Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/F3zoKqav-2JIzw9WqgJ9Ro2w-uw.roa
File: F3zoKqav-2JIzw9WqgJ9Ro2w-uw.roa (raw, json)
Hash identifier: Xe5njy6xrSMsuyjj+SApMXemPeaPXazn7s5Q12aF9TE=
Subject key identifier: 17:7C:E8:2A:A6:AF:FB:62:48:CF:0F:56:AA:02:7D:46:8D:B0:FA:EC
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBD6405AFA122CA9A94004D2538D69
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/F3zoKqav-2JIzw9WqgJ9Ro2w-uw.roa
Signing time: Wed 01 Jan 2025 17:48:37 +0000
ROA not before: Wed 01 Jan 2025 17:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396609
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:d6:40:5a:fa:12:2c:a9:a9:40:04:d2:53:8d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=177ce82aa6affb6248cf0f56aa027d468db0faec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7a:ef:1f:36:44:48:ed:d0:19:b0:10:0a:a7:
e2:2b:a9:da:59:03:e8:ed:9d:24:a3:a7:bc:f7:b6:
f5:08:88:d6:ab:77:74:07:12:40:92:02:c9:cd:b6:
ba:ee:90:ea:fa:41:ac:3d:9a:35:df:e6:b7:1b:8b:
56:80:3c:fa:d7:4b:15:2c:08:52:fb:6d:08:ff:2f:
ec:8c:d9:3a:6a:83:e7:43:93:b7:ad:b8:cf:ce:ab:
f7:39:e3:d3:df:38:20:14:e6:00:87:2f:cb:1c:70:
2a:76:48:3b:50:8c:9f:59:e6:89:33:24:eb:e6:4b:
1c:f5:55:ea:f7:0d:0d:d9:1f:c4:12:11:fa:55:2e:
4e:a1:32:9f:0b:09:f5:1a:8c:22:c7:06:5b:15:8e:
15:4d:a3:94:f5:35:90:4c:f6:8d:9a:67:2e:5c:5a:
78:ef:97:17:2f:e6:01:55:28:0b:3e:ee:2d:dd:8f:
af:d5:7a:3b:f0:ac:a0:61:5d:6a:58:55:a2:7f:07:
a2:80:2e:41:2a:d1:f2:01:0d:a9:f6:32:be:55:a1:
ee:61:b5:cc:e6:b3:1f:fa:1c:47:9d:37:3d:0f:81:
03:0e:59:29:b9:a1:c1:a2:d9:5a:0d:01:bb:6b:2d:
f5:49:55:45:8b:39:88:7e:0f:6d:67:5e:47:5a:33:
83:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:7C:E8:2A:A6:AF:FB:62:48:CF:0F:56:AA:02:7D:46:8D:B0:FA:EC
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/F3zoKqav-2JIzw9WqgJ9Ro2w-uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
0e:ae:c5:46:74:7e:89:53:f7:2e:46:c9:9c:a9:03:f2:4f:a2:
2b:38:35:dc:59:5f:f5:12:26:f4:dc:83:ab:03:c6:ab:ed:54:
5c:d6:cb:df:29:98:e4:bd:e4:14:87:12:a6:f8:9e:bf:fe:55:
30:a8:20:50:bb:72:e5:7b:ae:78:34:13:c9:d9:89:24:51:5a:
d8:91:ea:85:e4:8d:45:bf:08:e1:a2:6e:1e:19:3a:54:d4:27:
d0:c6:e1:70:71:97:3e:31:18:3b:0b:c7:15:45:29:32:6f:b5:
c7:de:00:b2:c7:78:34:58:4b:c2:84:06:78:c1:25:cf:14:88:
4a:02:5d:3f:49:79:3f:23:50:57:e0:82:19:9d:d6:a4:20:6e:
91:4b:6b:33:e5:86:af:74:49:56:36:26:59:62:c2:40:4c:31:
eb:50:e8:b5:f4:c4:72:db:83:75:41:e8:20:1a:97:e6:c2:df:
8d:f1:eb:9c:1d:b5:9c:5d:cc:62:e8:6c:ad:64:7e:51:a1:d1:
4d:38:7c:a3:9c:ef:ae:d2:32:1e:d5:f4:07:84:ed:ec:ea:be:
f4:1b:90:84:e4:7a:9c:a0:26:f0:bb:51:d6:12:a5:78:db:0e:
4f:e7:6e:c5:41:73:f7:b4:7f:f1:81:1b:65:91:38:1d:2b:bb:
4d:16:f7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:24:27 2025 by rpki-client