Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/LkuozYlgDAbzJvJgiN4hgwoO6PE.roa
File: LkuozYlgDAbzJvJgiN4hgwoO6PE.roa (raw, json)
Hash identifier: tUzS+lcSH5m2g6EKLqXUibyTg3jFB0AawvNr3NV0VfM=
Subject key identifier: 2E:4B:A8:CD:89:60:0C:06:F3:26:F2:60:88:DE:21:83:0A:0E:E8:F1
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F624FA4900679E7F49CADA2FC2B667A
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/LkuozYlgDAbzJvJgiN4hgwoO6PE.roa
Signing time: Tue 25 Jun 2024 12:32:41 +0000
ROA not before: Tue 25 Jun 2024 12:32:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396566
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:4f:a4:90:06:79:e7:f4:9c:ad:a2:fc:2b:66:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e4ba8cd89600c06f326f26088de21830a0ee8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2d:5a:c2:80:64:f7:a0:fd:7e:f2:fb:df:06:
f9:eb:22:3b:26:35:99:de:eb:05:4b:fc:f4:4f:f4:
94:68:10:7f:a3:6e:9e:2f:d3:85:7e:0c:eb:7b:c4:
38:cb:61:b4:c8:1d:c1:e9:56:04:e6:f4:a0:64:1e:
39:28:d5:de:c2:24:37:df:00:71:44:c9:b1:99:75:
99:51:06:2e:0c:33:4f:2a:43:51:e7:12:c7:37:a2:
c3:41:c8:ce:32:fd:02:0d:ac:cf:11:2e:8a:2c:f7:
f7:fd:c1:15:87:b7:ae:ff:70:f0:a1:d2:7b:69:43:
59:97:66:fa:85:7f:61:c2:80:7b:6e:2f:1c:a1:3c:
69:74:84:92:c7:cc:a9:50:2d:1a:5f:3f:94:40:a8:
0d:ac:32:78:4d:79:e0:a5:bf:54:e0:8e:cd:c9:59:
33:62:8c:96:c4:0b:b9:fb:91:35:ad:7f:61:5e:3d:
8e:8d:57:a1:cc:6a:f0:36:5e:15:36:ed:93:4b:8f:
42:5b:9e:00:29:74:71:60:11:f7:25:e7:d8:43:39:
15:fb:55:76:39:aa:05:e1:ac:7e:ff:57:19:ab:3e:
59:d4:70:fe:8b:f4:21:5f:a2:19:e9:7f:48:cf:f5:
22:4c:50:2f:ba:07:2f:6a:1a:3e:61:3c:3a:64:13:
aa:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4B:A8:CD:89:60:0C:06:F3:26:F2:60:88:DE:21:83:0A:0E:E8:F1
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/LkuozYlgDAbzJvJgiN4hgwoO6PE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
01:03:17:3f:a9:4e:5b:c7:a9:20:0c:bb:ba:a2:6c:0a:01:28:
6f:dc:88:9f:24:b0:5c:92:3f:d5:b7:6f:25:fb:3d:71:e4:d6:
e3:2c:4e:6b:63:f0:b7:00:5b:ab:2f:6f:bf:86:0d:44:f5:de:
7a:51:6d:0c:b3:b3:e5:09:1e:65:96:66:fb:5b:de:75:ba:35:
4d:77:6c:a1:54:42:3e:be:6a:1e:d1:05:13:9c:bc:f5:ed:a9:
90:74:9b:7a:84:d0:78:73:ff:b9:5b:e1:6d:e1:a8:33:42:4f:
b5:3b:57:1c:83:69:f1:1a:1b:df:5a:b5:66:c5:92:6a:0a:6f:
bf:06:2d:21:c0:32:bc:e8:36:cb:86:93:fa:ce:82:4a:b2:77:
61:ca:98:3f:42:86:3e:89:ca:fd:15:74:9a:e5:aa:3c:7b:f9:
3d:59:ff:19:d9:1a:4c:a9:4b:a4:6e:92:b0:56:be:14:e9:e9:
cb:12:c4:1e:b3:69:3d:16:dc:a4:34:6b:ad:ea:e6:0c:9d:51:
eb:94:cb:a3:6c:44:fd:13:73:c5:0a:7e:41:53:90:21:ad:e5:
4b:c8:f9:17:77:89:d3:35:1d:83:7d:db:b1:31:af:7d:a7:bd:
3b:d5:c1:86:a2:93:5d:68:f7:91:1e:c1:1b:a6:47:15:0b:d8:
ee:0c:28:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:54:07 2024 by rpki-client on console-ams.rpki-client.org