Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/HhHvSeDyj4yh-pmJP7qJNw2nXw0.roa
File: HhHvSeDyj4yh-pmJP7qJNw2nXw0.roa (raw, json)
Hash identifier: twLuWSIVB2OSYtiopNIfWwgwGsf7PbrKjWjZl9BPj8c=
Subject key identifier: 1E:11:EF:49:E0:F2:8F:8C:A1:FA:99:89:3F:BA:89:37:0D:A7:5F:0D
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBC2158C0764020E5EE35092CE1E50
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/HhHvSeDyj4yh-pmJP7qJNw2nXw0.roa
Signing time: Wed 01 Jan 2025 17:48:32 +0000
ROA not before: Wed 01 Jan 2025 17:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396564
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:c2:15:8c:07:64:02:0e:5e:e3:50:92:ce:1e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e11ef49e0f28f8ca1fa99893fba89370da75f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:55:27:9b:52:91:bc:77:cf:c0:4c:9b:82:ad:
3e:c4:89:c8:47:56:a5:81:71:8e:2e:aa:5d:bc:e1:
fe:8f:4c:e1:ad:6f:d8:94:a9:08:5b:9e:78:d9:0d:
54:0a:64:37:dc:42:d5:f0:fe:20:8b:64:4b:2e:db:
81:cd:a6:0b:54:a4:e6:4d:d2:ce:91:d2:91:ba:30:
6a:55:2e:fe:8c:b0:e8:32:52:af:d4:80:e9:6a:41:
f5:9c:c1:bd:f6:e3:cf:db:15:d8:51:27:23:66:0c:
3f:d7:76:02:6f:0e:ca:45:f6:15:ca:e0:12:f3:fb:
f6:0a:c8:4d:c4:0a:2c:d4:bd:df:fd:ad:9a:5e:45:
32:a3:f0:9b:2d:16:d8:28:10:99:61:fa:68:5f:e6:
86:e1:e6:8c:4e:c7:ee:8d:aa:16:38:f8:44:fc:65:
d8:6e:3d:51:b8:95:13:b3:32:ff:31:b0:89:e7:44:
8a:36:68:6a:90:78:5a:8a:19:06:20:a5:cb:2a:c3:
24:6d:4f:8c:de:d4:96:87:66:6b:fe:9d:e8:fb:8a:
20:99:cb:17:1e:e9:4a:42:f4:66:7e:2a:0e:f4:84:
40:87:c4:4d:20:d0:7d:fc:4b:73:d9:bf:2f:c5:9c:
c3:6d:1e:64:8b:b7:c9:6b:fe:18:38:c9:d8:cd:9e:
1f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:11:EF:49:E0:F2:8F:8C:A1:FA:99:89:3F:BA:89:37:0D:A7:5F:0D
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/HhHvSeDyj4yh-pmJP7qJNw2nXw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
bd:6e:9e:2b:6f:19:b6:d1:2f:01:5e:65:d5:12:2c:bb:53:ec:
a2:48:a5:52:11:30:73:22:72:ed:ed:e3:c4:98:6b:e8:3b:f8:
99:7f:16:dd:c9:cd:3e:dd:ed:8a:ae:a8:90:78:c5:57:f8:ac:
9c:63:c4:87:41:5e:1d:37:47:4a:fa:31:25:5b:82:7d:2e:5f:
1a:33:7e:bb:db:e1:68:25:37:f2:95:59:4b:66:6a:01:35:b8:
bf:60:35:b2:c8:5e:35:43:74:b4:22:d9:31:52:82:fa:c1:d8:
99:b1:69:d8:f6:3f:48:53:bf:bf:7a:a1:76:d7:85:06:d6:2e:
70:8f:75:e7:bc:6c:af:63:61:ea:d8:82:7c:31:96:3a:90:04:
9a:03:2b:60:71:96:c8:d5:2c:e1:b9:74:7c:95:a3:f6:8b:27:
c6:d6:86:42:99:cd:69:d7:a1:39:e8:c7:2b:5d:88:c1:4d:6b:
39:19:0d:d5:ac:dd:bc:1f:80:6f:c3:a3:c0:5a:8e:52:8b:77:
70:a5:ba:5c:19:1a:e7:01:6a:a0:60:43:ca:b7:0a:53:32:1a:
93:8b:14:84:0b:91:28:f3:6e:f7:53:7c:06:55:82:64:42:5f:
72:88:fa:c6:46:0e:bd:e2:bc:7d:6e:6d:b2:3f:86:63:5f:05:
20:96:92:26
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQi+8IVjAdkAg5e41CSzh5QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjUwMTAxMTc0ODMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTExZWY0OWUwZjI4ZjhjYTFmYTk5ODkzZmJhODkzNzBkYTc1ZjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFUnm1KRvHfPwEybgq0+xInIR1al
gXGOLqpdvOH+j0zhrW/YlKkIW5542Q1UCmQ33ELV8P4gi2RLLtuBzaYLVKTmTdLO
kdKRujBqVS7+jLDoMlKv1IDpakH1nMG99uPP2xXYUScjZgw/13YCbw7KRfYVyuAS
8/v2CshNxAos1L3f/a2aXkUyo/CbLRbYKBCZYfpoX+aG4eaMTsfujaoWOPhE/GXY
bj1RuJUTszL/MbCJ50SKNmhqkHhaihkGIKXLKsMkbU+M3tSWh2Zr/p3o+4ogmcsX
HulKQvRmfioO9IRAh8RNINB9/Etz2b8vxZzDbR5ki7fJa/4YOMnYzZ4f0QIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFB4R70ng8o+MofqZiT+6iTcNp18NMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvSGhIdlNlRHlqNHloLXBtSlA3cUpOdzJuWHcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF
ALlkADUwDQYJKoZIhvcNAQELBQADggEBAL1unitvGbbRLwFeZdUSLLtT7KJIpVIR
MHMicu3t48SYa+g7+Jl/Ft3JzT7d7YquqJB4xVf4rJxjxIdBXh03R0r6MSVbgn0u
Xxozfrvb4WglN/KVWUtmagE1uL9gNbLIXjVDdLQi2TFSgvrB2Jmxadj2P0hTv796
oXbXhQbWLnCPdee8bK9jYerYgnwxljqQBJoDK2BxlsjVLOG5dHyVo/aLJ8bWhkKZ
zWnXoTnoxytdiMFNazkZDdWs3bwfgG/Do8BajlKLd3ClulwZGucBaqBgQ8q3ClMy
GpOLFIQLkSjzbvdTfAZVgmRCX3KI+sZGDr3ivH1ubbI/hmNfBSCWkiY=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:46 2025 by rpki-client