Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/KJtEXntrfb98R2XAa8FOMcvPHGw.roa
File: KJtEXntrfb98R2XAa8FOMcvPHGw.roa (raw, json)
Hash identifier: JrAkyHqAyZyO/d4k1Q84MQss/3c1ziRJOQg5H19s74k=
Subject key identifier: 28:9B:44:5E:7B:6B:7D:BF:7C:47:65:C0:6B:C1:4E:31:CB:CF:1C:6C
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBE3A945A1950D34691A5D7B8037E3
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/KJtEXntrfb98R2XAa8FOMcvPHGw.roa
Signing time: Wed 01 Jan 2025 17:48:40 +0000
ROA not before: Wed 01 Jan 2025 17:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397210
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:e3:a9:45:a1:95:0d:34:69:1a:5d:7b:80:37:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=289b445e7b6b7dbf7c4765c06bc14e31cbcf1c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b1:7e:11:37:58:2c:15:c3:87:8b:d2:fc:0b:
4f:dc:4e:4a:36:ce:48:41:e3:b9:d6:3a:89:91:c1:
df:2c:76:f8:b7:6a:4f:e9:81:d9:e3:93:0e:a3:d2:
8d:5e:e9:84:22:fe:01:4d:7f:93:29:e7:bc:78:fd:
e9:92:2e:e0:a9:30:3b:bd:39:7c:6b:d6:50:f0:cc:
9f:48:bd:bf:d2:3a:21:07:18:72:80:dc:51:3f:a3:
80:15:5a:e6:68:fa:41:eb:76:0e:a1:25:3a:e9:5a:
b8:a6:16:ee:5f:df:f8:c3:ee:d2:3a:21:88:1f:4f:
b2:75:0b:0f:e7:35:e6:c0:52:bd:e0:f8:46:5b:f6:
b7:42:0b:24:83:2c:96:57:85:af:4d:4f:73:57:e9:
0d:0b:a8:c0:88:28:e6:26:fe:0e:e1:90:1b:50:b3:
45:37:89:95:f3:2f:d7:d4:b3:0a:9a:d3:2e:4b:e8:
2e:14:f6:ac:f8:5a:c7:2e:5e:10:dc:c7:a8:cc:0b:
54:55:85:4e:db:2d:d5:e2:00:a3:18:b9:38:1f:84:
fb:c0:cd:93:cc:07:ca:d8:fd:2b:e2:2e:a0:ae:dc:
22:94:d0:48:e3:ed:97:9e:07:77:be:8e:f9:4b:ec:
b1:53:d6:c0:c0:7d:0c:37:c5:26:b9:33:78:bc:50:
72:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:9B:44:5E:7B:6B:7D:BF:7C:47:65:C0:6B:C1:4E:31:CB:CF:1C:6C
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/KJtEXntrfb98R2XAa8FOMcvPHGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
4c:e4:2e:dc:da:ec:45:72:53:0d:4d:c2:5b:f1:7f:e3:28:f8:
b3:02:e1:ae:c3:01:ca:fc:ab:25:29:47:4c:bf:e3:ee:a7:e0:
28:fd:49:35:31:09:d4:e7:8b:c2:42:fb:7b:f7:7e:8a:b3:17:
24:20:af:5f:d7:9d:7a:74:f4:e6:f8:62:79:a9:d8:8c:e1:36:
ac:8f:8d:32:54:6e:8e:54:63:c1:ec:ff:4f:40:58:b1:9d:07:
6b:1a:31:33:66:3a:df:f4:d4:cc:50:b3:ef:ec:b6:d2:94:62:
75:5d:f3:4b:03:c0:6d:2d:4d:71:8a:17:35:10:7c:30:b0:ce:
8a:65:ae:ff:4e:33:5d:17:71:b7:77:6f:cf:38:22:dd:31:ed:
12:dc:9a:f4:62:3e:26:ff:52:83:fe:fc:4d:e7:44:c7:85:cc:
25:92:e4:8f:84:eb:d2:b7:48:43:90:11:92:ad:a3:b9:0e:4f:
9e:20:aa:19:44:69:53:a1:c6:b2:cf:e0:e8:a6:1e:61:f1:da:
5b:69:cc:d2:4c:22:13:2e:b1:e2:a2:ea:23:f7:6a:63:c7:d9:
a6:53:d6:20:2a:32:e5:bf:b9:c5:6c:30:14:81:39:96:51:a8:
e0:92:65:00:6e:35:4c:5b:0e:d8:1d:ba:f8:b1:ac:7f:e1:8f:
f7:03:8f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:08 2025 by rpki-client