Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/4ytDEDA645Gx2DSze43EBrUV2kA.roa
File: 4ytDEDA645Gx2DSze43EBrUV2kA.roa (raw, json)
Hash identifier: +sQafpqfsuvIRnCfx2skEDk1Pn2oxGzP33JYq9Tgaqc=
Subject key identifier: E3:2B:43:10:30:3A:E3:91:B1:D8:34:B3:7B:8D:C4:06:B5:15:DA:40
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBB2AF65F1EE2B6B2AC2BCADA41BED
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/4ytDEDA645Gx2DSze43EBrUV2kA.roa
Signing time: Wed 01 Jan 2025 17:48:28 +0000
ROA not before: Wed 01 Jan 2025 17:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36624
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:b2:af:65:f1:ee:2b:6b:2a:c2:bc:ad:a4:1b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e32b4310303ae391b1d834b37b8dc406b515da40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ee:fe:07:db:7b:b9:9c:5c:56:d1:8b:ec:6d:
7b:13:24:1f:be:20:31:31:d2:1f:a7:4f:55:e8:f0:
12:f1:9e:aa:ee:cc:61:b0:b8:c0:87:b2:96:fc:90:
12:a0:47:4c:52:5b:ad:b0:75:6c:30:18:5d:f9:60:
60:81:36:71:45:ca:ce:3e:b8:c0:b1:20:c1:6d:f6:
a3:cd:4c:33:b2:c9:21:38:23:9e:97:cb:24:fd:8c:
9d:3b:26:0d:98:87:31:a0:65:69:fa:a3:4a:cc:4e:
73:e3:2e:d4:72:f2:a6:20:63:92:d2:ef:5a:26:3b:
c8:8b:17:74:1d:3d:c0:1c:9f:3a:7b:d5:18:19:56:
d0:e2:22:63:7b:f2:62:4f:a9:f8:58:b4:cd:b9:c7:
22:ff:e0:ea:bd:a5:0a:0d:3f:58:46:4c:a2:1c:72:
bf:1a:dc:f3:2a:02:b4:dc:a0:a0:ae:08:46:fd:95:
b2:b1:fa:12:6c:47:c6:73:01:b8:db:ec:00:d3:f0:
ce:69:68:47:e2:fc:1c:0a:79:e4:50:86:00:08:4c:
59:4f:de:0e:ca:c7:29:3b:b2:93:27:88:4e:3b:d0:
ed:99:0b:33:26:1d:65:8a:1f:e1:63:58:cf:9c:53:
e6:15:8a:bb:92:6a:b9:67:2b:78:80:b0:03:3d:e5:
91:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2B:43:10:30:3A:E3:91:B1:D8:34:B3:7B:8D:C4:06:B5:15:DA:40
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/4ytDEDA645Gx2DSze43EBrUV2kA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
16:b0:0a:1d:08:87:ee:8b:99:cd:c8:ca:ce:2b:0f:5f:47:d4:
28:23:64:80:4e:5c:39:c3:53:08:38:82:0e:ed:f8:ac:2d:9f:
11:9d:35:e1:a0:85:3d:b9:c3:c4:2b:2f:10:14:d5:aa:e1:2a:
fd:74:4d:b9:fb:21:36:15:2e:12:81:37:cd:4f:d4:8a:72:f3:
50:29:52:8d:b3:1e:f9:e9:e6:41:50:1c:1f:4a:30:87:2e:b6:
b0:38:71:b1:40:1b:63:55:d8:6e:c1:4a:d4:1c:09:b5:b4:00:
62:36:cc:46:0b:23:f7:a8:7a:dc:f2:6b:05:92:cc:ce:74:69:
fa:a4:fb:17:48:34:84:83:e5:2a:04:93:61:08:75:cd:53:05:
f3:1d:be:97:86:3e:2f:f2:fd:b6:ca:20:2b:e0:1c:87:c0:0c:
3a:1b:2c:e7:a1:a5:65:73:df:ac:d6:28:89:7d:7f:06:c3:c9:
19:ce:7f:df:ec:ed:74:31:6e:45:eb:de:2c:75:a3:bc:fd:69:
dc:6f:b2:10:5b:34:13:59:32:3d:76:e8:40:28:78:c8:7c:81:
c3:67:e8:c2:ab:2b:81:1d:12:60:fe:c5:6b:2c:46:9c:d4:88:
8a:2c:6f:ad:ba:96:54:50:92:7d:74:b5:fa:dd:29:86:b4:6d:
08:47:d3:bd
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQi+7KvZfHuK2sqwrytpBvtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjUwMTAxMTc0ODI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzJiNDMxMDMwM2FlMzkxYjFkODM0YjM3YjhkYzQwNmI1MTVkYTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu7+B9t7uZxcVtGL7G17EyQfviAx
MdIfp09V6PAS8Z6q7sxhsLjAh7KW/JASoEdMUlutsHVsMBhd+WBggTZxRcrOPrjA
sSDBbfajzUwzsskhOCOel8sk/YydOyYNmIcxoGVp+qNKzE5z4y7UcvKmIGOS0u9a
JjvIixd0HT3AHJ86e9UYGVbQ4iJje/JiT6n4WLTNucci/+DqvaUKDT9YRkyiHHK/
GtzzKgK03KCgrghG/ZWysfoSbEfGcwG42+wA0/DOaWhH4vwcCnnkUIYACExZT94O
yscpO7KTJ4hOO9DtmQszJh1lih/hY1jPnFPmFYq7kmq5Zyt4gLADPeWRLwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFOMrQxAwOuORsdg0s3uNxAa1FdpAMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvNHl0REVEQTY0NUd4MkRTemU0M0VCclVWMmtBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF
ALlkADUwDQYJKoZIhvcNAQELBQADggEBABawCh0Ih+6Lmc3Iys4rD19H1CgjZIBO
XDnDUwg4gg7t+KwtnxGdNeGghT25w8QrLxAU1arhKv10Tbn7ITYVLhKBN81P1Ipy
81ApUo2zHvnp5kFQHB9KMIcutrA4cbFAG2NV2G7BStQcCbW0AGI2zEYLI/eoetzy
awWSzM50afqk+xdINISD5SoEk2EIdc1TBfMdvpeGPi/y/bbKICvgHIfADDobLOeh
pWVz36zWKIl9fwbDyRnOf9/s7XQxbkXr3ix1o7z9adxvshBbNBNZMj126EAoeMh8
gcNn6MKrK4EdEmD+xWssRpzUiIosb626llRQkn10tfrdKYa0bQhH070=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:45 2025 by rpki-client