Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/WG4QV7P1HHr84kXe13VhB4QA9OM.roa
File: WG4QV7P1HHr84kXe13VhB4QA9OM.roa (raw, json)
Hash identifier: G/E2yD0UbnhMTwXwnf111kJIo0x+dMmwX1fgsyRc30M=
Subject key identifier: 58:6E:10:57:B3:F5:1C:7A:FC:E2:45:DE:D7:75:61:07:84:00:F4:E3
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBCB5DE721F16F7E9D7D710EBA990A
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/WG4QV7P1HHr84kXe13VhB4QA9OM.roa
Signing time: Wed 01 Jan 2025 17:48:34 +0000
ROA not before: Wed 01 Jan 2025 17:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396583
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:cb:5d:e7:21:f1:6f:7e:9d:7d:71:0e:ba:99:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=586e1057b3f51c7afce245ded77561078400f4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c3:67:f2:f6:e9:82:e5:0e:87:d7:85:ee:4d:
72:92:9c:b6:49:9e:ad:8d:5e:9b:ce:e6:71:72:0e:
99:a8:fb:4a:1d:77:03:05:30:3e:d8:9d:e9:c7:0a:
4c:a2:c3:31:f8:8a:b8:a5:1d:43:b6:a3:2a:3a:03:
ba:46:4f:07:63:07:60:39:18:8b:e9:5f:3d:96:84:
80:be:24:9f:a1:87:eb:fb:ac:de:2e:b0:c6:92:bb:
31:9c:b3:3a:fe:83:f1:1d:cb:2e:2d:bd:23:d5:30:
38:f5:6a:fe:d8:70:e1:5c:59:5b:fb:a3:ef:c5:12:
21:9c:b4:1d:1e:3a:0c:0e:cb:2a:e6:2d:35:ba:b5:
be:8c:97:e4:97:36:da:9c:1e:86:40:32:11:2a:30:
e9:98:57:9d:a4:ba:7e:db:09:f9:44:1b:92:45:bc:
af:4f:9f:f8:31:6b:59:6a:2a:07:13:77:ff:83:31:
1b:1a:1b:e4:a5:02:a4:d4:af:0a:e0:e9:9f:2a:e8:
99:32:c4:93:5b:f3:08:a0:49:68:81:81:e1:c5:f1:
0c:e1:1e:43:4b:3e:ad:bb:79:8f:28:eb:47:2b:9e:
cd:cb:48:c5:c4:8a:c9:71:72:ac:a3:fe:c2:f3:ec:
77:33:70:fe:84:e1:e1:33:ed:26:9a:65:43:a9:21:
13:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6E:10:57:B3:F5:1C:7A:FC:E2:45:DE:D7:75:61:07:84:00:F4:E3
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/WG4QV7P1HHr84kXe13VhB4QA9OM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
61:71:b3:88:a9:89:74:51:76:bb:62:2a:db:4e:ee:46:e0:1f:
ac:01:d5:6f:da:22:eb:3d:53:ff:92:53:93:d8:25:f4:94:aa:
1b:38:6a:f0:99:dd:b2:f6:3e:93:23:fc:14:df:f9:bf:b4:c9:
9f:16:82:08:2d:6b:3a:59:95:fb:23:87:d7:7c:72:f7:8c:6c:
23:a2:ca:b1:c2:80:b7:7b:8a:0f:37:54:f1:8e:c5:07:f9:97:
cf:0c:73:6b:80:d1:57:9a:96:64:cd:53:38:0d:ab:c7:a8:01:
3f:e9:02:5f:76:1c:67:15:8b:5e:47:88:87:72:3a:6d:67:94:
75:92:e9:71:e6:76:dd:2f:ad:0d:60:a2:ed:7e:b4:32:e1:2e:
9e:82:91:c0:e4:e6:3c:e5:54:2d:bc:74:28:ea:0e:fa:61:9a:
dd:e8:7d:68:8b:5a:8d:78:9a:13:ef:ca:30:8e:46:90:50:a4:
4a:38:19:f8:d0:ae:72:a9:9a:89:ae:f6:40:0c:02:b2:f3:cf:
4a:7a:f2:cb:c3:06:78:4f:c6:81:e7:bb:0e:ed:bf:01:be:c1:
d7:7b:42:f9:24:86:5b:c4:4c:c3:75:69:f5:d4:61:84:c1:74:
37:ef:60:c5:67:4d:dd:49:46:2c:6b:54:02:82:48:01:67:d1:
e1:47:e2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:22 2025 by rpki-client