Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/hSuXNSM9vuPra8lGOpC4K9KLFuw.roa
File: hSuXNSM9vuPra8lGOpC4K9KLFuw.roa (raw, json)
Hash identifier: 53bH8Gpa/E9kqVCnssqii0C7Zjnzns++QqFlALPGblU=
Subject key identifier: 85:2B:97:35:23:3D:BE:E3:EB:6B:C9:46:3A:90:B8:2B:D2:8B:16:EC
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBC66467339717C5B1072FEEC0F2FC
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/hSuXNSM9vuPra8lGOpC4K9KLFuw.roa
Signing time: Wed 01 Jan 2025 17:48:33 +0000
ROA not before: Wed 01 Jan 2025 17:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396573
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:c6:64:67:33:97:17:c5:b1:07:2f:ee:c0:f2:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=852b9735233dbee3eb6bc9463a90b82bd28b16ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4f:8a:2b:b1:a1:1a:75:86:1d:bb:5b:43:85:
99:e1:4f:5f:b1:f1:74:6b:f4:f3:0b:ca:e1:66:84:
e5:6f:05:22:34:bf:de:58:5b:34:77:c1:27:41:31:
dd:25:77:56:76:4c:02:a3:40:a7:53:69:16:5f:6f:
ae:ef:10:a2:da:5b:56:26:29:ba:b4:c6:ef:f4:ed:
93:95:a7:bc:bc:85:57:1c:36:4a:a5:70:9b:4b:f4:
00:cd:12:c4:af:b4:58:a8:90:a3:c0:4a:a8:3d:51:
4d:2f:cf:5a:6d:bc:34:de:c2:01:49:80:ec:f9:a8:
21:51:2d:ab:71:b8:57:3b:50:30:ae:03:a7:14:8f:
e3:58:64:a8:70:e9:01:a4:2c:66:41:8a:56:59:17:
d0:3a:f8:fe:aa:82:aa:e6:75:20:98:70:4d:14:6c:
32:61:2c:3d:57:de:94:98:34:71:14:58:3b:fa:b4:
48:15:c0:5d:40:f3:fc:ee:41:95:cf:4a:d3:c7:95:
aa:a1:cd:f8:00:36:04:5e:41:5a:62:0c:06:34:2a:
82:db:e4:a9:31:98:8a:36:ff:ee:18:83:a4:85:d7:
d1:04:af:8d:1f:6b:dc:0c:b0:fc:e4:d9:6b:4b:ba:
cc:b8:b9:aa:6d:51:fc:83:68:c6:21:2c:b0:b9:3c:
b0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2B:97:35:23:3D:BE:E3:EB:6B:C9:46:3A:90:B8:2B:D2:8B:16:EC
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/hSuXNSM9vuPra8lGOpC4K9KLFuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
21:a2:1b:3c:5a:ef:e3:74:ce:2c:92:20:8c:90:89:da:52:a1:
87:c7:a1:74:62:2f:2c:57:8f:f7:e2:ce:c7:b7:82:78:18:18:
d7:9b:41:f5:5e:8c:d2:c1:de:d2:af:7f:bd:58:f2:f4:da:f1:
f1:17:cc:9d:16:67:77:cd:6a:e0:b4:1f:12:5c:db:89:54:45:
dc:50:ba:52:87:0e:1e:3e:ac:4e:9d:d0:b7:2b:07:98:1d:2e:
0d:c6:e9:cc:0c:34:41:b1:12:52:70:ff:d3:d5:85:90:4f:5c:
6f:6b:75:6d:03:95:94:07:81:95:9a:21:f7:62:6c:60:1d:24:
a2:69:85:4d:14:23:36:3e:3c:b1:65:6b:2b:4b:85:51:90:61:
38:6c:2e:ad:ad:38:2d:6a:6f:d2:7a:2a:22:f8:7a:be:33:16:
1c:8d:f2:5c:1c:f5:ac:e7:ea:b6:7d:a1:ee:10:e6:dc:de:5a:
af:6b:ca:db:64:f5:44:21:b0:eb:14:9d:90:36:97:07:3a:3b:
dd:d5:cc:a9:3c:30:dc:03:c0:7d:78:e8:02:cf:10:dd:96:68:
ec:54:39:61:72:ac:0c:1f:1c:8d:0c:6f:d5:6e:7d:2d:5c:49:
bd:dd:50:13:37:b8:77:46:24:04:2e:c3:55:5e:0b:93:ce:ab:
4d:9f:9b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:34 2025 by rpki-client