Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/ULA3FkqKoEH7KYroBA-nqvSrNoM.roa
File: ULA3FkqKoEH7KYroBA-nqvSrNoM.roa (raw, json)
Hash identifier: BgWfE2kZRcn26orE278npkCZuUsYj6alicbi7qFCuEw=
Subject key identifier: 50:B0:37:16:4A:8A:A0:41:FB:29:8A:E8:04:0F:A7:AA:F4:AB:36:83
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F626E2118284EC1DC591D67C9E661AE
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/ULA3FkqKoEH7KYroBA-nqvSrNoM.roa
Signing time: Tue 25 Jun 2024 12:32:49 +0000
ROA not before: Tue 25 Jun 2024 12:32:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397197
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:6e:21:18:28:4e:c1:dc:59:1d:67:c9:e6:61:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=50b037164a8aa041fb298ae8040fa7aaf4ab3683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d5:09:02:e3:ca:99:6e:f8:fd:ca:8d:39:5a:
87:24:d0:97:a2:cf:02:3f:1b:c7:91:e2:9c:a6:fe:
d0:c8:f6:c0:96:84:44:a7:03:1c:ad:53:1c:c5:28:
f8:42:a9:70:3b:63:92:63:8f:c1:54:3c:94:66:cb:
c4:2a:bd:a6:0f:f4:16:05:d8:4a:6b:2f:be:19:63:
ba:b4:07:6d:d8:5d:50:cb:12:7a:cc:bc:85:65:01:
be:93:28:0a:0b:7d:cb:03:1e:23:ff:8f:7d:25:e9:
0c:79:ec:ab:8b:2c:e1:d7:7d:13:e7:4c:f8:35:23:
d7:c2:b4:e6:d7:e3:8f:7a:1d:1f:79:c7:e2:54:7c:
38:49:e8:06:8f:c4:0b:0a:88:7f:5f:69:75:ea:c7:
90:6d:e3:bf:32:37:16:a7:fb:b8:d9:62:16:a5:70:
9d:da:e1:83:9b:30:3a:e4:5f:dc:33:cd:b7:d8:64:
5d:13:7a:a0:82:d8:0f:b0:89:38:a6:ef:ef:6e:b7:
23:b9:3b:95:3a:46:a2:4d:20:e8:61:b4:6b:9e:1c:
c2:ad:a2:77:5b:bf:d1:e2:ea:9a:18:dc:5a:cc:bb:
c6:cb:44:1b:7b:b6:39:ab:a5:08:e3:4f:bf:57:ea:
76:71:3c:49:3a:a5:15:8a:c3:77:d8:1f:3f:06:69:
23:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B0:37:16:4A:8A:A0:41:FB:29:8A:E8:04:0F:A7:AA:F4:AB:36:83
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/ULA3FkqKoEH7KYroBA-nqvSrNoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
58:d3:50:8c:6e:67:e0:ac:fd:f0:72:e6:ab:52:aa:a4:58:0b:
e4:0c:ed:2a:ce:af:a4:96:71:59:56:0c:cf:37:8f:40:c0:1f:
b5:d1:e9:ba:9c:42:00:5e:9d:92:92:b8:74:32:6d:93:a1:ac:
c7:02:81:2f:6d:a3:1e:a0:f1:61:07:45:b1:22:b4:a4:4c:94:
a5:eb:17:f6:84:6c:0a:39:18:b4:02:fb:bf:cf:4e:95:46:03:
9b:82:23:bf:3d:d4:cf:f0:fa:2a:2b:3b:46:8d:27:ad:6c:01:
c1:ad:0f:e1:a0:5c:e5:14:78:99:16:bd:88:05:9c:7a:d9:52:
ec:ab:27:40:3a:59:dd:5d:19:dd:e0:c0:70:b1:95:fd:7b:43:
b0:ba:0a:d5:49:b8:07:63:4c:d0:38:5f:c3:6c:56:84:5b:8c:
7d:22:3e:5c:d9:ec:26:33:3c:bf:a3:aa:9e:ac:a1:2d:ff:8d:
f7:cd:df:fb:06:b8:a3:23:a2:9f:52:82:85:8e:5a:5c:e6:8a:
35:9e:fe:2b:c1:3a:6b:84:85:66:0f:e8:97:7a:49:ae:c9:9d:
39:2b:df:53:8e:e3:0e:3c:c0:54:ae:8d:fe:c2:a7:61:91:25:
99:74:b7:7e:12:60:ad:6e:91:03:2f:b5:c1:43:91:5d:b6:c3:
d4:75:fc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:54:07 2024 by rpki-client on console-ams.rpki-client.org