Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/dq1DJb8Rqjynq41isrMV9_z-c10.roa
File: dq1DJb8Rqjynq41isrMV9_z-c10.roa (raw, json)
Hash identifier: ihOO2cEFhjqnBuLRwclYRKGXWY4HwmV6oH82Jc6aaEQ=
Subject key identifier: 76:AD:43:25:BF:11:AA:3C:A7:AB:8D:62:B2:B3:15:F7:FC:FE:73:5D
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBB012FAC48C1D770F67D5581DD13C
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/dq1DJb8Rqjynq41isrMV9_z-c10.roa
Signing time: Wed 01 Jan 2025 17:48:27 +0000
ROA not before: Wed 01 Jan 2025 17:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36617
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:b0:12:fa:c4:8c:1d:77:0f:67:d5:58:1d:d1:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76ad4325bf11aa3ca7ab8d62b2b315f7fcfe735d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c2:7a:2c:0e:9b:85:ec:7e:5b:df:95:0f:62:
0a:7b:be:72:e3:48:61:0e:af:3b:79:fb:e0:59:dd:
ff:21:06:01:a8:d0:d6:20:8f:ea:34:f8:ba:11:11:
b9:b0:54:b1:83:5d:25:58:27:95:b2:ab:cc:62:d7:
73:4b:c9:e1:d2:9d:07:ee:b5:84:9c:7c:28:0a:6a:
1c:04:4c:f3:ef:bc:4c:44:47:de:1a:32:73:65:c1:
3c:20:7d:0b:12:28:c2:70:aa:c3:65:59:17:8d:56:
0f:65:34:b4:d7:5d:1e:20:c0:ed:b4:a2:ed:24:59:
3d:c6:2b:7b:aa:f4:ba:e5:74:64:a6:85:db:6d:3c:
eb:d0:20:84:37:d0:31:df:d3:1b:b9:8b:67:08:ea:
59:77:75:5c:87:82:a3:fa:3d:53:96:f6:bd:53:d1:
87:db:1c:33:69:5f:16:22:4c:2f:ae:76:58:06:43:
eb:12:e1:c1:da:77:e3:df:c3:b1:fa:24:9c:30:d4:
45:50:65:6f:11:4c:4b:01:0d:82:ef:33:5e:f6:b9:
3e:4c:64:77:60:4d:47:a8:ea:b6:a2:80:6b:a7:85:
a3:05:d7:14:89:91:c1:15:05:1a:f7:85:95:33:b4:
a2:d1:33:1c:c0:46:db:2e:8b:3b:4c:4e:e2:ac:06:
ff:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:AD:43:25:BF:11:AA:3C:A7:AB:8D:62:B2:B3:15:F7:FC:FE:73:5D
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/dq1DJb8Rqjynq41isrMV9_z-c10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
4f:39:ec:b8:2f:de:f2:51:9e:f8:6e:2b:df:75:c2:cc:3a:66:
8b:3b:15:37:29:8f:d6:69:2d:b3:e8:cc:2c:a3:77:4f:08:92:
12:08:f7:58:e9:a5:5c:c1:9d:e1:8a:8b:41:d8:72:fe:0e:1f:
c9:6a:f6:bd:10:8a:77:15:ac:c8:4a:c1:f1:23:51:6d:bf:2a:
bd:ae:8d:8c:0d:07:0a:da:f9:ee:e0:bb:d3:a9:40:32:6a:16:
2c:7d:a2:1b:25:1b:99:7d:ce:74:54:ed:f2:a2:d7:2c:da:61:
48:f7:24:7d:e0:be:55:a9:58:b8:dc:1c:2e:b3:62:4b:ad:93:
0b:41:a5:d6:c3:cb:93:cc:6d:e8:7c:50:1f:53:a6:fc:d2:1b:
be:8b:65:a4:7a:bd:c6:02:30:36:e5:ce:d9:9a:25:07:ca:e2:
08:88:f5:ba:8e:4c:e3:7d:d7:7e:e2:6b:9d:3a:1e:ed:fe:85:
c1:d6:bf:da:95:fd:5f:58:d2:56:47:d0:96:0c:d7:a5:0e:5d:
d6:74:57:92:b4:5b:27:45:3d:db:0a:5d:b9:91:da:45:fd:58:
6c:cd:91:06:00:17:bf:f7:f2:3b:de:b0:c7:c5:e2:39:b4:1e:
66:59:11:bd:a8:ef:f4:75:aa:30:c8:e2:72:39:cd:82:02:0b:
29:fa:1d:83
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQi+7AS+sSMHXcPZ9VYHdE8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjUwMTAxMTc0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NmFkNDMyNWJmMTFhYTNjYTdhYjhkNjJiMmIzMTVmN2ZjZmU3MzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcJ6LA6bhex+W9+VD2IKe75y40hh
Dq87efvgWd3/IQYBqNDWII/qNPi6ERG5sFSxg10lWCeVsqvMYtdzS8nh0p0H7rWE
nHwoCmocBEzz77xMREfeGjJzZcE8IH0LEijCcKrDZVkXjVYPZTS0110eIMDttKLt
JFk9xit7qvS65XRkpoXbbTzr0CCEN9Ax39MbuYtnCOpZd3Vch4Kj+j1Tlva9U9GH
2xwzaV8WIkwvrnZYBkPrEuHB2nfj38Ox+iScMNRFUGVvEUxLAQ2C7zNe9rk+TGR3
YE1HqOq2ooBrp4WjBdcUiZHBFQUa94WVM7Si0TMcwEbbLos7TE7irAb/QQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFHatQyW/Eao8p6uNYrKzFff8/nNdMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvZHExREpiOFJxanlucTQxaXNyTVY5X3otYzEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF
ALlkADUwDQYJKoZIhvcNAQELBQADggEBAE857Lgv3vJRnvhuK991wsw6Zos7FTcp
j9ZpLbPozCyjd08IkhII91jppVzBneGKi0HYcv4OH8lq9r0QincVrMhKwfEjUW2/
Kr2ujYwNBwra+e7gu9OpQDJqFix9ohslG5l9znRU7fKi1yzaYUj3JH3gvlWpWLjc
HC6zYkutkwtBpdbDy5PMbeh8UB9TpvzSG76LZaR6vcYCMDblztmaJQfK4giI9bqO
TON9137ia506Hu3+hcHWv9qV/V9Y0lZH0JYM16UOXdZ0V5K0WydFPdsKXbmR2kX9
WGzNkQYAF7/38jvesMfF4jm0HmZZEb2o7/R1qjDI4nI5zYICCyn6HYM=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:45 2025 by rpki-client