Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/7tO8sfdT9xLhP-raxlN3WLbchCc.roa
File: 7tO8sfdT9xLhP-raxlN3WLbchCc.roa (raw, json)
Hash identifier: QTrBaYKRAR3N1q8NEK5E8c5hAevh5uqaHF2JrxdhHGM=
Subject key identifier: EE:D3:BC:B1:F7:53:F7:12:E1:3F:EA:DA:C6:53:77:58:B6:DC:84:27
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F625A1310650782E3C5D736126EA537
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/7tO8sfdT9xLhP-raxlN3WLbchCc.roa
Signing time: Tue 25 Jun 2024 12:32:44 +0000
ROA not before: Tue 25 Jun 2024 12:32:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396585
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:5a:13:10:65:07:82:e3:c5:d7:36:12:6e:a5:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eed3bcb1f753f712e13feadac6537758b6dc8427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b9:28:7a:85:79:86:eb:8f:38:06:24:23:dd:
99:4a:27:d9:c4:52:1f:5d:ce:1d:ea:13:e3:42:e1:
0b:fd:7e:e6:29:1c:49:a1:40:69:87:85:3d:1d:b1:
ae:ea:a1:79:e5:8d:49:a2:be:87:17:ea:b5:38:c0:
63:8e:88:94:a6:8b:d5:d9:ae:61:54:59:fa:49:b1:
bf:f8:e3:0f:cf:38:58:5d:e2:21:fd:40:f7:5d:c5:
9b:b1:b3:0b:97:19:22:e3:84:d2:f9:f6:bf:40:c4:
a5:c2:3b:29:d5:da:ad:25:e9:96:e5:dd:b0:7d:4a:
16:43:f2:fa:c6:f1:da:52:c9:a5:f5:c6:13:7e:1e:
a4:7f:7d:de:4e:fa:81:c5:02:d3:7b:e7:e3:69:f7:
9f:66:13:c1:ef:8c:b2:ae:a2:83:66:26:c7:88:f5:
15:ef:7c:23:24:42:4d:69:07:bf:8a:a9:10:12:ed:
a2:d0:a8:da:01:9f:d3:17:99:d6:71:fb:35:e6:20:
b9:46:64:37:75:69:a9:9b:7d:d5:dd:30:68:ec:fd:
0c:b0:4f:0c:a5:f7:ef:a1:3f:44:c9:49:a6:64:1d:
5e:28:08:64:1a:25:84:9a:ed:b3:0a:1c:ab:71:ca:
ea:e0:24:a7:1d:90:d1:23:df:12:d2:1f:f2:14:44:
c8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D3:BC:B1:F7:53:F7:12:E1:3F:EA:DA:C6:53:77:58:B6:DC:84:27
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/7tO8sfdT9xLhP-raxlN3WLbchCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
45:25:5c:de:31:0b:6c:2e:5c:94:9f:f7:04:ab:61:ea:c6:47:
6d:03:5a:a9:6d:da:8c:72:a3:99:27:56:b1:ca:f6:70:8b:98:
99:a0:88:cb:43:7b:10:cc:52:4d:45:2f:78:f3:be:48:b3:c3:
a7:73:48:e7:0d:82:45:4e:e4:06:46:ea:60:12:78:a3:76:e0:
5d:b1:b4:09:1d:d0:82:06:dd:13:3a:0f:5b:b5:35:dc:5b:55:
6e:c5:31:80:a1:51:95:89:81:c2:da:bd:f1:42:ac:7c:15:9d:
5a:1c:2a:db:9f:2d:3a:74:c1:a2:09:28:0a:1e:eb:ec:59:f0:
e0:89:4a:6d:bb:6e:11:be:61:f8:20:47:d4:17:d1:35:1c:d3:
a7:a8:c2:7e:21:b8:24:75:85:a0:63:e0:39:4a:73:15:84:c9:
c8:05:5c:b6:f7:88:17:84:e6:93:f9:06:47:f8:ee:5f:a0:c1:
0c:cd:a4:43:04:fb:02:07:09:54:66:c7:9c:e8:a6:9c:cf:0c:
6d:f8:f2:44:f3:8c:a1:78:88:6f:d3:ee:3b:0b:52:b4:94:a3:
b7:de:91:bd:e1:4d:d7:a8:57:30:23:a0:5f:25:22:51:f6:ab:
e1:24:e3:b0:ce:e6:3d:d8:d1:0d:80:48:e0:60:ce:5a:f9:c2:
72:a5:15:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:13:23 2024 by rpki-client on console-fra.rpki-client.org