Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Kvu8nGKcPBYBPrsBMVzDlW0WDkU.roa
File: Kvu8nGKcPBYBPrsBMVzDlW0WDkU.roa (raw, json)
Hash identifier: cJmxGsRMlQJ7e6Qnx0p/wroObUBla/Wm0LTgbYLPEUg=
Subject key identifier: 2A:FB:BC:9C:62:9C:3C:16:01:3E:BB:01:31:5C:C3:95:6D:16:0E:45
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F62497DFFA3D362D22CDA021208E50A
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Kvu8nGKcPBYBPrsBMVzDlW0WDkU.roa
Signing time: Tue 25 Jun 2024 12:32:39 +0000
ROA not before: Tue 25 Jun 2024 12:32:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396552
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:49:7d:ff:a3:d3:62:d2:2c:da:02:12:08:e5:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2afbbc9c629c3c16013ebb01315cc3956d160e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:76:44:a7:a5:d1:7b:7c:24:42:69:62:df:5e:
85:a9:e2:ef:da:b3:28:ea:12:a7:77:77:e8:e6:05:
c3:ed:ec:87:01:48:c6:52:f0:f9:e4:4e:d8:19:d2:
3c:d1:d5:e7:6f:27:7c:90:34:24:c4:3c:da:7f:41:
ac:10:0c:b2:5c:fe:79:a6:94:62:73:27:c6:90:c7:
f7:3b:ea:e1:23:7a:d6:53:d4:ee:24:92:79:e1:d1:
60:30:0e:19:cd:bb:6f:c0:2b:7d:91:bf:1b:ac:9e:
bd:8b:61:bd:b9:7a:9d:5c:bd:44:4f:96:3b:81:0e:
58:ae:55:22:6c:98:59:d1:3f:a3:19:63:39:5b:f7:
a9:b3:df:26:43:ff:bc:c1:42:b3:09:ed:e7:19:eb:
9f:57:47:c9:25:d4:e9:a6:1b:35:8a:46:c8:be:26:
85:61:3c:a1:f3:4e:b0:13:c2:65:e7:ce:a4:e8:1e:
bf:93:04:b3:69:64:50:99:fa:c9:94:2f:28:fa:83:
1c:35:f8:90:16:49:1a:4d:a0:2f:e3:b0:01:57:c0:
9e:4e:d3:01:ee:dd:c2:4f:65:1f:36:4f:7f:d0:63:
a8:9e:2d:19:c7:64:eb:35:f9:b1:70:12:d7:ac:4a:
81:09:0c:6f:74:6d:7e:c3:33:b6:07:15:e3:9b:83:
83:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FB:BC:9C:62:9C:3C:16:01:3E:BB:01:31:5C:C3:95:6D:16:0E:45
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/Kvu8nGKcPBYBPrsBMVzDlW0WDkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
b5:52:1b:f4:75:6b:8a:19:94:83:50:12:4b:5d:89:6d:4b:3b:
5a:43:a7:14:c1:9d:d8:52:b8:98:c2:56:65:87:a7:8c:03:1c:
a6:0a:b5:72:0c:1e:f0:80:7d:1f:9a:a8:47:a6:53:dc:69:34:
cb:6e:3d:5c:84:59:49:7d:33:45:23:73:76:bd:fe:86:f5:a7:
8e:1d:65:10:bb:c7:e1:6e:ed:6e:99:46:a6:75:c1:2d:9e:43:
fa:6f:cb:df:be:8c:4e:19:18:d0:62:26:70:1c:8b:da:f3:2b:
2c:21:dd:ce:9e:60:0a:54:92:29:22:69:14:d3:a9:3f:ea:44:
40:4f:62:f6:b3:f8:6e:f2:57:77:2f:f4:2f:f3:b6:ad:8f:99:
15:8e:98:85:da:e7:cd:63:09:8b:b6:e5:0a:ec:9f:be:bf:38:
71:54:13:ab:bc:77:18:f2:02:d6:b8:30:c6:fe:68:8a:6e:ca:
29:49:27:71:33:36:0a:98:65:55:33:4c:33:73:b7:c9:0e:af:
c7:5e:13:d0:ce:15:45:1f:d4:45:17:36:25:cc:06:43:f8:44:
6e:da:df:19:bf:66:11:ee:9c:e8:a8:a8:d2:ec:a3:45:88:54:
59:bb:f5:13:0b:80:83:10:b5:03:9b:dd:11:16:f0:c1:4b:66:
4b:5a:54:67
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZBPYkl9/6PTYtIs2gISCOUKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjQwNjI1MTIzMjM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYWZiYmM5YzYyOWMzYzE2MDEzZWJiMDEzMTVjYzM5NTZkMTYwZTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHZEp6XRe3wkQmli316FqeLv2rMo
6hKnd3fo5gXD7eyHAUjGUvD55E7YGdI80dXnbyd8kDQkxDzaf0GsEAyyXP55ppRi
cyfGkMf3O+rhI3rWU9TuJJJ54dFgMA4ZzbtvwCt9kb8brJ69i2G9uXqdXL1ET5Y7
gQ5YrlUibJhZ0T+jGWM5W/eps98mQ/+8wUKzCe3nGeufV0fJJdTpphs1ikbIviaF
YTyh806wE8Jl586k6B6/kwSzaWRQmfrJlC8o+oMcNfiQFkkaTaAv47ABV8CeTtMB
7t3CT2UfNk9/0GOoni0Zx2TrNfmxcBLXrEqBCQxvdG1+wzO2BxXjm4ODoQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFCr7vJxinDwWAT67ATFcw5VtFg5FMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvS3Z1OG5HS2NQQllCUHJzQk1WekRsVzBXRGtVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUBURPDHjAN
BgkqhkiG9w0BAQsFAAOCAQEAtVIb9HVrihmUg1ASS12JbUs7WkOnFMGd2FK4mMJW
ZYenjAMcpgq1cgwe8IB9H5qoR6ZT3Gk0y249XIRZSX0zRSNzdr3+hvWnjh1lELvH
4W7tbplGpnXBLZ5D+m/L376MThkY0GImcByL2vMrLCHdzp5gClSSKSJpFNOpP+pE
QE9i9rP4bvJXdy/0L/O2rY+ZFY6YhdrnzWMJi7blCuyfvr84cVQTq7x3GPIC1rgw
xv5oim7KKUkncTM2CphlVTNMM3O3yQ6vx14T0M4VRR/URRc2JcwGQ/hEbtrfGb9m
Ee6c6Kio0uyjRYhUWbv1EwuAgxC1A5vdERbwwUtmS1pUZw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:47:18 2024 by rpki-client on console-ams.rpki-client.org