Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/It6wh900rIZ61FEo3e4BVgVQ8pA.roa
File: It6wh900rIZ61FEo3e4BVgVQ8pA.roa (raw, json)
Hash identifier: NCEDy63i69SDcFbQ4388qR0F8h25vIJeeZinl8CnPxw=
Subject key identifier: 22:DE:B0:87:DD:34:AC:86:7A:D4:51:28:DD:EE:01:56:05:50:F2:90
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBE01BC0CB3C1C5E6F26E41680D8B3
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/It6wh900rIZ61FEo3e4BVgVQ8pA.roa
Signing time: Wed 01 Jan 2025 17:48:39 +0000
ROA not before: Wed 01 Jan 2025 17:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397203
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:e0:1b:c0:cb:3c:1c:5e:6f:26:e4:16:80:d8:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22deb087dd34ac867ad45128ddee01560550f290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:70:8a:4e:7a:60:8d:07:4e:e5:18:90:31:44:
05:59:d7:d6:1b:2d:b7:85:12:1c:e8:bc:99:26:e7:
64:27:90:7b:81:af:27:f0:ca:51:49:35:be:f3:a2:
90:f2:46:88:e5:53:21:d1:86:09:20:a1:f9:2b:76:
54:d2:54:a9:c3:32:83:c3:5c:4a:05:29:5d:27:85:
ec:2a:e4:92:25:01:81:e3:34:02:0c:ca:a5:f6:9b:
e8:e4:c0:b0:50:c1:e0:da:77:93:61:b1:d0:a7:19:
ff:a0:30:a8:dd:fc:08:ca:46:7a:d9:4c:74:7e:d3:
1a:5e:fa:14:0d:cc:47:6b:a3:5a:c6:ec:79:19:16:
ae:0b:5c:52:28:b8:76:46:41:3b:8c:b6:ef:91:3b:
be:70:ac:10:be:a7:3b:91:bf:42:6e:97:a8:b6:e6:
02:63:8f:3b:e5:d1:73:18:f9:0d:4e:17:e7:1c:fb:
58:a4:ed:a9:0b:4f:86:ef:46:ac:8a:c6:0f:8c:c7:
09:bd:85:4e:68:ad:d5:69:5c:23:e6:d0:f7:96:66:
4d:99:e2:9f:74:ef:1b:8b:d2:72:60:66:a7:11:ef:
eb:d5:e4:c0:f2:bf:68:fe:87:84:ba:95:bc:2e:97:
a7:1c:3c:a3:0c:7e:8c:67:83:8d:ce:54:cb:20:93:
5b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DE:B0:87:DD:34:AC:86:7A:D4:51:28:DD:EE:01:56:05:50:F2:90
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/It6wh900rIZ61FEo3e4BVgVQ8pA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
95:1d:95:26:dc:f3:fc:d0:36:3b:12:14:95:12:8a:4a:a0:bc:
ad:68:99:02:b1:c2:1d:18:0f:4b:f3:d3:03:be:0a:2f:ed:fc:
3e:08:b2:e4:4f:36:64:f8:ce:97:b7:a5:c6:76:c3:7d:af:e2:
64:fe:00:af:90:3c:6c:8d:c8:ee:cb:3c:cc:5f:8c:7a:cd:ed:
8f:23:92:de:ce:14:84:c5:53:8d:52:3e:79:5f:22:d2:fd:36:
f1:f4:e9:ac:cb:25:f7:88:64:ea:4a:62:57:c2:83:82:ec:be:
b0:2a:69:0e:1a:34:15:a4:52:bc:f0:3f:d2:a0:95:4a:a2:1e:
0d:7b:16:bc:e9:5c:69:c4:63:69:de:43:69:55:80:fa:32:54:
a6:ea:e1:4c:29:cf:ed:f4:c0:31:5d:db:7a:ef:5c:c2:2c:fc:
f3:c0:a8:63:c9:94:66:8f:32:14:b2:1b:ac:e4:57:55:13:07:
42:9d:10:d6:8c:1b:5c:5b:12:0e:c6:e9:fb:3e:31:d6:19:a3:
6c:92:01:78:e1:99:4c:eb:15:76:0c:1a:12:8e:c3:24:04:43:
e6:a8:ae:f2:8a:30:7f:6b:c5:98:3d:59:cc:91:d6:e3:b6:a9:
ad:44:8d:5e:3a:21:5f:96:6e:90:94:93:40:1e:be:ef:52:6e:
4f:68:12:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:56 2025 by rpki-client