Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/HgZF-62HH2cbnfgSHrTcJXWU5_A.roa
File: HgZF-62HH2cbnfgSHrTcJXWU5_A.roa (raw, json)
Hash identifier: pWp1CbJhYcZOuh8cjLg/k3bgSUDo5wYNFWvJ5c48ZqQ=
Subject key identifier: 1E:06:45:FB:AD:87:1F:67:1B:9D:F8:12:1E:B4:DC:25:75:94:E7:F0
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBD8531479172588CA62E66005EF98
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/HgZF-62HH2cbnfgSHrTcJXWU5_A.roa
Signing time: Wed 01 Jan 2025 17:48:37 +0000
ROA not before: Wed 01 Jan 2025 17:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396614
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:d8:53:14:79:17:25:88:ca:62:e6:60:05:ef:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e0645fbad871f671b9df8121eb4dc257594e7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:06:7e:19:22:51:bd:07:e7:4c:e4:5f:f1:0a:
b3:c0:e8:96:71:b0:43:56:99:db:bd:2c:ad:be:46:
0b:e4:d7:a7:36:7c:13:fd:bf:d6:59:54:88:32:21:
65:15:7c:3c:78:cf:f3:c4:3b:54:22:9c:cf:df:d6:
96:ff:6f:44:c9:6b:0e:fd:7d:35:36:f5:ae:f9:b0:
43:92:3b:d5:d1:f2:dc:ea:40:96:bd:df:57:74:04:
b5:c5:82:00:90:c9:c7:a9:95:9c:14:43:27:3b:9c:
d1:b8:f5:a3:83:fb:56:de:ac:42:dd:09:9a:a1:11:
2e:59:93:f4:97:7b:dc:8c:88:d5:14:79:d7:a3:0a:
47:c4:0a:c8:6b:81:ac:af:7c:8b:3f:c9:cc:31:8c:
95:0b:a8:d1:d2:bf:c2:88:a6:9e:6b:b3:d3:d8:79:
00:05:da:5e:d7:52:1b:71:26:00:60:60:c5:bd:56:
20:1a:90:6e:61:b5:46:f1:8d:6a:9b:88:76:a6:5e:
43:d9:4f:c5:86:1a:b8:68:a7:f5:ed:ee:f4:d9:c3:
60:45:94:ce:74:e1:8a:6d:cb:1f:35:48:86:3b:eb:
19:d3:47:ca:92:83:8a:86:ac:9b:46:4b:c4:a2:84:
12:85:86:02:46:bd:1b:88:a9:67:92:3f:3d:c5:2c:
e5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:06:45:FB:AD:87:1F:67:1B:9D:F8:12:1E:B4:DC:25:75:94:E7:F0
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/HgZF-62HH2cbnfgSHrTcJXWU5_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
55:41:7a:40:5f:8d:5b:e7:fe:cc:94:24:a5:4d:9d:a4:51:3c:
37:a6:03:77:1b:ff:a5:34:02:52:fb:90:a3:0c:15:cc:a4:0b:
fb:2a:a2:0f:1b:97:5c:98:9a:99:17:72:3c:55:88:4d:6d:fc:
ad:7d:f9:cf:ae:8d:13:f7:ec:b8:2e:8d:9b:83:ce:35:bc:76:
5a:06:d0:c4:54:1f:02:65:fe:18:fc:0e:70:f9:e4:45:c8:87:
bf:24:c9:e1:5e:35:48:ad:41:e1:48:33:14:e5:65:c0:a7:02:
0a:ec:57:43:55:b5:ec:8d:4b:52:12:f0:da:a8:57:72:23:71:
d7:86:9e:32:da:21:ce:77:cd:5c:4f:61:16:88:aa:af:7b:59:
49:75:c1:af:f2:44:45:06:da:d5:b6:4a:d3:da:94:9e:4d:89:
d4:53:51:95:e5:1e:d1:b9:33:5d:39:c2:56:1d:e0:8d:22:7d:
c1:43:00:e9:94:b0:89:55:c0:f9:28:a2:16:51:33:76:4a:bc:
4e:2f:66:3b:be:fb:67:b3:2d:50:0f:cf:eb:57:94:36:78:05:
25:48:f8:1d:b9:a7:81:08:29:ed:52:3b:e8:de:bc:35:55:8a:
fe:c6:50:6c:25:7b:cf:63:5c:f0:7a:77:89:1b:9f:36:61:2d:
73:7f:fe:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:30 2025 by rpki-client