Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/6YLEjcjXNXiJYi7GfZwJvOawW4s.roa
File: 6YLEjcjXNXiJYi7GfZwJvOawW4s.roa (raw, json)
Hash identifier: 0SwELWaLk7i+6kl2j6VZPCegHsQQe0TNQ7rPUBYRfDI=
Subject key identifier: E9:82:C4:8D:C8:D7:35:78:89:62:2E:C6:7D:9C:09:BC:E6:B0:5B:8B
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F6273490B0D4F1EE4AD336F32C70C12
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/6YLEjcjXNXiJYi7GfZwJvOawW4s.roa
Signing time: Tue 25 Jun 2024 12:32:50 +0000
ROA not before: Tue 25 Jun 2024 12:32:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397207
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:73:49:0b:0d:4f:1e:e4:ad:33:6f:32:c7:0c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e982c48dc8d7357889622ec67d9c09bce6b05b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:25:ea:cd:22:d8:44:34:06:cd:94:6c:a7:23:
62:71:ea:9b:52:e0:8a:db:df:f1:e9:ad:d2:4b:b3:
e1:06:73:03:75:1f:0c:c5:78:d9:e9:2b:38:08:48:
31:5d:b5:06:1a:9f:d0:ac:5a:77:ab:4a:54:47:56:
04:2e:e4:d5:16:8d:96:cf:11:7a:29:05:4e:3f:e0:
6c:10:79:2f:c2:07:2e:39:dc:51:a2:7f:8b:06:e3:
96:b1:b1:ee:30:1a:80:20:c8:47:57:94:cc:b6:4c:
c5:2b:7e:7d:b6:e0:be:e8:e8:fd:20:0d:28:6a:77:
f8:fd:21:a6:60:e7:44:39:3b:d7:6b:37:1d:0a:c1:
cb:3f:d6:e1:c0:ad:97:2a:15:05:a7:cd:7b:af:28:
79:09:18:ed:25:19:9c:8a:73:b1:e6:14:1e:d3:7f:
d7:b9:9e:6d:13:78:db:ab:fe:5e:93:2d:3b:6d:fc:
84:56:ea:da:7c:fe:46:89:90:c9:2b:ca:d0:e5:13:
ec:8f:8c:4d:93:76:cb:c3:67:df:f1:1b:03:23:6d:
31:94:98:92:96:be:fd:a1:ca:35:ce:14:ca:27:6e:
3f:06:40:97:b5:01:a3:38:cc:5a:02:8a:72:ef:21:
4e:7f:4a:08:8b:f0:94:4c:ff:bb:78:f7:8a:56:16:
47:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:82:C4:8D:C8:D7:35:78:89:62:2E:C6:7D:9C:09:BC:E6:B0:5B:8B
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/6YLEjcjXNXiJYi7GfZwJvOawW4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
3f:4e:dc:e6:4d:34:4d:4e:a0:90:bf:f9:6a:94:58:e3:dd:b3:
08:de:87:98:22:a9:b0:64:00:f0:47:4e:d0:79:6b:37:b7:64:
a2:e5:5f:78:ec:99:40:4f:92:62:91:4a:40:79:1a:6b:cb:25:
23:23:3e:29:4b:9c:9f:04:80:0d:99:a4:93:27:bd:43:bb:f6:
42:54:e0:c4:b8:0d:38:57:d8:e3:36:94:9e:a8:27:2b:5d:4a:
fd:3c:2b:48:98:cf:08:13:f9:fc:81:08:67:e1:e5:8b:2e:a6:
d8:74:a3:f0:69:7c:53:62:80:30:48:c0:99:bf:26:c3:f6:be:
27:ee:57:76:f4:74:9e:e6:f1:e4:a3:2f:7d:52:44:d4:04:b9:
ee:60:fc:7d:0c:98:17:f6:c1:7c:67:a5:90:f3:53:5f:78:29:
59:91:b0:d1:1f:9f:ee:af:2f:80:92:57:4e:fc:5d:a9:5b:bd:
27:d4:43:64:40:c3:48:6a:8f:73:37:14:1f:a9:45:0a:49:b7:
6a:41:27:d1:3a:be:64:84:53:d4:02:93:cd:51:2c:2d:91:04:
49:28:fd:d0:70:82:44:9d:2e:5f:0a:5e:3c:00:3c:a1:91:78:
84:b4:2c:64:e1:e3:06:7a:64:49:87:2c:a4:3f:29:34:83:11:
7f:45:c7:53
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZBPYnNJCw1PHuStM28yxwwSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjQwNjI1MTIzMjUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTgyYzQ4ZGM4ZDczNTc4ODk2MjJlYzY3ZDljMDliY2U2YjA1YjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CXqzSLYRDQGzZRspyNiceqbUuCK
29/x6a3SS7PhBnMDdR8MxXjZ6Ss4CEgxXbUGGp/QrFp3q0pUR1YELuTVFo2WzxF6
KQVOP+BsEHkvwgcuOdxRon+LBuOWsbHuMBqAIMhHV5TMtkzFK359tuC+6Oj9IA0o
anf4/SGmYOdEOTvXazcdCsHLP9bhwK2XKhUFp817ryh5CRjtJRmcinOx5hQe03/X
uZ5tE3jbq/5eky07bfyEVurafP5GiZDJK8rQ5RPsj4xNk3bLw2ff8RsDI20xlJiS
lr79oco1zhTKJ24/BkCXtQGjOMxaAopy7yFOf0oIi/CUTP+7ePeKVhZHXQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFOmCxI3I1zV4iWIuxn2cCbzmsFuLMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvNllMRWpjalhOWGlKWWk3R2Zad0p2T2F3VzRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUBURPDHjAN
BgkqhkiG9w0BAQsFAAOCAQEAP07c5k00TU6gkL/5apRY492zCN6HmCKpsGQA8EdO
0HlrN7dkouVfeOyZQE+SYpFKQHkaa8slIyM+KUucnwSADZmkkye9Q7v2QlTgxLgN
OFfY4zaUnqgnK11K/TwrSJjPCBP5/IEIZ+Hliy6m2HSj8Gl8U2KAMEjAmb8mw/a+
J+5XdvR0nubx5KMvfVJE1AS57mD8fQyYF/bBfGelkPNTX3gpWZGw0R+f7q8vgJJX
TvxdqVu9J9RDZEDDSGqPczcUH6lFCkm3akEn0Tq+ZIRT1AKTzVEsLZEESSj90HCC
RJ0uXwpePAA8oZF4hLQsZOHjBnpkSYcspD8pNIMRf0XHUw==
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:34:19 2024 by rpki-client on console-fra.rpki-client.org