Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/GQSmoOfI2geUi8t8tvUTRa4vu6g.roa
File: GQSmoOfI2geUi8t8tvUTRa4vu6g.roa (raw, json)
Hash identifier: yaYQjbBSR57AdbsTFKZ2hGDMeWs7VVPK6kDBVKn1UfE=
Subject key identifier: 19:04:A6:A0:E7:C8:DA:07:94:8B:CB:7C:B6:F5:13:45:AE:2F:BB:A8
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F626DA31E638185B631FE66478DF5D0
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/GQSmoOfI2geUi8t8tvUTRa4vu6g.roa
Signing time: Tue 25 Jun 2024 12:32:48 +0000
ROA not before: Tue 25 Jun 2024 12:32:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397196
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:6d:a3:1e:63:81:85:b6:31:fe:66:47:8d:f5:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1904a6a0e7c8da07948bcb7cb6f51345ae2fbba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f0:c9:94:39:e7:53:4b:02:dc:cb:20:c8:d6:
92:16:28:70:82:d8:cd:f2:6f:1c:09:c9:06:c3:84:
80:34:cd:b7:1a:e2:f0:1b:95:e2:77:39:9f:98:3e:
13:b9:c2:00:1d:89:9c:70:f1:c6:dc:9b:21:42:db:
7d:25:b9:1a:95:01:65:2d:0a:34:08:25:9b:ad:ea:
a7:cc:76:35:c2:0a:b7:a3:05:2c:4e:8a:15:3a:9c:
a4:1f:26:50:64:bf:56:45:48:36:35:26:e7:9a:51:
e9:c6:c1:19:05:c1:51:6d:65:57:a9:6f:c1:03:cd:
57:72:4a:dc:8e:3f:36:79:c5:43:5d:51:7a:fd:0f:
60:f5:a1:88:52:f0:e5:86:97:50:88:13:6c:7d:13:
44:cc:b8:e1:c3:17:f2:ac:ea:f9:fc:df:4f:25:cd:
6c:2d:47:bb:97:33:c8:bd:59:51:2a:ce:7a:ee:ca:
95:09:4d:3c:22:46:f7:34:fe:c1:17:b7:a8:b7:be:
07:c5:39:c9:73:4b:5c:e3:b5:2e:e0:2d:da:9a:a5:
c2:05:79:90:4b:8d:ea:38:0c:a5:47:09:64:6f:6e:
c6:10:20:cc:b0:7d:37:95:f9:3f:f3:f1:90:ea:1e:
43:78:69:59:a7:8f:a7:f4:49:1f:63:a2:5f:e8:ee:
d3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:04:A6:A0:E7:C8:DA:07:94:8B:CB:7C:B6:F5:13:45:AE:2F:BB:A8
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/GQSmoOfI2geUi8t8tvUTRa4vu6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
c5:8d:96:59:fc:ae:f6:e3:40:50:7c:99:7d:b7:ce:bf:7b:cc:
0b:88:d5:50:d4:f3:73:8f:f8:ea:86:1d:b3:c4:ca:00:82:3a:
c4:96:bf:6f:73:14:52:e0:70:67:95:25:b2:f2:e3:ed:17:08:
e0:9e:fb:20:af:90:01:95:04:b6:ca:13:fc:24:49:6a:02:9e:
89:e9:5a:ce:e3:ac:aa:a7:08:2d:81:95:bd:7a:94:30:05:00:
f1:76:c3:71:dc:ac:ca:c6:37:14:11:85:25:a1:a8:d9:30:f9:
cd:e2:9a:6e:62:72:c8:f2:42:20:99:4d:c1:ff:f4:8a:19:9a:
ad:b4:2c:e9:f1:d9:58:95:27:d8:fb:2b:68:a6:a9:f3:9d:3a:
48:22:c7:cf:ac:e1:ed:1e:73:7a:1a:99:6e:0b:f6:f3:00:54:
f7:97:95:4a:2e:89:e8:50:04:ee:a4:92:1c:75:fe:3a:d5:99:
df:10:72:c8:25:aa:62:12:b4:5b:2f:af:f2:8f:85:33:5d:bb:
e4:f0:4c:e5:13:1b:ec:7e:14:70:eb:b6:77:a6:8b:81:a8:e3:
21:38:c6:df:a7:5d:2b:e3:bc:d9:55:b8:08:67:dd:1c:ad:a3:
8c:b0:6c:d4:15:b8:00:aa:80:10:c7:6b:d3:25:4a:dd:c7:8b:
99:81:f1:67
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZBPYm2jHmOBhbYx/mZHjfXQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjQwNjI1MTIzMjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTA0YTZhMGU3YzhkYTA3OTQ4YmNiN2NiNmY1MTM0NWFlMmZiYmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvDJlDnnU0sC3MsgyNaSFihwgtjN
8m8cCckGw4SANM23GuLwG5XidzmfmD4TucIAHYmccPHG3JshQtt9JbkalQFlLQo0
CCWbreqnzHY1wgq3owUsTooVOpykHyZQZL9WRUg2NSbnmlHpxsEZBcFRbWVXqW/B
A81Xckrcjj82ecVDXVF6/Q9g9aGIUvDlhpdQiBNsfRNEzLjhwxfyrOr5/N9PJc1s
LUe7lzPIvVlRKs567sqVCU08Ikb3NP7BF7eot74HxTnJc0tc47Uu4C3amqXCBXmQ
S43qOAylRwlkb27GECDMsH03lfk/8/GQ6h5DeGlZp4+n9EkfY6Jf6O7T+QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFBkEpqDnyNoHlIvLfLb1E0WuL7uoMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvR1FTbW9PZkkyZ2VVaTh0OHR2VVRSYTR2dTZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUBURPDHjAN
BgkqhkiG9w0BAQsFAAOCAQEAxY2WWfyu9uNAUHyZfbfOv3vMC4jVUNTzc4/46oYd
s8TKAII6xJa/b3MUUuBwZ5UlsvLj7RcI4J77IK+QAZUEtsoT/CRJagKeielazuOs
qqcILYGVvXqUMAUA8XbDcdysysY3FBGFJaGo2TD5zeKabmJyyPJCIJlNwf/0ihma
rbQs6fHZWJUn2PsraKap8506SCLHz6zh7R5zehqZbgv28wBU95eVSi6J6FAE7qSS
HHX+OtWZ3xByyCWqYhK0Wy+v8o+FM1275PBM5RMb7H4UcOu2d6aLgajjITjG36dd
K+O82VW4CGfdHK2jjLBs1BW4AKqAEMdr0yVK3ceLmYHxZw==
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:34:19 2024 by rpki-client on console-fra.rpki-client.org