Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/FdyfJTzgAjAc44SfWJuEFI3KoRY.roa
File: FdyfJTzgAjAc44SfWJuEFI3KoRY.roa (raw, json)
Hash identifier: aD4AQrqcInYd2vASUafQqtPVGK7F/uFbQ21SPsgn92A=
Subject key identifier: 15:DC:9F:25:3C:E0:02:30:1C:E3:84:9F:58:9B:84:14:8D:CA:A1:16
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F6234F801DBDE51CA562923A65CFAF0
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/FdyfJTzgAjAc44SfWJuEFI3KoRY.roa
Signing time: Tue 25 Jun 2024 12:32:34 +0000
ROA not before: Tue 25 Jun 2024 12:32:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20172
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:34:f8:01:db:de:51:ca:56:29:23:a6:5c:fa:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15dc9f253ce002301ce3849f589b84148dcaa116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:74:3b:58:8b:0a:ec:47:4b:5c:ae:b2:ce:8e:
fe:c4:9e:af:d2:f5:b9:84:ac:89:34:0d:b5:d2:eb:
a2:bd:9f:62:d6:ce:28:85:db:e7:57:c3:af:86:c7:
ba:17:72:42:7c:c5:05:32:0b:68:69:e0:57:4d:7e:
2d:32:59:31:f7:b5:42:ab:81:02:39:f4:b9:a7:e7:
eb:07:4d:a3:77:a7:9d:c6:8e:71:14:c4:3d:6f:7f:
ce:55:60:7b:f8:0d:e6:d6:55:a7:a9:6f:75:49:d0:
16:26:2e:8a:73:95:63:0e:1a:88:5f:5b:72:bf:83:
d1:21:07:42:9b:e0:be:76:4f:e0:04:39:c9:e2:78:
ac:b6:ff:29:34:b2:0d:a2:37:45:c3:c1:f0:21:1a:
fc:22:8d:4f:5a:73:5a:19:39:92:c4:87:84:58:36:
05:12:f7:46:54:84:76:28:b5:53:6c:72:6b:67:80:
27:23:7c:eb:a4:52:fa:64:da:cd:66:40:79:18:3b:
b1:e6:95:d7:44:0a:7b:a0:ba:b0:71:3a:00:78:f6:
12:45:82:a0:29:9a:fd:ef:ed:a2:6b:46:6c:50:18:
81:76:88:2f:4c:ad:e6:fa:0d:78:06:f3:fd:4e:5a:
ff:3b:ae:15:83:c1:62:97:78:af:4d:22:b8:c3:fe:
9a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DC:9F:25:3C:E0:02:30:1C:E3:84:9F:58:9B:84:14:8D:CA:A1:16
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/FdyfJTzgAjAc44SfWJuEFI3KoRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
a7:b6:4d:f8:0e:80:b8:60:c2:b9:29:0e:dd:8c:c4:f8:9c:c7:
96:9f:b7:ac:c8:d4:b0:87:7e:e2:68:c4:62:21:1f:a9:40:7f:
57:ac:fc:19:53:d5:f1:e4:16:da:8d:3e:2c:94:cb:81:8f:c6:
e9:1e:de:29:db:60:82:0a:c5:53:36:25:43:e8:df:bc:ee:a8:
d5:dd:de:72:f7:e6:34:23:e3:5b:58:c4:e3:17:06:e6:48:19:
1f:99:35:7a:8f:70:7f:23:9e:e3:51:41:37:c4:97:09:71:60:
e0:33:77:b2:bc:fb:ab:ef:c5:a1:4f:fc:3e:bb:8f:13:fd:8f:
7e:32:11:83:27:32:c4:e6:ba:6e:cf:58:3d:70:fb:63:c2:47:
82:ba:a2:fa:d7:83:24:7a:b3:f8:de:1d:f8:7c:99:55:97:b7:
b7:fe:5a:b8:73:06:7f:ca:26:1d:70:85:2a:1f:29:f0:60:4b:
d8:e6:81:8b:de:76:87:15:dd:08:c2:6b:02:f0:ab:4e:ca:59:
79:61:4d:34:34:5c:7d:d6:66:28:18:b4:03:da:2b:13:f3:60:
18:09:72:8f:58:55:02:6a:28:c0:c8:5b:f8:3c:5b:24:b3:90:
53:64:66:48:80:5c:f1:e0:3a:79:d1:0b:56:e4:60:18:77:ba:
b9:cd:b1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:47:18 2024 by rpki-client on console-ams.rpki-client.org