Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/OCwZ_cFlDGiaWICs-v3ywuMMN8c.roa
File: OCwZ_cFlDGiaWICs-v3ywuMMN8c.roa (raw, json)
Hash identifier: 13optcOFHMu5aibM+YPXybZGsiJZ+EY4LiSzJtKRBY8=
Subject key identifier: 38:2C:19:FD:C1:65:0C:68:9A:58:80:AC:FA:FD:F2:C2:E3:0C:37:C7
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBE499FEA293F7D491D47FBAA4CCEE
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/OCwZ_cFlDGiaWICs-v3ywuMMN8c.roa
Signing time: Wed 01 Jan 2025 17:48:40 +0000
ROA not before: Wed 01 Jan 2025 17:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397212
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 19:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:e4:99:fe:a2:93:f7:d4:91:d4:7f:ba:a4:cc:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=382c19fdc1650c689a5880acfafdf2c2e30c37c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9f:1e:b7:ba:cf:4e:65:58:ce:ca:6a:c1:01:
1f:7d:a0:20:72:18:12:95:26:8d:76:78:2d:66:de:
4c:3b:6e:4b:68:81:a4:87:07:8f:ed:fc:22:cc:96:
1b:4d:bb:4e:cd:7a:ad:4f:c1:b4:0a:4f:31:de:b6:
e2:72:ee:b9:88:20:6b:bc:97:25:fd:0e:3f:54:41:
55:06:e7:e7:c1:18:fa:5e:75:82:92:20:79:17:bd:
ad:5a:53:ea:26:da:c8:29:91:60:2b:97:23:82:ad:
39:4f:e2:46:90:ba:c0:05:cb:75:15:c9:17:1d:86:
11:cf:ad:1e:07:54:b0:ff:23:d6:8a:5d:85:64:db:
0f:f9:ef:13:4a:92:eb:60:c3:3e:a3:e3:8d:a1:5b:
f5:e2:db:d7:8c:f4:99:fd:51:83:e8:e6:f7:a5:b1:
f3:c5:cc:4a:b7:9e:1a:b9:19:87:68:41:7d:25:6d:
bc:80:c4:4c:60:24:23:ce:c8:e3:8e:fd:a6:ae:cd:
c3:84:d5:96:b5:86:37:ea:19:3f:c5:0f:28:b9:ba:
9e:6c:07:17:41:02:4d:12:bf:2e:88:ef:04:f4:b5:
66:e2:dd:68:eb:6c:cb:b1:64:aa:46:a2:5c:08:37:
6e:3c:ba:91:c2:c6:6c:30:74:7e:dd:d2:64:6e:f5:
37:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2C:19:FD:C1:65:0C:68:9A:58:80:AC:FA:FD:F2:C2:E3:0C:37:C7
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/OCwZ_cFlDGiaWICs-v3ywuMMN8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
3e:2d:58:11:e3:a4:97:63:05:d5:d1:b0:e8:8c:ed:80:f2:25:
03:1c:1b:d1:f3:87:5d:b5:86:23:64:c1:94:94:88:27:d7:b8:
0d:32:0f:7d:64:2c:e6:92:95:a1:ad:dc:ad:49:b6:1b:90:2c:
a8:76:0c:da:92:3a:ef:f9:25:ae:0e:a5:68:7b:20:57:53:a6:
6b:69:82:bf:cc:46:1f:a2:e9:0a:73:f6:bb:8e:1e:c6:93:3e:
e0:77:c4:dd:e5:34:02:a2:b7:8c:39:78:81:e9:c9:e5:f2:2b:
07:ed:c5:17:0c:ad:41:8d:ec:bf:b3:b6:ee:42:bf:fb:b1:de:
72:09:b7:6e:33:8f:27:5d:c5:27:f9:43:ba:a9:28:ca:a5:65:
6c:6a:45:b6:b2:54:a5:69:68:01:20:8b:a4:30:a8:2a:81:c2:
b4:61:da:f8:ec:61:aa:8a:d3:d4:41:d9:96:a0:26:b7:df:1d:
d9:18:b7:d8:01:7d:be:5d:97:80:c3:88:f8:45:d4:60:7f:73:
99:48:89:c0:e7:88:f9:94:a5:df:b8:b2:96:f5:7f:3a:fa:ee:
2c:f1:07:f7:a8:41:3b:44:d0:0f:9e:d5:63:66:9f:13:1f:23:
19:0b:8f:7f:d5:1d:66:0f:3c:10:70:c7:74:d2:cf:cb:5f:7a:
52:62:c2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:53:41 2025 by rpki-client