Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/JaBAINz_y0Gi-NyMD7N7PGbPPro.roa
File: JaBAINz_y0Gi-NyMD7N7PGbPPro.roa (raw, json)
Hash identifier: EwLJn/oNvVbcJUFfFcRgFaLETLCGKbyId6KyXtpx8BY=
Subject key identifier: 25:A0:40:20:DC:FF:CB:41:A2:F8:DC:8C:0F:B3:7B:3C:66:CF:3E:BA
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F624D800A3319115AFD00DD036573B8
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/JaBAINz_y0Gi-NyMD7N7PGbPPro.roa
Signing time: Tue 25 Jun 2024 12:32:40 +0000
ROA not before: Tue 25 Jun 2024 12:32:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396561
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:4d:80:0a:33:19:11:5a:fd:00:dd:03:65:73:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25a04020dcffcb41a2f8dc8c0fb37b3c66cf3eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6f:d8:5b:bd:04:1d:39:25:60:e4:e1:30:75:
e8:af:59:52:9b:94:0e:60:b6:1b:cb:17:4b:c0:c5:
25:8e:1f:c6:09:85:f1:a1:38:50:98:ed:01:05:ea:
20:cc:01:d7:29:f8:e0:71:0a:35:1f:5b:7c:66:11:
72:06:23:b2:3e:96:e4:d7:5b:01:71:77:8b:5e:aa:
cf:9b:3a:3b:c2:30:ec:9a:83:a8:19:2c:60:d4:5f:
26:c2:bb:7f:4b:5b:6e:69:25:8d:08:c5:1d:53:62:
37:9a:82:16:ac:23:2b:98:57:da:bd:d9:a7:6b:6d:
26:f0:e3:8c:7f:a1:b0:93:50:e7:63:04:c3:59:3a:
56:a0:5c:34:a6:d9:e1:f1:c6:0b:02:ca:5b:cf:1e:
d5:78:4a:dc:9a:bc:e4:90:df:e1:29:b1:00:81:6c:
9b:5a:66:ff:74:19:b3:eb:6b:dd:75:16:b4:33:8c:
5f:a8:ad:e3:08:ac:9b:75:62:6f:84:90:b9:3a:be:
35:3f:96:39:93:2d:44:83:6f:56:8f:29:7a:3d:d2:
55:36:45:47:e0:97:8a:7a:63:70:71:df:a4:dd:54:
86:89:62:52:28:4a:dd:6b:c1:62:fd:4a:dc:74:07:
74:c0:15:a7:55:05:3f:46:88:2a:b7:5f:48:33:19:
a6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A0:40:20:DC:FF:CB:41:A2:F8:DC:8C:0F:B3:7B:3C:66:CF:3E:BA
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/JaBAINz_y0Gi-NyMD7N7PGbPPro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
6e:9b:be:54:3e:d5:a2:9f:73:68:e2:8b:06:d0:4d:7b:c7:1f:
d3:b1:fc:5e:19:b7:41:ba:35:08:a9:46:0b:d3:2a:a4:03:d2:
c9:85:3d:9f:02:f2:c6:d5:47:92:4f:66:dc:6f:64:24:15:25:
e1:db:29:83:21:9d:41:69:2f:28:d6:ec:0f:91:66:17:7a:07:
ad:19:f3:56:73:fa:a8:59:45:ee:92:b3:72:ab:8c:68:70:9b:
70:3c:e2:aa:fd:b1:8f:3a:a7:87:7c:63:2b:fc:97:d2:76:33:
87:b6:44:ae:42:4e:34:a1:11:45:f1:b7:ce:64:85:a6:df:a8:
42:ab:20:e2:f9:f0:c8:a7:f5:bf:ee:cd:b3:21:68:c6:62:c3:
d4:bc:ff:84:09:b0:34:e2:28:bf:3a:a1:31:a4:fc:cb:b4:75:
ea:63:ff:a9:2b:29:4a:e5:30:04:8e:d4:ee:87:8e:5c:c0:6e:
38:b5:d3:a4:08:dd:6b:f0:fb:e6:22:78:22:41:27:87:2f:45:
eb:fe:6f:98:1a:6e:cc:cc:0a:72:f3:9d:cf:48:e7:66:89:23:
98:cd:ea:c5:39:c7:fb:47:7c:61:e8:87:b1:e5:66:1f:7d:12:
ae:9b:f4:e8:e6:5f:2d:c2:e3:28:26:39:24:cf:27:9c:8c:15:
8d:4c:97:48
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZBPYk2ACjMZEVr9AN0DZXO4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjQwNjI1MTIzMjQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWEwNDAyMGRjZmZjYjQxYTJmOGRjOGMwZmIzN2IzYzY2Y2YzZWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm/YW70EHTklYOThMHXor1lSm5QO
YLYbyxdLwMUljh/GCYXxoThQmO0BBeogzAHXKfjgcQo1H1t8ZhFyBiOyPpbk11sB
cXeLXqrPmzo7wjDsmoOoGSxg1F8mwrt/S1tuaSWNCMUdU2I3moIWrCMrmFfavdmn
a20m8OOMf6Gwk1DnYwTDWTpWoFw0ptnh8cYLAspbzx7VeErcmrzkkN/hKbEAgWyb
Wmb/dBmz62vddRa0M4xfqK3jCKybdWJvhJC5Or41P5Y5ky1Eg29Wjyl6PdJVNkVH
4JeKemNwcd+k3VSGiWJSKErda8Fi/UrcdAd0wBWnVQU/Rogqt19IMxmmUwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFCWgQCDc/8tBovjcjA+zezxmzz66MB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvSmFCQUlOel95MEdpLU55TUQ3TjdQR2JQUHJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUBURPDHjAN
BgkqhkiG9w0BAQsFAAOCAQEAbpu+VD7Vop9zaOKLBtBNe8cf07H8Xhm3Qbo1CKlG
C9MqpAPSyYU9nwLyxtVHkk9m3G9kJBUl4dspgyGdQWkvKNbsD5FmF3oHrRnzVnP6
qFlF7pKzcquMaHCbcDziqv2xjzqnh3xjK/yX0nYzh7ZErkJONKERRfG3zmSFpt+o
Qqsg4vnwyKf1v+7NsyFoxmLD1Lz/hAmwNOIovzqhMaT8y7R16mP/qSspSuUwBI7U
7oeOXMBuOLXTpAjda/D75iJ4IkEnhy9F6/5vmBpuzMwKcvOdz0jnZokjmM3qxTnH
+0d8YeiHseVmH30Srpv06OZfLcLjKCY5JM8nnIwVjUyXSA==
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:34:19 2024 by rpki-client on console-fra.rpki-client.org