Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/BtKYZk3PMyMjtU1OsQJtNk7zFA8.roa
File: BtKYZk3PMyMjtU1OsQJtNk7zFA8.roa (raw, json)
Hash identifier: nyp/cOUOdkyPUGnTgbV77aLLhXWiS46BDe9EEoBszwk=
Subject key identifier: 06:D2:98:66:4D:CF:33:23:23:B5:4D:4E:B1:02:6D:36:4E:F3:14:0F
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBB36DF583F0B7B677132EA133C989
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/BtKYZk3PMyMjtU1OsQJtNk7zFA8.roa
Signing time: Wed 01 Jan 2025 17:48:28 +0000
ROA not before: Wed 01 Jan 2025 17:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36626
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:b3:6d:f5:83:f0:b7:b6:77:13:2e:a1:33:c9:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06d298664dcf332323b54d4eb1026d364ef3140f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:98:c4:ab:ff:55:a7:8f:8b:bc:7e:3d:8b:5e:
a3:39:dc:09:af:38:e3:05:3a:b7:e7:a4:00:22:dc:
60:fb:1b:55:0c:c4:15:eb:ea:bf:16:73:38:bf:ba:
06:db:55:b9:3c:b5:2c:dd:73:14:e0:22:e6:1e:18:
08:68:52:e8:c5:77:ed:96:8f:67:13:58:4e:6b:b1:
b1:61:e5:2b:28:fd:ca:71:66:e5:53:15:c5:c0:33:
9d:e1:0b:4b:29:ad:80:e5:0d:84:f8:74:e9:14:06:
c1:e2:a0:c5:a9:82:6b:73:80:8a:c2:e0:ff:62:4e:
d0:20:25:19:1f:29:28:b6:2b:e6:89:78:d6:93:23:
fe:11:1d:c9:b8:fa:fe:d5:dc:6c:37:34:71:e8:b9:
26:16:4f:49:24:03:95:92:5a:f5:40:cf:c5:b1:82:
57:87:89:b6:af:92:ba:73:04:5b:6b:dd:b6:09:a3:
1f:81:7a:8c:39:62:38:9c:3a:c0:d0:66:e8:6c:24:
dc:50:e0:05:d8:c8:cb:5a:38:9c:7d:d0:17:e0:9d:
de:4f:c1:d8:9f:b2:52:e9:1f:f4:b4:7b:85:ce:51:
70:c1:4e:b2:95:58:4c:c2:25:44:04:88:0c:00:9b:
99:1e:45:b4:fa:f8:76:f7:33:ea:36:2a:f5:ee:b0:
26:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D2:98:66:4D:CF:33:23:23:B5:4D:4E:B1:02:6D:36:4E:F3:14:0F
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/BtKYZk3PMyMjtU1OsQJtNk7zFA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
81:d9:0f:e4:d0:2d:6e:e7:d8:19:93:47:af:ca:0b:ef:71:87:
c8:34:82:05:cc:1b:28:4a:a7:12:9b:ac:41:c5:2e:4d:b6:5f:
7b:4d:b8:fb:31:4b:19:3d:6d:6f:01:e5:f5:64:b6:d0:21:85:
e1:78:cc:62:0b:1c:f8:5a:db:01:9d:da:38:74:43:d3:99:5a:
01:db:ea:ea:2b:e6:4d:4e:c0:8f:c5:3a:03:4c:de:18:15:2f:
47:71:07:f8:cc:55:5f:b5:1c:d9:d1:e5:ed:15:8d:81:c2:2f:
89:28:77:27:4d:a6:46:c1:5c:61:21:8d:c8:6f:a6:cf:5b:58:
99:94:c4:60:29:fe:ee:6d:0a:b4:a1:cb:f5:73:c6:b7:39:3e:
e7:f9:1e:89:e7:95:59:92:1c:b2:9d:a9:5e:2e:3b:39:af:57:
d3:7e:7a:d9:95:8d:ad:13:cc:c8:c2:74:6f:c4:35:9a:7b:90:
45:cc:d5:5b:26:af:bd:e6:94:13:fb:34:30:f3:f0:03:e8:33:
91:4a:23:47:88:31:01:88:06:e5:86:9c:6a:67:fc:64:30:99:
56:4a:f4:14:71:1c:e5:0d:f2:95:81:f2:59:9a:6f:c1:39:10:
a0:9a:3c:9d:f5:8f:25:d6:85:91:df:8b:3c:87:f7:19:87:36:
b3:dd:c0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:12:26 2025 by rpki-client