Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/UCElM71boVowc_ISnVur6d_U6xE.roa
File: UCElM71boVowc_ISnVur6d_U6xE.roa (raw, json)
Hash identifier: 4LZLs1+osUjqtThPug04zMAyYe9QM88STrNJToLo5zc=
Subject key identifier: 50:21:25:33:BD:5B:A1:5A:30:73:F2:12:9D:5B:AB:E9:DF:D4:EB:11
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBC6E664A0C8655F793B71FF3DCAA7
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/UCElM71boVowc_ISnVur6d_U6xE.roa
Signing time: Wed 01 Jan 2025 17:48:33 +0000
ROA not before: Wed 01 Jan 2025 17:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396574
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:c6:e6:64:a0:c8:65:5f:79:3b:71:ff:3d:ca:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50212533bd5ba15a3073f2129d5babe9dfd4eb11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:86:02:56:89:3c:6e:a3:12:4b:84:d2:90:f8:
38:64:67:18:7f:da:b8:ec:f4:85:2a:be:a4:b9:76:
96:29:55:c7:69:15:87:de:ca:f1:06:86:6c:80:c6:
8b:6d:5d:38:5a:66:f9:df:d6:7a:d1:92:28:7d:86:
1a:75:99:8c:0e:e5:a9:8f:c1:d6:3e:f3:ed:59:9f:
4c:21:c6:a9:36:dc:7b:24:55:5c:98:84:eb:12:70:
db:74:8b:81:28:95:1a:47:78:11:b6:f6:b9:18:c1:
0e:1e:f2:e5:c8:c9:74:85:2c:ea:99:c5:0a:4e:d5:
01:13:c5:b3:7d:1b:c8:d3:4e:a9:58:56:e7:42:0a:
ae:2d:cb:7e:c8:a7:cc:d3:16:0a:ee:09:06:7b:7b:
22:f5:7c:7e:16:0c:69:06:d3:f1:a3:a2:1a:e6:5e:
cf:c7:20:32:eb:77:3c:2b:28:6f:70:d3:2b:a2:c5:
42:ef:82:b9:5e:b8:c6:d7:e6:9d:ea:bb:a2:89:3e:
22:2f:c2:99:43:7b:fb:40:70:10:ef:6e:88:0f:b3:
8e:bb:f8:31:78:99:27:bf:32:dd:4b:39:fa:36:1e:
03:a2:2d:d7:7e:de:5b:5c:80:52:b3:cd:5a:e3:0f:
4b:f2:a1:9e:76:8b:05:d6:fe:77:4a:f1:72:46:67:
92:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:21:25:33:BD:5B:A1:5A:30:73:F2:12:9D:5B:AB:E9:DF:D4:EB:11
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/UCElM71boVowc_ISnVur6d_U6xE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
a3:85:40:12:30:2b:b9:10:46:86:9c:91:5b:7a:7c:b9:69:7a:
a3:1d:2e:b8:6c:eb:4a:9f:95:ef:c7:71:41:2f:40:2d:43:11:
97:a4:e4:c4:0b:7c:96:0d:4c:3f:5c:97:24:12:52:0f:33:b0:
f4:24:2c:08:bf:5f:ee:24:a7:94:73:00:20:ea:4f:d1:0d:a6:
fd:d3:b3:96:6f:4b:3f:87:b2:d8:be:38:6c:7f:49:0c:a2:e1:
4b:f0:d3:93:cd:01:69:97:be:c9:90:e4:4e:a0:db:d0:2f:fa:
5a:ee:30:1a:06:2a:df:b3:7f:f5:f8:08:d1:1e:7a:b8:16:c9:
7f:d1:78:ad:0f:bf:b4:92:22:c3:1a:64:a4:6e:8e:33:be:98:
de:03:28:16:e2:13:a9:0f:f8:a2:ce:34:50:3f:9a:ef:62:41:
a4:1d:53:3f:d8:9c:a8:35:91:71:4e:cd:6c:6d:d1:2a:56:0b:
24:df:0b:3a:63:73:d7:a0:23:ca:69:6c:6d:2e:b5:32:89:3c:
e1:9a:ff:74:8b:60:b6:5f:8d:19:d7:f7:43:d8:73:39:1d:3e:
9d:15:81:3a:67:75:c7:0b:a3:a7:51:b2:4f:d7:69:bb:4f:b8:
25:86:c9:ef:3d:44:d7:70:cc:b4:18:f3:73:35:11:1e:a9:8b:
93:da:03:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:12:10 2025 by rpki-client