Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/M5wP1Da79mqBEyO5Qm63SMjqcYI.roa
File: M5wP1Da79mqBEyO5Qm63SMjqcYI.roa (raw, json)
Hash identifier: 6qIw9V/Ul/RFPWRo1t4x/ruK3rtMYwnEQKbcbHW1aiw=
Subject key identifier: 33:9C:0F:D4:36:BB:F6:6A:81:13:23:B9:42:6E:B7:48:C8:EA:71:82
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBC29CBCE6BBE4B2B443347457A73D
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/M5wP1Da79mqBEyO5Qm63SMjqcYI.roa
Signing time: Wed 01 Jan 2025 17:48:32 +0000
ROA not before: Wed 01 Jan 2025 17:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396565
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:c2:9c:bc:e6:bb:e4:b2:b4:43:34:74:57:a7:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=339c0fd436bbf66a811323b9426eb748c8ea7182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2c:79:52:07:b2:41:33:59:b0:f1:66:90:a1:
8a:3e:e2:ee:ae:5f:65:5b:9d:f6:6b:80:98:6c:ce:
b6:bc:2e:58:63:42:5d:04:ae:a1:bc:2e:f3:a5:1a:
8b:83:a3:c3:94:b7:74:f5:f6:93:dc:b2:8c:5c:d5:
08:56:2b:ba:50:8a:44:88:9e:f4:6e:cd:57:aa:37:
91:e1:40:b9:55:1f:14:89:ec:31:3b:7b:80:70:40:
10:05:1e:b8:e3:a3:0e:0b:00:eb:b6:0f:59:ef:bb:
be:e9:40:47:28:62:3e:28:ea:8c:a3:03:6f:48:03:
c3:c9:ea:e6:78:92:15:47:c3:40:00:14:c4:db:eb:
e0:fc:88:5d:04:24:47:e6:10:98:23:d8:66:3a:b7:
c7:48:f4:6f:77:d6:69:01:5c:07:1a:2d:04:1e:d1:
e7:4a:23:57:44:2d:d1:11:e7:40:55:a0:00:6c:f3:
90:f3:0f:51:cd:13:8a:8e:82:6d:b2:96:06:78:d4:
d5:ac:10:02:a4:1e:61:01:31:42:9e:92:ce:b0:04:
46:26:b3:6d:3d:24:29:02:ca:b3:a1:a9:75:f8:aa:
d0:08:31:76:bf:16:3d:c5:20:cc:03:72:a9:22:96:
74:03:35:62:5e:27:ca:1d:b6:fc:6f:6c:29:93:d6:
6d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9C:0F:D4:36:BB:F6:6A:81:13:23:B9:42:6E:B7:48:C8:EA:71:82
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/M5wP1Da79mqBEyO5Qm63SMjqcYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
2b:01:fc:d0:10:af:12:a4:cd:62:ee:32:ef:fb:33:4f:7a:c9:
2b:77:20:84:cd:46:1c:43:5d:a1:a6:3c:39:3f:3a:78:d6:2d:
67:53:c9:60:d6:65:01:ff:25:97:a6:72:d6:7c:fa:18:1f:c5:
ce:c3:17:0e:92:76:40:e7:20:9c:aa:9d:75:4f:20:aa:0d:04:
ce:6a:53:42:ae:8d:3c:ab:8b:1b:ab:69:9d:d0:a9:09:13:05:
f0:84:b7:3c:7f:59:52:8b:c1:47:6c:9b:8e:4d:33:08:ce:da:
e9:c1:62:36:10:39:93:05:ac:7d:c5:17:6f:e8:ed:9c:ae:aa:
7f:2e:24:96:c9:e3:13:ae:b8:f5:cd:9e:ef:1c:9a:f2:be:b4:
0e:22:f9:d0:4a:07:a7:fb:93:88:0d:59:de:33:52:fc:c4:91:
56:59:c3:45:85:dc:6d:70:fb:c2:42:18:66:fa:18:cc:4b:5e:
d0:0e:e3:23:32:85:87:46:69:15:07:d3:12:07:a6:65:f7:e9:
cd:ae:7e:6b:59:9f:90:c6:af:70:98:28:b8:ef:12:72:7f:05:
13:04:f6:8f:3b:10:67:80:66:84:fa:a2:ba:83:1b:dd:74:87:
d0:c7:b6:05:d8:67:52:8c:e4:60:b5:7d:60:0e:62:80:7c:b4:
73:80:0d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:43 2025 by rpki-client