Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/NWznWgehKfuIpnTRLEpfMKsr1_Y.roa
File: NWznWgehKfuIpnTRLEpfMKsr1_Y.roa (raw, json)
Hash identifier: rLOpwI0DSAQPNGzkJgJVVqnZbBu15nHjq7nzwheEjbg=
Subject key identifier: 35:6C:E7:5A:07:A1:29:FB:88:A6:74:D1:2C:4A:5F:30:AB:2B:D7:F6
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBDA7DDA29F2528CF7A4A6CCCB399A
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/NWznWgehKfuIpnTRLEpfMKsr1_Y.roa
Signing time: Wed 01 Jan 2025 17:48:38 +0000
ROA not before: Wed 01 Jan 2025 17:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396827
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:da:7d:da:29:f2:52:8c:f7:a4:a6:cc:cb:39:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=356ce75a07a129fb88a674d12c4a5f30ab2bd7f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:11:64:be:ef:99:60:16:df:ed:9f:fa:15:36:
70:09:5a:8e:89:ef:e3:72:80:e8:07:81:8d:79:ba:
51:91:89:4a:5c:75:17:87:c2:bd:68:4e:29:ec:1d:
5b:33:0a:16:f4:a8:5b:46:0d:77:3b:9d:12:17:db:
06:6d:66:49:98:36:3b:99:43:a9:a9:8d:f4:a0:81:
9e:c6:ab:07:07:24:76:b6:92:01:a4:d1:24:d6:66:
b8:d1:d2:f4:5f:1d:b2:a8:da:0b:0a:f5:76:e8:96:
6a:e5:5f:d6:a9:d5:cc:1d:37:fd:70:0d:64:31:58:
98:9e:d3:96:cc:75:62:dd:fa:9c:21:d7:dd:f7:7c:
7e:ed:c7:7a:1d:88:fd:14:32:f5:b7:31:da:eb:77:
e9:a6:26:21:99:20:aa:0e:e3:58:9a:3c:0b:82:4a:
27:3f:5e:79:63:7d:be:fc:c0:e4:bc:f9:78:99:95:
6d:2f:21:3b:6c:39:57:79:2c:f0:69:12:2b:54:2d:
6c:12:3c:a3:97:07:7a:2f:1e:c2:e4:c4:39:63:24:
84:b7:82:cb:6b:90:05:99:1c:cd:a4:f6:07:7a:48:
bc:cd:5c:ac:ba:e6:79:25:9f:08:f2:36:03:44:59:
fa:31:fd:b1:5f:1b:f3:3e:3c:72:86:72:32:10:54:
0a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6C:E7:5A:07:A1:29:FB:88:A6:74:D1:2C:4A:5F:30:AB:2B:D7:F6
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/NWznWgehKfuIpnTRLEpfMKsr1_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
b4:f7:b9:f3:ec:c1:7f:80:72:6f:09:2b:f5:6a:be:04:21:bd:
e1:b5:b4:cd:ce:80:27:9e:bf:1b:31:60:05:01:c0:1e:a4:e8:
61:14:0f:bf:03:0f:b0:86:fd:3d:ae:74:1a:1f:7c:d1:4d:c5:
e0:42:3e:42:6d:e6:76:ac:8a:a2:ba:40:dd:50:b8:ca:70:71:
77:e0:55:7c:a5:ce:7f:33:20:bb:c9:e5:75:1d:66:df:57:ad:
5d:f5:e6:f9:10:2b:91:56:00:70:f1:fc:1e:15:51:0b:5a:0f:
f5:b9:f2:a1:8e:79:9e:10:99:ce:8b:24:e2:16:49:ef:09:86:
cf:59:b2:25:ad:bf:46:56:7c:4c:6c:1b:21:6b:9f:92:38:59:
75:d9:ab:0b:9a:e0:29:67:02:0e:62:d3:3b:ba:4e:c7:05:47:
30:7a:1f:6c:17:bb:fc:b6:c5:85:00:ac:1c:26:93:fb:6e:56:
1b:7b:05:cf:12:07:1d:9b:a5:26:16:99:2d:dd:c1:e2:f8:c2:
2c:68:19:3a:ff:1d:65:f1:f5:de:2d:d0:1c:1a:db:11:33:e5:
ed:48:b0:bf:db:9d:2e:c7:c3:5b:3f:0b:eb:09:fc:de:6b:1f:
a4:5d:98:11:37:b0:4c:c1:4f:b0:c7:58:96:9c:2a:ab:2c:25:
aa:4a:77:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:12:31 2025 by rpki-client