Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/gWONILTE_cc20_lVeB1e_O2_3AY.roa
File: gWONILTE_cc20_lVeB1e_O2_3AY.roa (raw, json)
Hash identifier: h0EnTOvRaZhphfMFbda8QpNUGcALMZgKlNtdwTi1SVk=
Subject key identifier: 81:63:8D:20:B4:C4:FD:C7:36:D3:F9:55:78:1D:5E:FC:ED:BF:DC:06
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBB1B4BF5336E71BF389997BE5F1CC
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/gWONILTE_cc20_lVeB1e_O2_3AY.roa
Signing time: Wed 01 Jan 2025 17:48:27 +0000
ROA not before: Wed 01 Jan 2025 17:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36621
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:b1:b4:bf:53:36:e7:1b:f3:89:99:7b:e5:f1:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81638d20b4c4fdc736d3f955781d5efcedbfdc06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e1:33:c1:9b:f0:f7:ab:c5:7c:08:09:32:2f:
38:dc:ad:c4:3e:d8:a1:73:b3:43:8e:89:04:0d:3c:
e2:74:69:24:d8:c5:38:dc:37:77:73:a4:fd:f0:70:
c7:7f:63:a4:a7:20:d9:25:d8:86:38:76:3e:ea:b6:
c7:ec:57:a7:69:53:12:00:20:4f:2d:1f:4f:b3:a4:
ea:91:70:3a:6b:6d:f8:c3:9e:fe:bf:d3:75:0c:ee:
98:5a:7d:1e:ac:65:71:d6:eb:48:8b:07:41:8c:07:
50:da:42:20:6d:7e:db:b9:ac:99:24:34:29:14:4c:
f6:82:f3:c6:0c:c1:27:45:77:6b:81:49:0c:e0:28:
88:c9:0e:9e:2c:15:54:35:97:9b:23:b2:c4:98:a2:
1d:02:9c:63:19:89:71:00:c9:f1:90:80:1b:1d:c7:
8e:8e:f5:06:70:21:0b:9a:ca:1a:e8:28:83:51:67:
03:c4:18:d5:91:a5:60:a1:e8:5e:30:26:14:1b:b6:
94:b3:42:b1:c3:23:7e:e4:aa:36:97:c5:58:52:e4:
88:9c:d7:6c:50:81:68:ba:37:83:92:82:8e:5d:b9:
4d:2b:14:7d:4a:7a:06:84:4e:af:96:4f:7f:a9:bc:
fc:91:f1:1a:d0:e9:d6:9d:d7:e1:19:d0:d4:d1:14:
95:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:63:8D:20:B4:C4:FD:C7:36:D3:F9:55:78:1D:5E:FC:ED:BF:DC:06
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/gWONILTE_cc20_lVeB1e_O2_3AY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
32:41:51:94:7c:6a:0d:70:9d:79:83:84:ca:0d:aa:e8:23:75:
2c:55:00:4e:08:84:19:a4:0c:db:77:a1:20:ba:b5:52:2d:91:
8f:07:2d:76:fb:a5:f5:fb:55:71:04:8a:53:39:52:fd:df:05:
2e:80:7c:29:ea:6d:c7:b1:e0:2b:0e:ee:a5:13:3e:fd:3c:33:
85:54:e3:e1:58:fd:c7:d9:6d:79:c0:71:79:02:d1:d6:3d:02:
f3:66:a8:9f:8f:2e:cc:fd:81:d4:21:af:b7:ef:85:22:64:ed:
62:33:a3:53:87:a4:d5:80:97:ee:d0:44:89:cb:d8:14:f5:bf:
09:15:36:8b:6f:8f:7e:e2:17:8a:0d:74:ce:09:b3:14:c9:e0:
fa:3b:6b:1f:2c:46:08:93:6d:13:b0:69:0b:2d:dc:60:14:e6:
a5:a5:59:a0:ba:9c:92:06:3f:25:d5:4e:68:c5:09:6f:3f:bb:
f0:4f:2d:70:87:f3:24:8e:d3:b8:a3:c6:48:e7:91:44:0c:18:
e4:f7:d4:c3:6a:3c:6f:3a:2b:df:68:fc:a6:17:b7:1e:a5:9c:
f3:9f:5b:e3:d7:3c:4b:ae:f1:7d:3e:ce:fe:de:7a:08:71:a2:
18:b0:62:f5:08:ee:9b:e3:6a:ba:80:be:30:84:9c:c2:70:51:
2e:eb:2b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:18:51 2025 by rpki-client