Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/MVPcE79_xteHDDFsbggDzswqSrY.roa
File: MVPcE79_xteHDDFsbggDzswqSrY.roa (raw, json)
Hash identifier: 7KKp+Rj/h2M6Bzd2rul+fV/xqJ1Eu9yJ4kHZe7l2IHQ=
Subject key identifier: 31:53:DC:13:BF:7F:C6:D7:87:0C:31:6C:6E:08:03:CE:CC:2A:4A:B6
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBC904F4541690D0C9ADF8ACE8F6E0
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/MVPcE79_xteHDDFsbggDzswqSrY.roa
Signing time: Wed 01 Jan 2025 17:48:33 +0000
ROA not before: Wed 01 Jan 2025 17:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396578
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:c9:04:f4:54:16:90:d0:c9:ad:f8:ac:e8:f6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3153dc13bf7fc6d7870c316c6e0803cecc2a4ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:90:a7:1c:8c:79:0b:e1:3a:c5:1b:b0:23:3e:
16:57:67:ab:4a:e2:ce:0a:bb:18:66:50:a5:5c:25:
b7:05:9d:83:69:99:a5:2f:9c:9b:e6:fd:5e:8d:11:
75:52:ef:10:9b:72:36:07:0b:7e:15:0f:6b:97:48:
32:ac:a9:ed:4f:c9:27:96:db:d5:99:03:28:7a:74:
52:aa:25:13:41:72:ce:b7:3f:94:5c:7b:24:1e:f9:
aa:52:d8:b0:7c:2e:61:e6:4b:7c:d0:37:bc:a9:da:
c0:4b:32:52:f0:1d:6a:d9:3c:b0:30:8d:65:bb:4c:
8a:a1:cc:f9:34:39:75:65:85:99:0f:11:b2:8c:55:
09:5d:d5:21:d0:b2:05:1f:b3:2a:50:09:8b:9f:63:
97:87:8b:6d:6c:03:15:19:65:36:33:0a:83:69:0b:
d7:bb:f4:53:fd:8e:05:f2:65:d6:4e:51:64:e7:f5:
f8:b4:c0:70:c9:90:6b:d9:b7:bd:5d:8b:7f:5a:3f:
f1:ed:83:af:b0:09:fd:35:47:ee:a9:9a:11:d3:46:
ec:5b:ae:ed:5f:51:8c:e5:9f:7e:5e:a4:88:01:27:
c1:2e:f5:2c:97:c2:92:42:42:a1:d0:40:c6:3f:fc:
90:04:5d:24:4e:27:33:1d:6b:60:9a:d4:6f:a5:b2:
cd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:53:DC:13:BF:7F:C6:D7:87:0C:31:6C:6E:08:03:CE:CC:2A:4A:B6
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/MVPcE79_xteHDDFsbggDzswqSrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
44:41:c7:d0:0c:ad:de:e3:68:48:ef:3e:ae:58:87:73:1c:18:
56:c1:6c:04:8d:9e:0b:b4:1d:50:87:5d:fe:8f:3f:f3:b0:69:
24:bd:50:96:2c:32:f0:46:af:1f:1d:16:0f:57:77:ee:9f:ff:
f2:62:bd:84:5f:cf:f3:7c:c1:2f:b6:f4:c8:4c:47:e3:7a:81:
a9:a1:82:d0:ec:42:2a:52:55:28:af:08:90:49:d4:65:38:9b:
e1:17:8b:db:41:52:e3:7d:28:53:83:b9:db:32:0f:be:79:b6:
88:f7:42:e7:41:18:15:08:48:bf:04:44:67:55:03:34:c8:dc:
81:8a:ef:c8:61:9e:61:ca:f9:cc:77:3c:fe:72:2e:45:8d:6b:
fc:8e:9c:91:1b:b6:1e:90:85:fb:fb:24:b2:85:cf:84:a0:d4:
a5:ab:75:b3:3f:c3:b5:c7:ab:a3:ac:b2:6f:c9:f0:48:87:b4:
34:70:d9:1d:2f:67:15:73:bc:a4:76:68:ba:b6:59:c4:0d:f4:
14:99:dc:fd:0f:3e:ef:4a:ca:65:42:37:8a:59:39:6d:5c:60:
6c:e6:88:bd:10:28:0f:a0:0f:b5:ce:fd:8e:30:41:ac:20:66:
59:37:b2:b4:7e:dc:b4:19:ac:2a:fa:74:60:5e:ed:99:5a:c9:
ea:9b:ff:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:18:37 2025 by rpki-client