Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/UUz-n5ZITtZXPCx6Zc4t_BMvSvo.roa
File: UUz-n5ZITtZXPCx6Zc4t_BMvSvo.roa (raw, json)
Hash identifier: Dtt8SNYXXDj8z5qCAdyMaVfV+mpfgpRQt0mUsufE6BU=
Subject key identifier: 51:4C:FE:9F:96:48:4E:D6:57:3C:2C:7A:65:CE:2D:FC:13:2F:4A:FA
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBC79DF1EC5D09403F1261895CCC74
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/UUz-n5ZITtZXPCx6Zc4t_BMvSvo.roa
Signing time: Wed 01 Jan 2025 17:48:33 +0000
ROA not before: Wed 01 Jan 2025 17:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396575
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:c7:9d:f1:ec:5d:09:40:3f:12:61:89:5c:cc:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=514cfe9f96484ed6573c2c7a65ce2dfc132f4afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b3:6d:a6:7d:06:ed:0b:10:16:39:87:63:7e:
e7:b0:67:46:3b:a8:6c:fa:85:5d:30:56:03:f3:c6:
df:79:1e:96:a0:51:ab:33:cd:99:0d:f9:42:50:70:
d7:8c:64:a5:49:bc:d3:4c:42:c4:92:25:ef:ce:04:
a0:ee:26:b5:d7:2d:e5:48:a6:67:d9:66:70:f2:20:
fe:73:92:fb:1b:9e:cd:8c:4d:ff:dc:85:01:66:99:
88:3e:c3:12:7a:6b:c9:d2:af:77:a1:25:1b:c1:67:
d1:2b:d4:61:2a:12:95:0f:61:17:41:69:23:c8:a6:
9f:d4:59:fa:1f:6d:fc:72:23:4f:30:a6:a2:05:2b:
b5:57:33:bf:4e:6a:9b:6e:ab:c1:cc:68:2d:a9:1e:
d9:52:59:98:47:e7:3f:bb:e3:8a:10:9d:94:ab:1c:
01:74:88:19:d9:9d:85:ce:67:f9:59:3f:c6:64:ab:
62:0e:81:9a:e2:19:57:d6:4f:49:a8:64:96:16:6c:
b2:05:d7:a1:72:9b:13:7b:b0:9b:87:54:44:fe:bb:
92:05:81:61:f2:70:98:ee:3f:c3:5b:99:bb:f1:97:
42:88:76:26:3d:df:82:25:06:35:8b:b6:c0:e9:06:
ab:f5:e5:b8:75:ec:d0:3c:f6:ec:97:62:dc:3b:a4:
1b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:4C:FE:9F:96:48:4E:D6:57:3C:2C:7A:65:CE:2D:FC:13:2F:4A:FA
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/UUz-n5ZITtZXPCx6Zc4t_BMvSvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
4f:c8:8e:a6:b5:01:fe:82:f2:a2:ac:af:ab:db:a2:cc:b0:9a:
64:f3:e5:37:66:ac:7e:01:f6:80:6d:00:3a:90:ff:4b:14:bc:
30:af:89:d9:ff:d6:3f:48:77:71:49:27:51:5c:d6:5d:ca:a2:
23:9d:66:dd:e3:b4:4b:0d:bc:58:3c:96:55:f8:b3:14:00:fa:
28:e4:fc:ce:ff:ba:ec:e1:4c:45:6b:84:c1:28:bc:f8:f8:c0:
60:a2:f5:e6:9d:b3:60:92:b4:09:3e:ca:60:13:14:ba:18:e1:
fa:75:2e:34:de:3b:3d:2a:17:24:ef:80:ba:36:94:9d:38:33:
7c:64:9e:4f:1d:84:d0:e4:bb:b7:42:9a:7d:22:f7:2f:8f:b9:
c1:a5:15:5c:1d:73:1b:b0:e9:20:a5:35:45:31:e8:8b:b6:a0:
be:3a:4b:40:0c:98:2c:77:ae:33:0b:17:fb:b1:cc:72:30:2d:
6d:32:33:a8:6a:6d:3d:cf:25:9c:f9:6c:1a:3f:4b:1b:e1:4a:
6d:dd:ca:1c:b3:ee:8d:66:c5:23:e3:8e:af:8c:63:19:f1:2a:
c6:e4:5f:a7:27:24:1a:ea:56:87:c5:31:0d:ba:55:62:01:40:
e5:17:40:79:6b:c0:fc:bd:e1:40:f0:08:40:0b:f0:f5:f3:50:
17:6e:5d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:02 2025 by rpki-client