Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/jz_dZhaekhwPpaIe5xpVYlCr5X0.roa
File: jz_dZhaekhwPpaIe5xpVYlCr5X0.roa (raw, json)
Hash identifier: +vVlrQrso7Z9cCD7h2JJcPfsYtumfnj3p8P74zqrxdk=
Subject key identifier: 8F:3F:DD:66:16:9E:92:1C:0F:A5:A2:1E:E7:1A:55:62:50:AB:E5:7D
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBB279077D90D61609997B549D9D49
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/jz_dZhaekhwPpaIe5xpVYlCr5X0.roa
Signing time: Wed 01 Jan 2025 17:48:28 +0000
ROA not before: Wed 01 Jan 2025 17:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36623
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:b2:79:07:7d:90:d6:16:09:99:7b:54:9d:9d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f3fdd66169e921c0fa5a21ee71a556250abe57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a0:00:39:4a:cf:2c:91:0d:8b:69:59:b3:7d:
44:51:19:86:28:ea:da:31:80:e8:b2:de:d5:9d:41:
35:a7:46:43:87:f0:9d:b9:a6:41:18:5c:8f:d6:ff:
b1:2e:c2:fd:21:d4:11:ea:31:69:81:20:03:33:94:
bf:9f:e8:44:6c:2f:02:63:3c:33:44:40:39:9a:22:
fc:17:a7:c4:54:5d:d4:95:00:74:ed:b6:59:08:d9:
a3:55:4b:84:e5:59:39:4b:ae:ff:a0:48:e2:52:26:
ba:e2:c5:4e:f2:55:11:20:97:4f:73:3e:a9:2e:88:
2d:3d:4d:e0:55:80:59:dd:01:e6:82:c4:42:59:05:
01:47:41:ee:11:8f:c7:f2:b4:84:99:99:f4:1d:c1:
2c:6e:3a:ff:d4:13:4c:8d:30:13:6b:66:94:c3:9f:
f7:06:1b:d6:c8:7b:d3:7f:75:13:95:be:2c:63:40:
15:97:a5:4c:74:8d:ba:bd:38:c9:a2:2b:e0:fb:20:
fd:18:4f:70:03:ce:12:97:07:d0:d7:9a:69:3c:dd:
f6:20:da:03:ae:0b:2a:c9:8b:db:31:21:57:41:ad:
93:40:c3:06:a2:61:4f:ab:9b:eb:d8:27:ea:49:11:
4b:aa:6d:31:02:6a:f4:56:86:f8:6f:d7:98:d5:ab:
79:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:3F:DD:66:16:9E:92:1C:0F:A5:A2:1E:E7:1A:55:62:50:AB:E5:7D
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/jz_dZhaekhwPpaIe5xpVYlCr5X0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
5e:79:33:a1:93:08:61:07:1f:a2:9c:39:5a:a7:cc:15:0e:a8:
9b:01:44:48:de:03:79:05:05:9f:ef:4b:d3:ff:10:93:7a:a9:
cc:98:e7:83:bb:b1:01:b0:89:90:f9:41:f5:5f:79:bf:57:27:
7c:2f:45:69:5e:97:c8:84:ad:b3:91:33:1a:af:84:fa:94:70:
b2:c7:63:ef:6e:83:a0:e8:9a:b3:26:6e:2c:e1:79:46:2a:0f:
57:5e:ca:4d:31:39:75:04:de:71:b9:6f:54:0b:df:c5:3d:95:
37:61:e5:ea:0e:24:3f:59:f9:bf:1c:05:12:05:db:db:e8:61:
ee:03:8c:bd:67:c5:bc:5e:4d:92:cd:56:0e:a0:85:eb:9a:49:
4a:8b:56:a2:58:bd:4c:a2:d0:bf:4f:c5:20:2a:10:0a:f7:f3:
7b:31:a1:16:2c:4e:cd:18:ee:9a:4a:5f:cb:03:b2:88:ef:93:
83:6f:98:fb:74:ce:47:54:cd:bd:6b:4d:cb:ab:46:64:39:f5:
aa:77:f6:e8:0e:14:2d:d7:7a:6c:20:d8:83:52:ae:ef:18:22:
f9:15:6e:59:55:df:7d:35:d6:f7:a1:be:d9:51:59:df:b7:17:
78:e8:eb:20:6c:70:f9:25:de:8c:ef:71:e7:c2:11:23:45:3a:
3c:ff:d7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:54 2025 by rpki-client