Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/U4lG5eXjObZAG_FasinEXv6d1Wc.roa
File: U4lG5eXjObZAG_FasinEXv6d1Wc.roa (raw, json)
Hash identifier: ksnB+7mBYxgGX2qABij6VXofa51NwOFJFQkAk5CbXxg=
Subject key identifier: 53:89:46:E5:E5:E3:39:B6:40:1B:F1:5A:B2:29:C4:5E:FE:9D:D5:67
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBB61F6BBFBB7C847EBE2F903302AF
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/U4lG5eXjObZAG_FasinEXv6d1Wc.roa
Signing time: Wed 01 Jan 2025 17:48:28 +0000
ROA not before: Wed 01 Jan 2025 17:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36632
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:b6:1f:6b:bf:bb:7c:84:7e:be:2f:90:33:02:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=538946e5e5e339b6401bf15ab229c45efe9dd567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ce:f3:1b:07:51:13:d4:9b:a9:90:4b:9c:88:
4e:a7:9d:a1:b6:6d:27:3f:6d:79:dc:88:50:f1:3b:
52:2a:69:8d:fa:e3:ae:e7:4f:7a:06:8a:a2:b5:7c:
d7:50:a5:be:cb:9b:c2:10:e9:6c:ef:67:46:12:28:
d6:06:d1:97:39:f2:77:7e:13:15:5a:1b:48:08:9c:
8e:a8:36:08:fc:b1:76:0a:72:1d:d0:84:17:22:a5:
8f:a1:71:22:58:46:89:5b:47:0e:1f:8d:51:e6:68:
98:f3:21:11:1a:9f:01:07:0e:3e:a5:a1:1a:f4:2b:
49:77:f3:1e:61:c4:21:6e:a9:b4:88:81:11:09:59:
ab:bc:f5:95:6d:42:cf:0f:31:e9:85:63:a9:96:c8:
20:c3:57:67:8e:f5:c6:e7:28:cf:de:bb:16:22:31:
d7:6e:01:cb:c4:63:6c:e2:aa:c5:f4:c9:0e:ba:78:
06:47:d2:4e:ca:d0:3c:61:09:fe:9a:d8:10:55:76:
a5:a0:84:bd:f2:62:86:f6:7c:ff:24:23:fa:f6:19:
68:4b:01:a0:91:ff:fc:6b:93:69:1b:3a:5d:fc:ee:
b8:7c:34:c4:7e:ea:f7:0a:fe:ac:af:8d:5c:07:d1:
f1:32:08:ba:77:da:e7:94:94:fa:27:d6:c0:2c:ce:
de:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:89:46:E5:E5:E3:39:B6:40:1B:F1:5A:B2:29:C4:5E:FE:9D:D5:67
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/U4lG5eXjObZAG_FasinEXv6d1Wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
1a:41:65:fe:1d:19:f7:66:a4:6d:7f:de:31:ae:ca:ff:e8:45:
42:1e:f2:c0:6d:88:8b:e2:8c:89:af:bc:dc:b1:8f:13:80:24:
ea:0a:1f:51:71:3f:84:9f:05:b0:de:f3:2e:41:1a:2d:ef:0c:
33:3f:7d:56:7a:37:f3:fa:7a:dc:59:3d:38:95:1b:b0:ac:0a:
2f:46:0a:ca:b5:1d:d3:05:11:09:3c:05:61:87:cd:ee:14:c6:
a0:10:32:70:0d:8f:ec:22:57:56:ea:17:41:d5:81:05:f0:ec:
c0:7d:c2:dc:4d:fb:82:2a:a1:8c:0e:4a:eb:e6:36:6c:b1:06:
14:d4:7c:b6:83:4c:25:28:ec:2b:cf:62:09:f4:14:76:11:77:
22:9f:25:b9:e5:66:4b:d8:14:b7:a4:5b:41:3f:6f:48:15:5e:
ff:68:8d:f3:57:1a:97:75:44:6f:91:0b:57:08:06:95:fc:51:
42:f1:e7:61:91:1c:d1:cb:67:42:c8:c8:ea:df:bb:9f:ab:42:
c4:cc:88:3f:ed:9b:cf:a2:d3:87:b6:e4:ab:08:bc:40:4a:e6:
37:72:fa:7b:69:5c:b0:eb:8c:05:e9:fb:f4:43:83:87:2b:6e:
f4:cd:92:b1:5e:8f:7b:2d:1e:7c:5a:01:86:6e:6a:9f:4c:d0:
39:20:42:65
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQi+7Yfa7+7fIR+vi+QMwKvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjUwMTAxMTc0ODI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Mzg5NDZlNWU1ZTMzOWI2NDAxYmYxNWFiMjI5YzQ1ZWZlOWRkNTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqs7zGwdRE9SbqZBLnIhOp52htm0n
P2153IhQ8TtSKmmN+uOu5096BoqitXzXUKW+y5vCEOls72dGEijWBtGXOfJ3fhMV
WhtICJyOqDYI/LF2CnId0IQXIqWPoXEiWEaJW0cOH41R5miY8yERGp8BBw4+paEa
9CtJd/MeYcQhbqm0iIERCVmrvPWVbULPDzHphWOplsggw1dnjvXG5yjP3rsWIjHX
bgHLxGNs4qrF9MkOungGR9JOytA8YQn+mtgQVXaloIS98mKG9nz/JCP69hloSwGg
kf/8a5NpGzpd/O64fDTEfur3Cv6sr41cB9HxMgi6d9rnlJT6J9bALM7elQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFFOJRuXl4zm2QBvxWrIpxF7+ndVnMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvVTRsRzVlWGpPYlpBR19GYXNpbkVYdjZkMVdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF
ALlkADUwDQYJKoZIhvcNAQELBQADggEBABpBZf4dGfdmpG1/3jGuyv/oRUIe8sBt
iIvijImvvNyxjxOAJOoKH1FxP4SfBbDe8y5BGi3vDDM/fVZ6N/P6etxZPTiVG7Cs
Ci9GCsq1HdMFEQk8BWGHze4UxqAQMnANj+wiV1bqF0HVgQXw7MB9wtxN+4IqoYwO
SuvmNmyxBhTUfLaDTCUo7CvPYgn0FHYRdyKfJbnlZkvYFLekW0E/b0gVXv9ojfNX
Gpd1RG+RC1cIBpX8UULx52GRHNHLZ0LIyOrfu5+rQsTMiD/tm8+i04e25KsIvEBK
5jdy+ntpXLDrjAXp+/RDg4crbvTNkrFej3stHnxaAYZuap9M0DkgQmU=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:47 2025 by rpki-client