17:2c:1c:
4f:26:1a:96:1e:55:5c:e4:a9:fb:b0:75:46:b3:be:ef:63:bc:
d9:6e:96:0e:42:6d:18:4e:15:8a:cd:4d:21:fa:fd:16:36:e5:
db:94:33:62:71:a8:83:4b:9a:aa:ac:e4:73:e1:16:a2:3f:8d:
48:be:4f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:12:39 2025 by rpki-client