Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/8qDhlCdnhuImuAd9qWpQiZ8REN4.roa
File: 8qDhlCdnhuImuAd9qWpQiZ8REN4.roa (raw, json)
Hash identifier: itWrrKdOs1lzYvpvOnsv2MoHgbRAImelCu/K+WXC8Og=
Subject key identifier: F2:A0:E1:94:27:67:86:E2:26:B8:07:7D:A9:6A:50:89:9F:11:10:DE
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F6239152C7B86B3FB6E9EF034DA6D77
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/8qDhlCdnhuImuAd9qWpQiZ8REN4.roa
Signing time: Tue 25 Jun 2024 12:32:35 +0000
ROA not before: Tue 25 Jun 2024 12:32:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36616
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:39:15:2c:7b:86:b3:fb:6e:9e:f0:34:da:6d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2a0e194276786e226b8077da96a50899f1110de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:df:3c:b6:95:03:bb:06:00:c9:d9:b2:8f:b2:
73:91:9d:11:78:4e:1f:5c:ff:3c:60:2b:b7:f1:9f:
4e:2f:ee:5e:ed:4c:eb:3c:7f:2f:dd:2c:7e:74:44:
4c:dc:e0:eb:c1:92:4a:4f:9f:77:3b:ec:22:e0:bd:
aa:e3:98:c6:f7:3e:89:bc:07:dd:71:d1:5b:88:ad:
aa:7b:20:40:12:ef:b1:36:34:df:7f:a5:fb:f1:0a:
ab:58:81:a1:fd:86:63:2c:1c:f4:de:2e:02:ba:4e:
52:1f:b5:1a:34:4c:96:19:c2:96:09:bd:59:96:01:
89:4e:fb:dc:dd:6a:d1:7c:83:74:61:2a:13:f0:d4:
e1:73:4c:c7:90:84:aa:fe:38:aa:3a:a1:34:1a:e1:
4b:61:d3:e4:d2:79:6e:0f:a3:01:43:27:c4:aa:b6:
ff:02:6e:57:ff:87:b2:60:d5:23:bf:cb:5d:42:15:
36:d0:c6:e0:c3:1b:66:6a:30:0d:99:5b:41:a2:f8:
27:8a:36:46:09:81:3f:7d:f0:33:3e:00:b8:b0:69:
c3:fd:16:5c:06:c5:81:27:5c:e7:da:27:c3:b3:35:
3d:7e:70:78:b7:36:08:bf:ff:0a:8c:bc:a2:c4:99:
09:53:d4:82:a0:4a:a4:b9:4b:0a:0b:20:ad:7e:58:
45:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A0:E1:94:27:67:86:E2:26:B8:07:7D:A9:6A:50:89:9F:11:10:DE
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/8qDhlCdnhuImuAd9qWpQiZ8REN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
5d:b1:ee:4e:55:5f:aa:58:d5:54:9e:20:e1:c0:c1:97:fd:41:
3b:04:1a:e7:c5:bc:4b:ce:a9:0f:14:70:81:d0:31:99:b7:ba:
c2:58:76:6f:b8:05:70:55:be:03:49:a8:81:55:f2:8a:97:fc:
a4:a5:69:de:7e:c6:99:0f:11:2e:93:28:8f:bc:ce:41:d9:f0:
32:93:35:07:6b:a6:50:99:23:12:b1:f4:f5:99:71:f5:c3:25:
03:69:e0:3b:9c:8b:58:24:59:55:ac:10:4a:21:9c:e8:62:22:
c4:5a:4b:ca:2a:df:23:6f:51:7e:d1:96:7d:3a:2a:a2:19:be:
fd:cb:13:ea:e0:d4:95:18:03:06:96:eb:df:79:24:9b:3b:39:
f3:7a:65:ef:98:d9:c8:83:64:62:bb:6f:84:24:9c:3c:2a:ec:
77:0c:4f:53:4f:55:19:8c:aa:03:44:d5:a8:2d:ac:fd:4c:95:
38:b9:d1:51:c2:b7:b3:68:0b:b3:0e:e2:f7:28:a9:1d:35:dc:
58:6f:94:27:ba:19:17:c1:82:5f:ea:e9:8d:99:95:60:a5:68:
1c:69:3f:4e:d4:11:63:61:be:18:4d:7b:5a:45:b2:21:b6:67:
58:8b:39:e2:64:3e:d3:4e:8e:32:f8:ad:62:35:d0:49:d9:88:
3c:43:95:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:34:19 2024 by rpki-client on console-fra.rpki-client.org