Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/G2kq-VuNXijdSkrdRaaz46bGjN8.roa
File: G2kq-VuNXijdSkrdRaaz46bGjN8.roa (raw, json)
Hash identifier: mmDFo4BoJljTcEDeU9AM6qpiwlmA6e+alWJ2D3w4Pl4=
Subject key identifier: 1B:69:2A:F9:5B:8D:5E:28:DD:4A:4A:DD:45:A6:B3:E3:A6:C6:8C:DF
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F6253841EE2F43A14F12AF8952E9F4B
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/G2kq-VuNXijdSkrdRaaz46bGjN8.roa
Signing time: Tue 25 Jun 2024 12:32:42 +0000
ROA not before: Tue 25 Jun 2024 12:32:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396574
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:53:84:1e:e2:f4:3a:14:f1:2a:f8:95:2e:9f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b692af95b8d5e28dd4a4add45a6b3e3a6c68cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:9d:5a:82:f0:95:1d:18:ea:42:fd:55:e3:45:
11:b6:30:7f:0a:ff:db:eb:36:be:0c:92:7f:26:ce:
e6:8c:6e:c7:7a:99:4e:fc:57:97:8f:99:07:38:de:
56:1d:90:91:3c:50:20:ec:98:23:b5:af:65:68:0d:
5c:00:78:5e:e6:f0:56:bb:b6:76:5b:22:4a:5c:1a:
8b:bf:9f:bd:e5:55:b0:6c:02:40:45:8f:b9:a6:a5:
4c:11:03:71:63:ef:b6:ec:51:cf:d0:aa:38:a1:8d:
61:8b:b2:16:f8:bb:fd:c6:72:9d:66:e8:12:34:72:
65:f3:9d:bb:94:52:13:db:37:dd:74:c3:4e:ed:bd:
1a:ab:a9:4e:88:31:84:03:44:ef:60:a8:63:00:e9:
ae:d9:b8:41:d7:d2:22:3d:08:44:52:12:a2:69:9f:
82:02:ec:fb:1c:f2:20:b7:32:fb:4e:07:7c:dd:68:
f9:d1:69:cc:5e:83:70:d7:4c:dc:ee:75:e4:45:60:
f5:d7:d4:de:20:de:49:18:b9:7d:f1:80:76:29:5e:
32:08:19:7b:f5:8a:f2:be:a4:e7:da:2d:e3:f1:af:
1b:48:e0:0c:45:04:d1:fc:82:15:65:e3:31:8b:77:
c5:f7:c7:ec:73:ff:0f:8d:37:10:33:08:24:ac:fa:
a9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:69:2A:F9:5B:8D:5E:28:DD:4A:4A:DD:45:A6:B3:E3:A6:C6:8C:DF
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/G2kq-VuNXijdSkrdRaaz46bGjN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
77:09:a1:e5:1e:4d:ba:00:78:d0:3c:a6:83:77:5e:40:b7:3b:
e8:ef:4d:e1:d5:fd:89:28:cc:36:ae:a3:71:cc:1d:b5:73:c7:
c2:ef:95:98:c8:b3:9a:e2:8c:d6:c9:43:14:e0:ac:d3:49:52:
bd:b8:04:dd:4b:7e:37:57:33:d3:fa:f5:fc:0a:f0:07:65:46:
e1:79:e8:63:d1:d7:c6:dc:31:59:f7:e8:fe:38:44:2a:86:f0:
b6:0f:ac:ea:31:fc:1d:7d:09:a4:fe:7a:de:db:1a:29:83:73:
a1:ad:cd:78:b6:24:c7:40:06:b2:8b:35:66:dd:5e:4b:73:78:
93:5f:15:95:a4:d4:ba:21:3b:8b:16:ab:b0:ba:7f:83:3c:e8:
be:e0:dd:c3:0a:ad:39:68:7a:fc:06:da:5b:90:62:c3:48:e9:
f8:57:ab:32:40:bc:63:99:94:19:3d:ca:17:57:22:00:81:e3:
14:75:e8:1a:be:8d:93:f6:53:68:aa:e5:23:df:cb:e7:3b:37:
05:e4:c3:03:38:91:f7:9b:88:f5:04:53:2a:cb:87:54:d3:50:
91:7d:ba:7a:65:44:3f:b3:a7:c0:a0:49:ff:47:d0:16:94:e1:
00:52:76:7e:26:54:71:cb:fe:1b:c6:98:5d:70:ba:55:73:79:
f6:f1:dd:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:13:23 2024 by rpki-client on console-fra.rpki-client.org