Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/kYQ5vCA37jUVGlliaq8wI0TASc4.roa
File: kYQ5vCA37jUVGlliaq8wI0TASc4.roa (raw, json)
Hash identifier: Qp0xm/y8XUedoTv96qg2eNQplK6qqZ8WV40WM1wj5mU=
Subject key identifier: 91:84:39:BC:20:37:EE:35:15:1A:59:62:6A:AF:30:23:44:C0:49:CE
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBD1BA769304FC289F595A309B2816
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/kYQ5vCA37jUVGlliaq8wI0TASc4.roa
Signing time: Wed 01 Jan 2025 17:48:36 +0000
ROA not before: Wed 01 Jan 2025 17:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396599
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:d1:ba:76:93:04:fc:28:9f:59:5a:30:9b:28:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=918439bc2037ee35151a59626aaf302344c049ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b5:bf:66:20:97:b9:f4:cd:aa:1a:9c:7b:86:
01:05:a8:7e:ac:95:7c:51:a9:29:d4:4e:85:50:c1:
13:7a:5c:eb:46:58:77:09:d9:a4:b3:5b:44:5c:41:
ad:a3:19:9f:cc:5f:05:46:2a:71:05:76:b1:1d:69:
e9:b6:68:e8:be:95:5b:59:c1:41:68:91:e6:3d:c8:
b1:77:5c:70:31:95:9b:40:9e:70:d7:3a:08:8d:ee:
07:34:0b:e5:c1:30:12:2b:b0:5a:90:b5:83:5a:9c:
92:d6:c9:99:e2:bd:e3:55:b9:9e:dc:32:02:f7:01:
7b:47:92:58:70:fb:b2:47:6a:49:dc:6f:2a:4e:96:
69:6d:35:08:7e:03:fe:81:d8:21:08:40:00:44:52:
51:81:2e:45:24:ce:a1:0b:e4:af:fe:91:56:38:10:
42:9f:08:57:8e:4d:b4:37:5e:5d:3a:b0:7d:cd:78:
a6:0e:38:ad:0f:67:6c:87:29:68:29:1f:1e:14:ee:
b0:f0:32:9d:b6:44:f8:73:a5:ca:ac:a0:af:21:3e:
38:eb:ab:17:8d:31:fb:c0:53:51:d6:c8:2a:01:a9:
20:bf:01:fb:44:c7:71:e3:b9:39:2a:71:a8:de:e8:
af:1f:97:9d:59:3d:87:a7:3f:57:c5:54:6f:9b:99:
53:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:84:39:BC:20:37:EE:35:15:1A:59:62:6A:AF:30:23:44:C0:49:CE
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/kYQ5vCA37jUVGlliaq8wI0TASc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
7d:35:c3:24:c9:9f:f3:49:73:5f:1a:7a:ec:93:1a:db:6b:23:
c2:4f:39:ec:15:14:90:9e:e9:1a:e1:7c:dd:e0:f8:2b:d5:ab:
fa:20:9d:67:fb:ba:4f:ee:a1:06:12:17:98:ff:99:d5:eb:22:
a9:c7:00:0c:59:42:de:5a:25:61:2f:d2:4f:ac:77:c2:2f:2e:
32:49:2b:e6:4e:59:b0:ed:be:53:ab:f1:87:03:f1:51:77:74:
d1:80:b5:7a:5e:4c:d7:86:b6:9a:65:52:15:99:9d:2e:31:7f:
e8:cf:2b:67:fc:22:90:3e:24:a0:5d:c4:7e:61:95:bd:3b:71:
ea:4b:c3:b6:9a:d2:26:c7:53:08:b2:12:8e:4f:1d:65:7d:9a:
08:a5:20:33:2e:2d:43:b3:ed:89:d5:7e:65:7e:53:b3:2d:e0:
f4:55:94:41:65:64:cc:02:c0:91:4d:89:d3:19:5a:12:6b:8e:
a2:d8:0f:e6:77:c7:f6:b6:96:5c:40:d2:94:dd:2c:77:7a:f3:
26:11:2c:a3:86:1e:0f:61:55:e9:c3:30:dc:52:5b:ee:26:b8:
25:7f:86:e4:91:04:57:b3:99:99:b8:aa:96:c8:7f:05:d1:91:
14:5f:02:83:3a:e3:94:28:ce:3e:81:d7:f3:fa:05:bb:f9:c3:
a9:20:0f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:07 2025 by rpki-client