Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/IdGasVkG1M8RdifQSG-d2jdpYTg.roa
File: IdGasVkG1M8RdifQSG-d2jdpYTg.roa (raw, json)
Hash identifier: B02QN5e4/kx8r2Fo8BK2gmbveO0TUTPTmlMgqyqtwMU=
Subject key identifier: 21:D1:9A:B1:59:06:D4:CF:11:76:27:D0:48:6F:9D:DA:37:69:61:38
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F626C61A883E43B1929820FD36D3655
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/IdGasVkG1M8RdifQSG-d2jdpYTg.roa
Signing time: Tue 25 Jun 2024 12:32:48 +0000
ROA not before: Tue 25 Jun 2024 12:32:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397194
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:6c:61:a8:83:e4:3b:19:29:82:0f:d3:6d:36:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21d19ab15906d4cf117627d0486f9dda37696138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bf:3f:f5:7c:aa:c1:97:a8:1f:e3:09:a2:ff:
b2:f7:77:79:a9:9c:2e:3d:54:dc:fd:23:e3:68:54:
33:6e:c5:30:9f:99:d1:0b:45:bf:96:db:00:d5:84:
7f:29:ad:07:cc:99:94:db:2f:5b:95:81:19:18:91:
90:d2:6a:cc:e5:3b:e0:7c:e9:68:a9:fb:e6:0e:d4:
7a:2b:cd:da:27:ac:d6:7e:58:d1:4f:6c:38:a8:a3:
f5:84:ca:45:cf:76:3e:83:00:60:4e:a0:59:bf:0e:
f8:53:3a:d8:5c:59:91:ea:15:f2:f9:db:bd:fb:65:
3a:7e:76:09:5f:ff:2b:cc:8f:6e:f1:82:de:82:13:
4c:ea:6b:9e:17:0a:4e:c8:c4:c9:9c:5f:ed:89:d9:
50:40:16:f3:c0:b6:f2:73:8d:ae:83:55:cc:52:24:
f5:95:4a:d7:36:86:a4:24:e5:77:2d:d6:87:e0:ea:
b3:d9:a1:50:5e:0a:bb:95:89:7f:2d:ab:b5:1d:1f:
bb:94:4a:06:20:25:e8:a1:47:49:9d:33:1e:26:9d:
6d:0a:0c:23:94:ad:1f:92:9a:ef:e4:5b:8b:19:2b:
4a:83:3f:f4:ce:9a:47:f0:5e:36:2a:72:37:da:d5:
9e:b8:b7:b1:89:a6:47:d6:50:8e:d0:37:54:4d:11:
fb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D1:9A:B1:59:06:D4:CF:11:76:27:D0:48:6F:9D:DA:37:69:61:38
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/IdGasVkG1M8RdifQSG-d2jdpYTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
6f:51:c8:1e:96:a5:12:ac:2d:ed:bf:ba:0a:af:ca:f1:c1:ed:
ed:60:f2:d4:d5:7a:12:4a:79:4e:fa:ed:b6:8b:44:5e:0d:0b:
10:f7:31:eb:12:16:e3:86:d8:65:74:0f:3f:7e:df:d9:b3:0c:
05:bb:9b:e3:de:48:37:2a:81:de:1a:fb:e9:79:06:e2:19:6b:
56:c5:c7:d0:6e:74:1c:df:02:3d:fd:2d:bb:a6:47:2e:44:21:
14:71:c6:64:b7:34:2a:9f:d2:64:a4:3d:83:70:1f:34:f5:cb:
70:d4:0c:3b:2a:b8:1b:9c:9b:ec:81:df:1c:c5:32:20:b6:8a:
4b:30:1e:f4:69:7e:9b:2b:67:b2:5b:d8:86:20:22:8b:0a:88:
48:cb:6b:4a:68:0d:cd:f1:4d:95:95:d9:84:c4:38:e2:18:48:
c0:de:5d:7b:25:d9:e7:70:7d:4c:f0:23:9d:7a:ba:1f:28:ce:
e4:00:83:8e:c8:1e:a1:f9:b4:22:0b:e7:71:dd:11:a5:9c:4a:
87:34:e4:8e:59:54:09:a7:2c:d7:7c:67:ee:68:0c:a5:90:ba:
35:88:ec:81:45:07:73:7c:7c:c2:82:d8:df:e5:85:07:b6:2b:
e4:bd:0f:4f:d2:18:09:46:f7:92:56:80:42:c3:fc:aa:be:f1:
a0:fe:99:c7
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZBPYmxhqIPkOxkpgg/TbTZVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjQwNjI1MTIzMjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWQxOWFiMTU5MDZkNGNmMTE3NjI3ZDA0ODZmOWRkYTM3Njk2MTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzL8/9XyqwZeoH+MJov+y93d5qZwu
PVTc/SPjaFQzbsUwn5nRC0W/ltsA1YR/Ka0HzJmU2y9blYEZGJGQ0mrM5TvgfOlo
qfvmDtR6K83aJ6zWfljRT2w4qKP1hMpFz3Y+gwBgTqBZvw74UzrYXFmR6hXy+du9
+2U6fnYJX/8rzI9u8YLeghNM6mueFwpOyMTJnF/tidlQQBbzwLbyc42ug1XMUiT1
lUrXNoakJOV3LdaH4Oqz2aFQXgq7lYl/Lau1HR+7lEoGICXooUdJnTMeJp1tCgwj
lK0fkprv5FuLGStKgz/0zppH8F42KnI32tWeuLexiaZH1lCO0DdUTRH7MQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFCHRmrFZBtTPEXYn0Ehvndo3aWE4MB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvSWRHYXNWa0cxTThSZGlmUVNHLWQyamRwWVRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUBURPDHjAN
BgkqhkiG9w0BAQsFAAOCAQEAb1HIHpalEqwt7b+6Cq/K8cHt7WDy1NV6Ekp5Tvrt
totEXg0LEPcx6xIW44bYZXQPP37f2bMMBbub495INyqB3hr76XkG4hlrVsXH0G50
HN8CPf0tu6ZHLkQhFHHGZLc0Kp/SZKQ9g3AfNPXLcNQMOyq4G5yb7IHfHMUyILaK
SzAe9Gl+mytnslvYhiAiiwqISMtrSmgNzfFNlZXZhMQ44hhIwN5deyXZ53B9TPAj
nXq6HyjO5ACDjsgeofm0Igvncd0RpZxKhzTkjllUCacs13xn7mgMpZC6NYjsgUUH
c3x8woLY3+WFB7Yr5L0PT9IYCUb3klaAQsP8qr7xoP6Zxw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:13:23 2024 by rpki-client on console-fra.rpki-client.org