Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/CHVE51Q0llh41614Qte7WInzoBE.roa
File: CHVE51Q0llh41614Qte7WInzoBE.roa (raw, json)
Hash identifier: yEXy1cLdW7McTdt4iZIgnMfvm3ZXdcYD/2G6hS18f18=
Subject key identifier: 08:75:44:E7:54:34:96:58:78:D7:AD:78:42:D7:BB:58:89:F3:A0:11
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBBD4E5BC16B5E9073C2BA93B545CF
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/CHVE51Q0llh41614Qte7WInzoBE.roa
Signing time: Wed 01 Jan 2025 17:48:30 +0000
ROA not before: Wed 01 Jan 2025 17:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396554
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:bd:4e:5b:c1:6b:5e:90:73:c2:ba:93:b5:45:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=087544e75434965878d7ad7842d7bb5889f3a011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6f:e8:bb:64:ab:ce:d7:ef:d6:cd:a4:29:e1:
ef:2e:a6:f6:14:63:4d:60:6c:44:02:81:78:f3:04:
b1:f9:ba:92:08:59:26:53:07:de:f5:7f:c5:b9:39:
c5:81:6c:70:b5:57:ec:b1:11:48:8e:af:83:63:7c:
0c:73:05:b0:8b:6a:69:5f:f9:36:a0:97:7e:fd:2e:
25:3a:bb:28:7c:b7:24:4c:20:dc:c6:1e:8e:99:36:
15:1f:c2:56:33:81:b7:fb:54:6f:13:d6:46:88:c6:
b3:64:fe:e2:c2:f6:25:72:df:63:da:19:c8:a7:76:
7f:54:09:cb:61:92:a8:48:40:92:8d:f4:f0:1e:4d:
10:07:84:8d:04:67:96:ad:3d:ec:90:19:13:52:df:
d0:ef:98:9a:49:cd:f8:b7:db:60:9c:89:f1:d1:f2:
1a:78:0d:13:51:9a:cd:83:89:77:58:0b:9e:77:31:
ee:33:9f:2c:b4:df:7f:b2:94:f7:e8:57:12:14:34:
7b:65:15:f7:2c:80:06:9d:0f:a5:e3:7b:50:7f:95:
4a:1a:cf:a7:cd:9b:39:e7:f2:ac:67:1f:e4:b9:76:
d4:f0:93:7e:da:b8:a4:f8:9a:ff:a6:f3:84:8c:04:
b4:7d:39:b1:3d:e7:58:61:c0:6a:3e:fe:3e:d5:14:
bd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:75:44:E7:54:34:96:58:78:D7:AD:78:42:D7:BB:58:89:F3:A0:11
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/CHVE51Q0llh41614Qte7WInzoBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
b4:f1:bf:40:d9:96:58:57:e2:2e:22:2b:ee:06:fe:d2:eb:33:
2d:7a:a3:2d:22:95:03:a0:e8:22:55:a2:b9:f6:da:24:59:1a:
6f:9f:16:26:d0:ec:b1:02:c4:14:e5:ec:61:8f:dd:f2:e7:2f:
65:e4:cf:f9:3b:eb:6a:93:72:84:b5:c8:89:95:71:1c:a1:e5:
1b:39:71:83:27:dd:72:e1:a8:d9:d2:fd:d8:2a:71:6c:aa:30:
ff:34:26:4d:97:73:59:c7:dd:88:cd:c0:e2:a4:60:84:1e:98:
a0:4a:a6:6f:b3:9b:26:1e:33:e2:de:e2:f9:c6:a1:26:c5:87:
2e:0d:a0:06:d2:c1:49:e1:b8:fb:c4:16:65:85:7c:6f:66:74:
fd:c1:23:31:12:69:e7:d8:0d:3f:14:61:a1:c6:49:a5:9d:a7:
f0:12:07:a3:2c:57:e5:c6:e9:89:09:b5:2c:2c:d2:f4:d2:59:
6c:f3:a7:43:a2:fb:bc:58:7b:8a:2d:a9:74:1e:f9:f6:1f:ac:
5e:33:74:69:aa:ae:6a:a3:dd:db:12:99:ee:e7:b4:8c:ff:84:
10:93:15:bb:0e:0e:30:f5:b1:06:ca:79:af:74:f7:32:2f:50:
8b:53:5e:af:68:4f:04:46:d1:8e:24:4e:ce:10:ec:60:5d:d1:
ca:32:5d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:04 2025 by rpki-client