Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/e4hO92WhWL4q0M1KqD1RRuJNc9s.roa
File: e4hO92WhWL4q0M1KqD1RRuJNc9s.roa (raw, json)
Hash identifier: /PySaAQwkO+ZeAnMYu5xKPa4Mb2XFlBdRMGWBdh+2Ug=
Subject key identifier: 7B:88:4E:F7:65:A1:58:BE:2A:D0:CD:4A:A8:3D:51:46:E2:4D:73:DB
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F6270478C2AD2A5AE323BF1997CC9AC
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/e4hO92WhWL4q0M1KqD1RRuJNc9s.roa
Signing time: Tue 25 Jun 2024 12:32:49 +0000
ROA not before: Tue 25 Jun 2024 12:32:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397200
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:70:47:8c:2a:d2:a5:ae:32:3b:f1:99:7c:c9:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b884ef765a158be2ad0cd4aa83d5146e24d73db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:61:97:eb:45:c7:de:6d:a2:34:e3:32:e0:20:
dc:68:bd:4a:e7:fe:62:54:bf:2f:b5:50:72:43:ed:
72:63:f0:09:a3:19:8c:69:2f:85:ee:35:28:c1:bb:
6c:21:0c:cc:6a:ee:dd:ab:22:15:98:b7:7a:a4:bb:
d2:65:63:59:ee:ca:b3:ff:62:29:76:c2:12:7f:61:
04:94:81:b5:df:7d:b1:b7:7a:04:73:b5:67:25:f6:
d7:78:50:68:1f:8e:a7:2f:4f:06:f8:7f:4c:f6:07:
76:1e:2b:65:22:cd:8f:19:06:7c:7d:61:68:69:f0:
df:da:df:05:c6:c7:27:c4:13:7e:02:19:a1:b7:7e:
86:33:d3:00:6a:98:c7:b0:55:b0:46:4b:eb:77:19:
56:1c:0a:60:c6:0f:b9:bf:5e:82:f2:15:ad:a3:25:
88:49:d0:f3:ef:4c:b1:3b:9d:2b:f9:be:c5:fd:03:
0b:3a:a4:54:42:d5:4d:e0:2c:88:dc:26:49:7e:15:
a9:e6:d3:ff:bf:50:08:de:36:33:e5:99:3e:2b:44:
c6:b2:34:87:59:6c:fd:c5:a4:36:8f:ca:a5:b3:2d:
08:c3:22:c9:f7:fc:43:7e:40:5a:75:a7:97:12:bc:
61:fe:d1:57:f7:dc:e2:9d:e4:55:b7:06:c1:aa:a7:
de:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:88:4E:F7:65:A1:58:BE:2A:D0:CD:4A:A8:3D:51:46:E2:4D:73:DB
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/e4hO92WhWL4q0M1KqD1RRuJNc9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
30:20:1d:01:89:f2:8b:a1:b8:f1:35:fd:40:c2:45:5e:86:b6:
33:86:55:23:9e:a0:5d:9c:7e:e0:0d:1e:56:ca:95:10:ae:93:
6a:63:02:96:ef:6b:4b:2e:f4:8d:14:98:6a:da:11:f6:d8:20:
13:3e:5d:b8:c3:2b:d6:22:58:31:aa:94:83:96:77:5a:70:2e:
9c:54:22:6b:2c:a8:f5:af:0c:1e:72:37:22:2a:b0:4f:6d:ea:
30:ea:3b:5a:bd:13:8f:f1:6f:d1:e3:aa:bc:26:2b:30:f3:23:
48:61:02:d2:08:fe:5d:57:76:09:de:e6:0c:3e:5e:ad:7b:6e:
42:be:97:68:15:63:89:8b:06:81:0e:47:08:d8:ee:d0:3e:70:
2b:fd:f7:0a:37:2f:ae:8c:d6:ce:c0:7b:d0:be:99:ef:35:34:
55:6c:3b:f5:9e:5c:bf:5b:66:4c:c7:2f:3f:88:15:19:a5:95:
7b:5f:1f:0d:ae:23:ea:9d:ee:e8:6d:de:84:ee:f2:6f:ae:5b:
0e:e8:e0:93:21:32:d6:47:e8:98:6d:fc:87:de:f5:07:bf:30:
97:31:ed:03:f6:19:c5:0a:d4:f6:e8:a5:7b:6f:86:a4:ec:59:
25:4f:23:29:81:92:54:39:ce:57:f6:92:a4:48:ba:d2:e4:34:
1c:11:ee:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:13:23 2024 by rpki-client on console-fra.rpki-client.org