Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/T9Fm0WFkpAw3BcHVHkWVdcm8-rk.roa
File: T9Fm0WFkpAw3BcHVHkWVdcm8-rk.roa (raw, json)
Hash identifier: gsiXkGihPMTjxb0ybUq947kE9z5enqot3ZXuZL2vV0c=
Subject key identifier: 4F:D1:66:D1:61:64:A4:0C:37:05:C1:D5:1E:45:95:75:C9:BC:FA:B9
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F626E89253B8E492B172B5E03597EEE
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/T9Fm0WFkpAw3BcHVHkWVdcm8-rk.roa
Signing time: Tue 25 Jun 2024 12:32:49 +0000
ROA not before: Tue 25 Jun 2024 12:32:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397198
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:6e:89:25:3b:8e:49:2b:17:2b:5e:03:59:7e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4fd166d16164a40c3705c1d51e459575c9bcfab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cb:43:6a:5f:dc:41:d5:6b:30:79:fd:74:e2:
15:bb:11:0c:61:4c:2a:00:a0:7b:9c:56:38:47:23:
75:10:e9:2e:0e:c3:af:87:6f:14:c5:07:c7:73:f8:
44:bb:cf:8f:ed:bd:c2:e3:3c:68:42:66:ff:7f:50:
b0:23:e4:36:08:a7:90:bf:ab:ba:0d:c0:71:39:21:
5a:40:2a:93:46:a2:69:a3:51:ed:73:d9:c8:f0:77:
3d:ff:b5:88:59:a7:3f:8e:33:f3:9d:91:94:57:78:
34:05:70:b2:cf:5b:48:35:ea:a1:6e:96:08:a7:08:
ce:be:46:3d:f8:fa:7c:fe:df:33:5f:e7:ea:15:eb:
ef:37:52:cc:fb:24:c1:10:db:97:4e:9b:c6:06:d0:
82:5b:bc:7a:5b:f1:9b:ee:7e:ba:75:d9:a3:05:e0:
dc:7f:b8:48:2c:42:45:19:46:5b:ef:64:e7:28:9d:
1c:13:5f:b4:0b:8e:ec:36:cf:3a:8e:3b:1a:1b:1d:
97:51:d6:76:46:a0:57:7a:54:a5:4d:40:55:0e:f8:
86:d5:dd:02:9a:04:ae:46:3e:d9:61:7f:42:35:53:
10:db:03:a8:fb:c8:94:d4:84:ab:5e:c9:15:fa:40:
3c:bc:da:72:fb:db:ec:97:c6:03:c9:09:82:16:f6:
ff:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D1:66:D1:61:64:A4:0C:37:05:C1:D5:1E:45:95:75:C9:BC:FA:B9
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/T9Fm0WFkpAw3BcHVHkWVdcm8-rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
2b:f4:88:f6:2a:a9:e2:e3:cd:3e:8f:27:a0:2e:d8:70:b1:2d:
d0:08:22:81:3e:62:1a:d4:12:90:01:2f:a1:f8:c5:e8:46:ec:
73:dc:b6:7f:0f:90:dd:36:a1:67:7f:be:9b:87:6a:75:34:cc:
76:4d:2f:4b:e2:fc:a4:78:cd:62:db:87:1f:49:21:98:bf:11:
64:7b:cf:78:c9:72:bf:ee:84:8d:0d:f1:df:b5:b3:e1:09:5a:
c8:d8:09:48:ae:59:67:cb:68:73:5f:7e:aa:e8:f4:b1:e4:df:
85:46:72:6b:6c:85:0b:7e:80:0f:a6:dc:b4:5f:6b:a2:10:5c:
f5:16:53:8a:22:c3:66:2f:de:89:e8:75:59:f3:ce:b3:f7:0e:
06:06:a9:16:4f:18:4a:64:e8:f0:9f:76:12:d7:54:76:58:98:
ee:93:84:32:cd:1f:a2:53:78:e8:c0:8e:af:44:0b:cf:33:eb:
42:5d:60:f0:d2:e9:79:8f:da:b6:32:41:e3:66:55:ae:92:fe:
4e:15:88:56:fe:61:a6:3b:04:e8:aa:86:91:95:89:e0:b0:f9:
5c:98:8f:99:e8:55:8a:2f:9a:b5:6d:a1:a4:93:4b:69:6f:e6:
e8:48:80:6e:e9:2f:74:e7:48:7d:ab:26:8c:7a:76:1b:53:1c:
c7:30:04:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:47:18 2024 by rpki-client on console-ams.rpki-client.org