Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/59LEAd2lkpbUSaA6rSoFNYkOjeA.roa
File: 59LEAd2lkpbUSaA6rSoFNYkOjeA.roa (raw, json)
Hash identifier: CAzNdfOU2tFqkGeZ4SVKLXtvBeuc0QP5JfRSml0e11o=
Subject key identifier: E7:D2:C4:01:DD:A5:92:96:D4:49:A0:3A:AD:2A:05:35:89:0E:8D:E0
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBC601440AA3DDD6CB2CFD57A8735D
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/59LEAd2lkpbUSaA6rSoFNYkOjeA.roa
Signing time: Wed 01 Jan 2025 17:48:33 +0000
ROA not before: Wed 01 Jan 2025 17:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396572
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:c6:01:44:0a:a3:dd:d6:cb:2c:fd:57:a8:73:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7d2c401dda59296d449a03aad2a0535890e8de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e3:02:ad:08:3e:1c:4b:c4:b9:db:19:db:f9:
ee:12:c1:7b:d6:2f:6d:8d:ac:fd:26:f5:29:34:7b:
0a:94:7f:2c:9c:97:57:80:2e:24:80:1d:83:1a:ef:
d9:7f:31:91:40:bf:84:45:74:e5:ba:17:7a:dc:61:
87:1b:47:fb:c0:5f:7e:6c:aa:16:ee:6e:52:80:20:
b4:11:f3:a9:01:38:02:8f:8b:50:e6:6a:d3:1e:14:
87:8a:80:66:34:42:68:39:cf:44:03:68:34:b9:9e:
cd:10:b9:7b:a0:dc:8c:66:31:98:2b:e0:87:c5:69:
e7:84:ad:6a:40:10:87:36:ef:4d:4d:31:a6:e5:74:
92:de:d2:8f:17:59:0a:a6:d7:e7:d9:d2:5c:01:4d:
c3:d7:71:78:7f:87:52:af:8d:1d:63:4a:7f:71:92:
c9:40:6b:eb:72:d6:ea:f7:3e:a8:2c:f3:e1:47:d5:
f9:fd:f0:33:27:40:44:29:bd:a2:69:90:f9:b7:4b:
3d:ea:cd:86:bd:2a:47:b7:bb:d9:09:9a:46:0d:af:
bc:e0:80:16:db:69:cf:93:e7:57:20:30:05:34:90:
10:72:46:93:cb:7c:ba:6e:33:f9:84:f3:b2:f0:99:
ac:a0:9a:14:df:b4:af:72:1b:03:04:50:17:9f:03:
3a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D2:C4:01:DD:A5:92:96:D4:49:A0:3A:AD:2A:05:35:89:0E:8D:E0
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/59LEAd2lkpbUSaA6rSoFNYkOjeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
62:f0:67:6b:b7:df:88:d6:d3:5d:b3:b7:4b:d0:88:4c:f1:ac:
ad:0e:2c:20:0f:8a:32:b2:d2:6b:95:bc:21:44:e5:8f:8d:e8:
6f:b2:81:ff:ba:9b:dd:49:c1:ee:f1:0a:a2:cd:d2:d6:ae:8a:
d2:19:0f:34:d7:9c:65:95:1b:16:26:fd:81:55:dc:c8:19:bf:
b1:40:13:fe:d9:b2:49:0e:aa:66:23:05:c9:7c:71:fe:0d:2f:
7d:d8:24:1c:58:23:2b:93:7d:63:bf:ec:9a:24:63:ee:78:b5:
11:5e:18:2b:93:e7:4b:a3:15:61:e6:50:9d:7a:db:c4:18:d1:
7e:4a:85:c9:a5:ff:67:25:a2:9f:c1:5a:61:f6:18:6d:c6:1c:
a8:92:af:d7:60:b6:71:66:7e:39:54:42:0b:30:01:77:43:29:
c1:c9:9b:26:f0:e6:70:28:fe:28:ba:b6:b2:02:35:92:db:64:
8e:d0:90:ee:de:80:56:68:51:34:ce:7f:ad:8e:df:fc:eb:47:
ff:50:8c:89:57:c4:2c:c9:d8:f9:7c:eb:0d:4b:3c:6f:0f:96:
69:65:17:3d:f1:e0:ad:08:ee:da:35:5a:85:47:a3:0e:34:e8:
ec:5f:5f:95:fe:42:93:dd:33:26:42:de:3b:6e:05:9b:f1:65:
db:9b:b3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:34 2025 by rpki-client