Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/DJ3iDqveZOi1JE1odOaRtjTEOm8.roa
File: DJ3iDqveZOi1JE1odOaRtjTEOm8.roa (raw, json)
Hash identifier: U9RFU43zHjQMJxC1groqww6YMMtJjlk/4S69weppKMw=
Subject key identifier: 0C:9D:E2:0E:AB:DE:64:E8:B5:24:4D:68:74:E6:91:B6:34:C4:3A:6F
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBB8BD32DF621B26752C992777DCD7
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/DJ3iDqveZOi1JE1odOaRtjTEOm8.roa
Signing time: Wed 01 Jan 2025 17:48:29 +0000
ROA not before: Wed 01 Jan 2025 17:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396543
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:b8:bd:32:df:62:1b:26:75:2c:99:27:77:dc:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c9de20eabde64e8b5244d6874e691b634c43a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:71:87:58:3f:d6:33:f2:3a:4d:d3:58:a5:3f:
8e:fe:e5:06:80:0b:bd:1a:03:86:33:ed:90:44:f1:
9f:39:71:52:ab:fa:93:95:4b:99:d2:b1:1e:d0:d1:
81:e1:aa:d9:61:b8:bd:e1:2e:44:b0:5f:13:5b:83:
d6:e8:01:90:ad:73:90:31:6e:b9:26:a0:3f:41:5f:
8a:9b:52:e1:42:51:7d:26:43:68:93:28:d7:4f:8e:
63:96:15:cf:84:53:a7:e9:2c:36:73:a2:97:d8:71:
31:30:0e:4e:d6:f4:9e:65:e9:51:1c:2a:75:49:7a:
15:38:cb:1b:71:3e:ba:6f:d2:a5:c4:2a:95:ef:9f:
4c:db:30:f3:ad:6b:56:e2:38:95:e5:a2:88:87:54:
5f:c1:29:e0:a5:95:32:73:e5:2e:9c:b3:e8:a7:76:
af:c9:eb:df:6a:9c:62:d4:79:92:bd:a5:b8:ad:b6:
65:58:c2:eb:1b:ff:45:a7:34:ab:26:6c:6b:de:f0:
cd:3e:19:65:6c:1f:41:f7:b2:1c:03:3f:64:90:5c:
07:6e:98:4c:06:7a:ae:53:42:b3:f6:ab:52:73:5f:
30:c3:32:e2:ef:84:80:28:1c:96:81:25:51:1c:3d:
3d:14:62:b5:47:7c:87:f0:ca:69:5c:2f:95:82:2a:
65:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:9D:E2:0E:AB:DE:64:E8:B5:24:4D:68:74:E6:91:B6:34:C4:3A:6F
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/DJ3iDqveZOi1JE1odOaRtjTEOm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
99:d7:db:06:f3:7a:f0:02:26:94:c7:e6:58:b6:91:c6:8e:a2:
44:cf:7d:91:70:0a:f6:0e:ab:51:13:fa:8c:6c:35:60:57:7d:
cd:16:ca:6b:b9:ec:98:8f:10:5f:9b:5e:26:6d:ec:af:5d:23:
53:cd:a9:29:6b:3b:42:0f:0c:fc:7a:4d:08:40:72:78:f1:73:
98:c0:43:cb:2b:21:f4:da:73:69:fa:44:80:49:32:5a:91:2b:
14:2f:d0:4a:37:0b:54:39:5a:ee:1f:8e:8b:de:30:4d:fc:43:
8d:62:ad:9b:a8:45:b7:17:76:1d:b8:36:57:bd:73:af:3d:d3:
9e:1b:7c:5e:9c:1d:91:10:cf:4d:3e:9a:fa:ec:ee:9c:2c:07:
41:59:0e:c1:e4:58:9b:5f:71:c7:68:89:af:03:4e:17:dc:47:
c6:5c:2f:bc:e5:b1:ea:e1:e8:43:da:e2:fa:bd:24:67:3a:ad:
5a:60:e1:4d:ae:fb:ff:8f:22:f9:9c:2a:fe:a4:aa:a5:c0:27:
3f:7b:7b:31:27:e5:22:86:62:4a:7a:68:ee:e8:42:0d:ec:3d:
c6:ce:3f:a1:70:bf:0b:cb:8e:11:72:3b:7c:1c:50:ff:4b:09:
16:7f:03:5c:65:05:3f:92:a7:99:49:5f:6b:17:d0:d7:79:06:
5e:de:6e:e6
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQi+7i9Mt9iGyZ1LJknd9zXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjUwMTAxMTc0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzlkZTIwZWFiZGU2NGU4YjUyNDRkNjg3NGU2OTFiNjM0YzQzYTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3GHWD/WM/I6TdNYpT+O/uUGgAu9
GgOGM+2QRPGfOXFSq/qTlUuZ0rEe0NGB4arZYbi94S5EsF8TW4PW6AGQrXOQMW65
JqA/QV+Km1LhQlF9JkNokyjXT45jlhXPhFOn6Sw2c6KX2HExMA5O1vSeZelRHCp1
SXoVOMsbcT66b9KlxCqV759M2zDzrWtW4jiV5aKIh1RfwSngpZUyc+UunLPop3av
yevfapxi1HmSvaW4rbZlWMLrG/9FpzSrJmxr3vDNPhllbB9B97IcAz9kkFwHbphM
BnquU0Kz9qtSc18wwzLi74SAKByWgSVRHD09FGK1R3yH8MppXC+VgiplwQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFAyd4g6r3mTotSRNaHTmkbY0xDpvMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvREozaURxdmVaT2kxSkUxb2RPYVJ0alRFT204LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF
ALlkADUwDQYJKoZIhvcNAQELBQADggEBAJnX2wbzevACJpTH5li2kcaOokTPfZFw
CvYOq1ET+oxsNWBXfc0Wymu57JiPEF+bXiZt7K9dI1PNqSlrO0IPDPx6TQhAcnjx
c5jAQ8srIfTac2n6RIBJMlqRKxQv0Eo3C1Q5Wu4fjoveME38Q41irZuoRbcXdh24
Nle9c689054bfF6cHZEQz00+mvrs7pwsB0FZDsHkWJtfccdoia8DThfcR8ZcL7zl
serh6EPa4vq9JGc6rVpg4U2u+/+PIvmcKv6kqqXAJz97ezEn5SKGYkp6aO7oQg3s
PcbOP6FwvwvLjhFyO3wcUP9LCRZ/A1xlBT+Sp5lJX2sX0Nd5Bl7ebuY=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:18:51 2025 by rpki-client