Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/XMfbDF_HX4iK00W7cRbCAq_mE4o.roa
File: XMfbDF_HX4iK00W7cRbCAq_mE4o.roa (raw, json)
Hash identifier: d2SboKz67XJaM4QA/B6YfgG0i38fgYOji02Q9CwgWYM=
Subject key identifier: 5C:C7:DB:0C:5F:C7:5F:88:8A:D3:45:BB:71:16:C2:02:AF:E6:13:8A
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBAF01E057CC70EB211AE03E08864D
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/XMfbDF_HX4iK00W7cRbCAq_mE4o.roa
Signing time: Wed 01 Jan 2025 17:48:27 +0000
ROA not before: Wed 01 Jan 2025 17:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 32651
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:af:01:e0:57:cc:70:eb:21:1a:e0:3e:08:86:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5cc7db0c5fc75f888ad345bb7116c202afe6138a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:82:3c:eb:62:23:64:1c:91:12:39:bb:e7:83:
e4:10:81:d5:80:4c:38:78:ef:c5:b4:fe:5c:0b:62:
b8:0b:0d:2c:88:1e:c0:4e:39:8f:80:9a:ff:43:9e:
00:77:cf:0e:37:70:25:b0:cf:0e:97:57:15:fe:bb:
0a:7d:3c:50:90:dc:b0:59:51:a4:bc:ac:bb:d3:b8:
9b:85:51:2a:8e:21:c4:51:94:53:aa:19:9f:1b:38:
d6:dd:88:1f:1d:2d:78:ef:91:99:5c:af:7f:55:cd:
ee:84:d0:68:a9:66:cd:c4:14:d3:be:bb:0c:93:12:
cc:91:2a:79:26:35:6b:96:ec:b2:84:3e:5d:22:ca:
e3:2a:23:7d:50:e1:d3:69:36:52:31:d4:c3:1b:7b:
50:5c:ae:17:f7:16:6c:81:0a:0c:59:1f:51:dd:9f:
4d:45:f9:a0:3c:03:4d:0f:18:20:42:d8:ae:6b:07:
a2:54:6b:c7:df:09:15:b2:0d:42:98:1e:75:fd:73:
bd:73:2d:12:d1:35:cc:b4:c5:9d:24:b2:73:aa:20:
c7:54:9c:d3:c0:17:bd:a2:6a:ba:54:7b:56:51:45:
0f:81:dc:37:fd:c3:8d:48:fc:42:c6:54:68:b6:55:
2e:b5:25:44:9e:2f:13:fe:e6:48:f4:33:2e:73:1d:
a5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C7:DB:0C:5F:C7:5F:88:8A:D3:45:BB:71:16:C2:02:AF:E6:13:8A
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/XMfbDF_HX4iK00W7cRbCAq_mE4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
c5:bd:9e:68:08:ed:59:0d:4b:bb:84:1c:83:e0:cb:d6:5f:b1:
50:21:0e:53:eb:25:92:79:21:df:32:86:bf:7c:65:46:15:4a:
ae:87:a8:43:97:b1:39:e5:ba:f3:d2:9c:9d:72:35:6e:1b:4b:
86:b7:34:f4:65:9d:d6:4b:49:fd:99:eb:38:c0:33:7e:82:f3:
b2:c8:88:8f:9b:68:52:58:f4:44:a0:3c:79:1a:9c:07:9e:ac:
1e:a9:cb:7e:b4:a9:a1:16:eb:25:bf:4c:b4:2a:55:12:b2:78:
b8:eb:79:d7:0a:9e:f0:75:63:84:4f:b3:c8:d3:f8:fa:fc:1f:
11:7a:32:ab:21:39:6d:4f:7b:b3:94:f6:3a:17:4e:c3:46:34:
32:fc:4a:03:b9:c2:a7:57:03:07:62:23:b4:0b:87:2b:f7:87:
08:8f:ee:46:55:d5:c3:a6:87:69:50:f3:af:8e:db:a5:a9:a0:
d0:ce:0f:9e:1f:c2:48:e0:e1:79:3d:9a:e1:e3:5a:2f:21:52:
47:ba:95:18:bd:a3:b8:8a:75:2e:cd:a6:13:3d:cd:c0:d6:b3:
bb:4d:38:9e:9e:43:eb:b7:3c:82:56:44:95:6d:39:8f:da:74:
b9:25:26:eb:0f:0f:c4:98:64:12:9c:4d:e4:0e:c3:41:6e:3b:
e1:ad:05:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:33 2025 by rpki-client