Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/LthVhPAeIcRKFvASQsks_BI-qjU.roa
File: LthVhPAeIcRKFvASQsks_BI-qjU.roa (raw, json)
Hash identifier: cICZMjbFayajfVz+qM02/HZ9sEJmOvVYXS+gzKwkzP8=
Subject key identifier: 2E:D8:55:84:F0:1E:21:C4:4A:16:F0:12:42:C9:2C:FC:12:3E:AA:35
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBB9BF1F5FA8595940B0E8DD94DC93
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/LthVhPAeIcRKFvASQsks_BI-qjU.roa
Signing time: Wed 01 Jan 2025 17:48:29 +0000
ROA not before: Wed 01 Jan 2025 17:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396546
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:b9:bf:1f:5f:a8:59:59:40:b0:e8:dd:94:dc:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ed85584f01e21c44a16f01242c92cfc123eaa35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:18:f0:e3:65:eb:22:e4:07:1c:ea:0e:4a:e2:
54:24:40:c2:4d:2b:2e:0c:34:ff:d1:a5:31:db:03:
5a:a1:d7:62:ef:4a:f9:2d:32:df:0b:d2:57:24:e5:
45:c7:56:bd:d0:61:63:af:56:10:ca:b1:3e:6d:11:
dd:d7:07:d3:7d:28:3f:2c:74:05:b9:22:64:18:e4:
14:f2:62:1f:88:36:f3:8e:5f:42:a2:b0:fc:51:79:
dd:d7:50:f8:65:e0:bd:1d:c3:52:24:0f:15:9b:3e:
b4:ab:86:c9:c7:ad:f8:df:94:27:82:e9:df:de:4a:
4a:28:2a:17:69:c4:f8:6e:10:74:c2:40:d2:e1:e0:
bc:12:5d:6f:f6:45:0f:36:f8:63:60:82:9d:a0:f0:
a7:88:11:f0:4d:31:b6:a0:03:b6:66:5e:81:0e:03:
fb:eb:d5:36:f5:d2:ba:ab:f4:39:b9:18:c3:1a:f6:
b3:46:82:29:33:cc:80:ce:d4:52:a3:9c:aa:86:4f:
fd:fc:5a:d7:b9:5e:35:c6:a2:6c:e8:bc:f0:8b:cf:
5a:30:7a:44:8a:10:da:21:7f:cc:fb:2b:64:d5:23:
83:ba:9a:b8:7c:9c:8a:ec:be:35:f7:2d:49:d1:df:
d2:6e:18:6b:31:c1:45:73:9f:be:79:74:ba:6b:ff:
d3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D8:55:84:F0:1E:21:C4:4A:16:F0:12:42:C9:2C:FC:12:3E:AA:35
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/LthVhPAeIcRKFvASQsks_BI-qjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
12:14:ad:e2:2f:93:db:d8:d3:f6:16:63:8a:ca:3f:7e:d7:15:
9e:a2:c4:97:b0:03:2e:73:ba:8b:f0:b8:54:2a:a9:ba:60:20:
5f:95:30:54:4a:0c:5a:55:14:04:1c:da:92:f7:43:41:f7:f0:
78:5a:85:59:b9:3f:00:b5:b0:7e:49:25:7e:00:87:eb:06:4b:
40:64:d8:d6:62:dd:a3:da:ed:26:60:d3:9e:12:b9:c6:39:8b:
5f:43:4d:b6:a0:b4:74:78:9b:6a:81:1f:e4:ad:11:92:4c:48:
59:5f:76:98:3f:19:54:c6:e7:91:78:09:99:44:85:eb:2b:58:
0e:d6:c4:37:dc:39:6f:0e:e7:1d:c4:ed:51:60:91:cf:24:f1:
a2:de:95:9e:ab:ec:b8:9a:be:00:8d:2d:a5:ea:a6:d2:5d:4a:
d8:6d:cd:5a:07:65:66:95:64:df:71:cf:8f:14:4b:7b:4f:a4:
c6:a7:8a:31:d7:a6:6e:cf:02:3b:0c:2a:8c:f5:04:f2:96:97:
11:30:91:94:c7:20:fe:65:ba:0d:14:4a:a9:12:ca:4f:5a:9a:
ee:0c:20:d4:fa:80:22:89:c9:0e:5d:79:4e:6b:82:a6:03:3c:
f8:b0:96:80:f9:63:18:c0:dc:81:38:95:9f:c0:0e:49:ee:4e:
c6:cc:15:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:18:36 2025 by rpki-client