Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/7QLkbic5ZgBPTVBd3v77QC8URTk.roa
File: 7QLkbic5ZgBPTVBd3v77QC8URTk.roa (raw, json)
Hash identifier: 1qM8PiHRRb9eZp66hs8sFEzvaPEbeUYYPGY7udkC4PI=
Subject key identifier: ED:02:E4:6E:27:39:66:00:4F:4D:50:5D:DE:FE:FB:40:2F:14:45:39
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F624703E49938049E967DCD52586CBA
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/7QLkbic5ZgBPTVBd3v77QC8URTk.roa
Signing time: Tue 25 Jun 2024 12:32:39 +0000
ROA not before: Tue 25 Jun 2024 12:32:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396550
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:47:03:e4:99:38:04:9e:96:7d:cd:52:58:6c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed02e46e273966004f4d505ddefefb402f144539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ea:c7:09:c6:20:27:c1:65:27:3f:a0:c4:bc:
61:04:7c:23:39:92:ee:ea:2e:50:e0:f7:61:78:a5:
c8:7c:be:41:a2:39:be:1e:db:ab:59:90:7d:12:81:
aa:3c:c1:37:7c:9c:c4:5e:3c:5b:c2:8f:a2:21:2e:
da:43:2e:e2:56:5e:91:c4:ac:cd:b5:8c:51:0d:f7:
a8:c2:ee:a2:f2:79:77:96:6a:7c:33:63:e8:d2:30:
40:91:72:10:11:6c:a4:2e:fa:52:4a:1b:1d:bd:92:
ce:ce:b9:9f:c1:fc:55:6f:fb:93:0f:ab:84:c5:bc:
ce:c0:75:19:1f:56:a4:2f:82:2d:3a:92:b9:3c:11:
09:87:de:70:6f:f0:e6:66:c1:90:fd:22:20:62:cb:
a5:2a:25:57:df:2c:45:0b:62:3d:c5:5a:46:81:3e:
70:a0:39:8a:e6:fe:7d:a4:f3:ae:fc:a4:3d:95:f6:
07:86:04:16:1b:b0:2e:9a:be:88:09:41:a6:69:7c:
b0:50:a5:8b:68:40:87:e8:f5:b5:f4:64:e9:53:7b:
29:6f:6c:62:f5:f6:e8:68:92:61:4e:5f:56:f3:12:
65:71:81:58:8c:b5:ce:56:92:c6:f3:51:20:e3:5d:
c4:24:e1:96:c1:3b:73:a9:48:1a:ce:17:44:57:8d:
d8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:02:E4:6E:27:39:66:00:4F:4D:50:5D:DE:FE:FB:40:2F:14:45:39
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/7QLkbic5ZgBPTVBd3v77QC8URTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
54:54:38:97:47:cc:7d:c5:8f:c5:5c:b3:dd:87:df:b1:9e:f5:
24:2d:b5:65:2c:ea:ff:3e:52:7d:bd:1a:fa:42:b6:c6:e5:5a:
23:44:59:9c:6c:f9:d4:6c:48:70:67:6e:47:74:4f:fd:0d:23:
17:88:0a:e6:12:57:97:96:c7:62:54:d7:44:35:e2:2b:84:9a:
d7:f6:12:3f:7b:85:d3:89:86:54:56:b9:ff:a2:5f:51:9a:62:
95:24:e0:96:44:6d:4e:f6:2b:e4:4b:5b:e6:35:2d:a9:ac:3e:
0d:6b:81:5b:1e:5d:2a:c0:4b:13:d4:68:3f:11:a9:96:22:59:
db:17:1e:c4:3c:5c:e8:1f:d7:d4:b1:fa:8c:a5:48:79:58:b5:
a1:3f:36:bb:74:aa:0b:c0:11:39:fa:9f:2b:ed:8a:5a:4b:df:
0b:89:90:fc:ad:6a:9b:ec:e1:44:70:eb:83:4d:86:fe:e8:d5:
b3:aa:f5:e9:fe:7c:f1:74:95:fd:21:d8:f3:00:34:77:fc:09:
32:f7:80:22:5d:e3:23:99:bf:52:80:93:43:95:fc:60:ee:67:
57:65:64:af:5e:cd:e6:87:4b:04:25:a7:9f:97:0e:c3:81:a4:
8a:75:08:0c:ca:fa:b7:e8:5d:9e:5d:cf:fa:74:e8:2e:69:c3:
ae:f5:39:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:47:18 2024 by rpki-client on console-ams.rpki-client.org