Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/GOAgkMga09zcVCmq5OBmUJe1xag.roa
File: GOAgkMga09zcVCmq5OBmUJe1xag.roa (raw, json)
Hash identifier: JOXz0hlvPrfIu1J+lj6d60sH8s1mludN/wfMmCRLIOc=
Subject key identifier: 18:E0:20:90:C8:1A:D3:DC:DC:54:29:AA:E4:E0:66:50:97:B5:C5:A8
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBBB6DC52B79A126A6494F673BE225
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/GOAgkMga09zcVCmq5OBmUJe1xag.roa
Signing time: Wed 01 Jan 2025 17:48:30 +0000
ROA not before: Wed 01 Jan 2025 17:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396550
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:bb:6d:c5:2b:79:a1:26:a6:49:4f:67:3b:e2:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=18e02090c81ad3dcdc5429aae4e0665097b5c5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:43:af:b9:0e:44:71:64:a3:d8:10:d2:c9:d2:
18:a8:f4:6c:51:16:d8:28:5d:8a:7d:ee:63:ea:a2:
bd:05:e1:bf:89:04:1b:ed:87:18:8d:e1:65:d3:2d:
f1:18:d7:c0:a3:c3:29:60:8e:97:f9:38:ec:22:98:
e6:47:39:a1:66:e7:0b:6d:4a:0b:9a:8d:43:98:6a:
fb:70:7f:c4:63:9c:02:4f:37:63:4b:1e:46:8d:58:
8f:49:23:70:a9:5d:cf:c3:10:c4:74:b6:61:8d:c8:
49:cb:c2:2f:15:39:21:a9:b9:c9:71:99:70:f5:4c:
7b:46:61:ea:d7:a2:7e:8b:80:89:f4:b4:33:c2:fa:
e9:19:c3:4b:c8:76:e5:d5:4a:e4:ea:6d:fd:58:46:
30:00:c9:60:de:0a:70:e5:6e:af:a6:7b:30:75:55:
91:46:98:64:5e:9b:82:48:c9:29:3b:84:eb:a4:2a:
ad:3e:cb:4a:22:b7:37:2c:d4:ce:93:81:cb:46:b5:
91:74:74:8f:0d:89:ab:d8:11:eb:43:8b:cf:d7:4f:
2a:dd:a9:a0:38:21:59:fa:7a:6e:ca:47:22:45:b9:
01:2e:22:c0:db:9e:df:fc:1d:40:fb:b4:20:5e:ce:
6c:60:c3:1c:f2:cf:45:bc:4a:de:b4:01:7c:21:2c:
6b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E0:20:90:C8:1A:D3:DC:DC:54:29:AA:E4:E0:66:50:97:B5:C5:A8
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/GOAgkMga09zcVCmq5OBmUJe1xag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
c4:07:12:0e:3b:68:b8:f3:1a:27:71:f0:99:df:04:5f:df:81:
41:cd:f8:44:e3:d6:6c:72:60:1b:d4:45:07:3b:a2:41:f2:fc:
d6:54:22:6a:2b:d0:b9:69:d2:f7:f6:b0:67:73:27:57:fa:55:
89:15:33:6a:41:e4:03:e9:7c:39:65:98:72:c4:fe:29:6f:97:
9e:c4:5c:65:87:15:23:ac:6c:26:f9:57:e1:5b:e9:03:1a:fc:
4f:7f:47:eb:d5:b6:d4:61:f8:50:00:ed:93:c8:5d:51:5f:ae:
0f:1d:4b:8b:6e:af:03:52:58:49:54:c6:a9:17:f5:63:47:a1:
c8:18:cb:57:dd:a2:63:eb:67:d6:4f:3b:a4:12:cc:5e:de:c6:
cb:06:ee:c0:31:4d:e2:b9:33:6f:ba:d5:dc:27:73:f1:9f:31:
ad:48:78:1b:ba:e6:ee:38:13:ee:8f:bd:8e:70:72:7e:b3:cf:
88:f3:f4:67:8d:d5:fd:a4:6a:8b:ea:73:cc:c9:24:88:87:20:
75:eb:3c:03:3d:51:24:71:9a:d1:59:b6:24:14:13:eb:ca:03:
55:36:42:5d:7b:4a:08:8d:64:cb:62:29:b5:3c:3d:cc:80:5a:
25:64:27:92:01:9f:7e:8b:7f:29:d5:0a:b0:24:9a:8c:ff:f4:
c0:95:e7:70
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQi+7ttxSt5oSamSU9nO+IlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjUwMTAxMTc0ODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGUwMjA5MGM4MWFkM2RjZGM1NDI5YWFlNGUwNjY1MDk3YjVjNWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9UOvuQ5EcWSj2BDSydIYqPRsURbY
KF2Kfe5j6qK9BeG/iQQb7YcYjeFl0y3xGNfAo8MpYI6X+TjsIpjmRzmhZucLbUoL
mo1DmGr7cH/EY5wCTzdjSx5GjViPSSNwqV3PwxDEdLZhjchJy8IvFTkhqbnJcZlw
9Ux7RmHq16J+i4CJ9LQzwvrpGcNLyHbl1Urk6m39WEYwAMlg3gpw5W6vpnswdVWR
RphkXpuCSMkpO4TrpCqtPstKIrc3LNTOk4HLRrWRdHSPDYmr2BHrQ4vP108q3amg
OCFZ+npuykciRbkBLiLA257f/B1A+7QgXs5sYMMc8s9FvEretAF8ISxrSQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFBjgIJDIGtPc3FQpquTgZlCXtcWoMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvR09BZ2tNZ2EwOXpjVkNtcTVPQm1VSmUxeGFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF
ALlkADUwDQYJKoZIhvcNAQELBQADggEBAMQHEg47aLjzGidx8JnfBF/fgUHN+ETj
1mxyYBvURQc7okHy/NZUImor0Llp0vf2sGdzJ1f6VYkVM2pB5APpfDllmHLE/ilv
l57EXGWHFSOsbCb5V+Fb6QMa/E9/R+vVttRh+FAA7ZPIXVFfrg8dS4turwNSWElU
xqkX9WNHocgYy1fdomPrZ9ZPO6QSzF7exssG7sAxTeK5M2+61dwnc/GfMa1IeBu6
5u44E+6PvY5wcn6zz4jz9GeN1f2kaovqc8zJJIiHIHXrPAM9USRxmtFZtiQUE+vK
A1U2Ql17SgiNZMtiKbU8PcyAWiVkJ5IBn36LfynVCrAkmoz/9MCV53A=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:52 2025 by rpki-client