Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/dMdox1wvSXVQuXb1b44KwtqJjTQ.roa
File: dMdox1wvSXVQuXb1b44KwtqJjTQ.roa (raw, json)
Hash identifier: ew97ufn8w97M+MlSRK+4dpeom9GgOEfanhbVo3GuUSo=
Subject key identifier: 74:C7:68:C7:5C:2F:49:75:50:B9:76:F5:6F:8E:0A:C2:DA:89:8D:34
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBD6854AEE52CF343681B87EAA330A
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/dMdox1wvSXVQuXb1b44KwtqJjTQ.roa
Signing time: Wed 01 Jan 2025 17:48:37 +0000
ROA not before: Wed 01 Jan 2025 17:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396610
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:d6:85:4a:ee:52:cf:34:36:81:b8:7e:aa:33:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74c768c75c2f497550b976f56f8e0ac2da898d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a6:ad:55:52:af:57:e5:c0:ce:9c:77:8a:8d:
2e:63:c6:d9:57:a3:d5:d5:2e:e7:6d:a1:ca:b8:c9:
b5:32:01:4e:ea:85:09:fa:f2:83:79:b4:57:65:3a:
6b:21:97:cc:93:03:6e:5e:76:66:db:b5:d7:47:72:
b5:cd:2a:c1:2e:1a:d0:e4:4f:6b:91:a1:fb:f3:3b:
04:78:83:1b:31:88:93:ba:1e:42:f2:a1:1a:48:c1:
dc:e7:8a:a7:fd:76:e8:bc:b5:d6:dd:5c:75:cf:73:
7b:e3:4c:0f:71:7b:75:e2:7a:4b:2f:d9:bc:80:26:
5d:1a:18:71:9b:d7:80:51:d6:ce:97:7e:df:f1:63:
28:37:5c:3f:21:e5:c0:bc:e8:f6:4b:fd:fe:59:d8:
e5:07:b0:08:ed:98:d6:ce:30:5a:ac:8e:fa:50:7d:
de:b0:0f:e7:4c:ba:ec:de:30:06:f0:e3:e4:9d:70:
d8:cc:69:3c:28:22:d5:08:74:bf:9e:17:ff:cd:b3:
71:b8:08:85:9b:9a:0b:0e:a2:d5:18:72:00:c7:d9:
1a:e4:3a:93:df:60:5f:d9:f8:8d:d7:04:97:26:fa:
c0:d8:4a:c1:50:20:0a:b8:2a:66:c1:1b:b6:75:5c:
c8:79:89:1b:0f:08:8c:1a:7b:47:7d:80:eb:52:6c:
30:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C7:68:C7:5C:2F:49:75:50:B9:76:F5:6F:8E:0A:C2:DA:89:8D:34
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/dMdox1wvSXVQuXb1b44KwtqJjTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
8a:31:ab:fd:69:11:2d:20:fb:17:67:2d:00:8d:11:13:4d:4b:
df:14:66:b7:4e:b7:ad:9b:2f:03:5d:25:6f:49:78:f6:fd:ff:
b1:d7:80:d2:10:9b:18:62:01:cc:7a:cc:fb:a5:54:35:af:aa:
cf:b5:b8:b2:a2:f2:12:63:52:18:99:39:4c:4c:9f:6b:1b:aa:
61:ab:e8:18:e8:31:b9:00:e5:16:33:34:6c:ec:49:88:52:82:
3b:ae:d1:ce:fa:12:35:1f:30:8f:46:b9:46:33:b8:0c:53:fa:
6f:5b:8b:70:ec:57:9c:6e:e7:6c:6f:c3:18:93:f0:7c:79:b1:
44:54:c5:f1:ab:57:92:4e:12:7b:f4:97:ce:5a:10:91:75:63:
b9:0d:ab:83:bd:6c:fb:4e:ba:56:a8:30:31:8d:49:79:be:d4:
06:e7:65:73:70:8f:4d:d9:04:1b:59:dc:bb:5f:9e:4c:c9:0c:
6e:1b:35:d9:a2:e2:5d:70:ff:cc:47:49:9c:ef:e2:00:f5:3e:
45:cf:1a:10:49:ef:24:dc:6d:d2:7e:3d:cd:2d:74:e9:db:ce:
89:fc:88:5e:84:e8:e4:76:4e:b0:74:b4:3c:c7:0e:5a:59:c0:
d8:da:00:e3:25:1e:2f:c3:2a:08:ab:5b:f9:6a:38:b5:08:c3:
76:e4:53:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:11 2025 by rpki-client