Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/i7prFF-hQQ5mrqpnrNtfmUE-V90.roa
File: i7prFF-hQQ5mrqpnrNtfmUE-V90.roa (raw, json)
Hash identifier: Uq3hM/jaH7ijhxZpY9K1J0YbCFmHQpvGtZqKZOvjDSM=
Subject key identifier: 8B:BA:6B:14:5F:A1:41:0E:66:AE:AA:67:AC:DB:5F:99:41:3E:57:DD
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBAE9D6713B984238388059A0515C2
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/i7prFF-hQQ5mrqpnrNtfmUE-V90.roa
Signing time: Wed 01 Jan 2025 17:48:27 +0000
ROA not before: Wed 01 Jan 2025 17:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 27544
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 19:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:ae:9d:67:13:b9:84:23:83:88:05:9a:05:15:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8bba6b145fa1410e66aeaa67acdb5f99413e57dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:79:8a:e7:02:7a:ba:52:1d:30:7a:5d:5d:0d:
80:32:b0:c6:00:db:79:e8:74:83:5c:62:c2:4e:14:
57:e2:9c:a8:86:d8:e9:17:75:b2:5c:91:dc:5f:ff:
f7:8c:32:2e:fe:9c:56:ec:6f:c5:2b:f3:c6:31:c8:
72:50:c5:4d:74:1c:f2:9d:eb:b4:ac:98:d0:9e:60:
3c:9a:3f:e7:b1:77:7e:38:5f:af:ab:58:95:cf:f3:
d4:fa:18:dc:8f:92:68:97:4e:5b:62:70:44:61:8a:
a4:d8:6b:9f:31:aa:dc:c5:ed:7b:07:a3:8c:ae:28:
c7:00:47:94:68:40:6e:00:7a:fc:3e:16:e9:33:af:
c5:28:2f:db:49:ec:9f:02:53:71:2e:47:aa:f5:eb:
ff:28:b1:85:6d:4f:f0:6a:f1:92:0e:f4:2e:b0:0a:
e3:67:9e:d9:57:e5:89:1b:14:46:6c:13:9f:83:71:
74:9e:3b:ad:e1:db:f6:14:66:1c:c0:76:f3:6e:24:
c4:e3:ef:e5:a3:0a:cc:b7:a0:f4:63:5e:93:b5:0d:
4d:07:41:4e:8b:46:40:08:6f:c5:fa:1c:d7:69:6c:
0f:d5:1b:f8:dd:51:ab:cf:9c:cf:2b:29:93:b3:fa:
ef:f5:1b:c2:99:6c:d2:7e:c9:fc:48:27:ad:1b:4c:
b4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BA:6B:14:5F:A1:41:0E:66:AE:AA:67:AC:DB:5F:99:41:3E:57:DD
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/i7prFF-hQQ5mrqpnrNtfmUE-V90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
7c:d2:bf:42:76:b7:36:ec:81:42:3a:b9:d2:28:cb:35:68:49:
98:43:ec:b2:3f:f6:b0:cb:7e:43:9f:ef:f7:6d:6e:9e:51:80:
0f:3d:a4:71:55:05:65:91:fc:df:9c:76:0e:c8:4a:89:0e:8c:
c4:32:0f:e3:32:39:19:8d:08:ab:42:ca:66:20:48:3c:be:68:
a7:8f:08:db:92:c8:c6:26:ad:9d:48:41:f1:78:10:94:33:47:
88:e0:c5:d8:e1:4b:a9:2b:a8:f4:ce:25:d4:45:aa:e2:f4:77:
66:9e:8e:a5:46:cb:ad:9d:a0:09:de:af:3b:c9:b8:1e:45:64:
9b:b1:a9:bd:81:e5:84:53:3b:37:7c:c7:60:81:e7:57:58:cd:
43:fa:5a:69:ef:bd:f9:05:5a:fe:99:32:31:da:65:35:56:e1:
ee:80:b9:20:a5:bb:0b:0a:f0:6a:f9:f6:51:6a:d8:25:eb:bc:
8f:87:7a:86:15:93:c1:74:8b:83:e5:67:9a:2c:1f:34:96:05:
91:3b:ab:25:44:f8:90:07:b4:76:1c:04:5f:9d:54:4b:70:9f:
d1:13:32:8e:6b:4a:3f:fc:e0:0c:d4:85:b1:4e:ce:15:5b:fc:
13:32:d6:d9:2a:33:75:82:14:e2:58:95:11:81:52:09:54:56:
7d:1c:1d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 06:10:53 2025 by rpki-client