Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/kiDF9C7kqJSwag0GbUxDqJzd6wE.roa
File: kiDF9C7kqJSwag0GbUxDqJzd6wE.roa (raw, json)
Hash identifier: 0P8wJ1sOuGlKZC+T3OeR/WZZJEiPm/EExIzxxHH4dBE=
Subject key identifier: 92:20:C5:F4:2E:E4:A8:94:B0:6A:0D:06:6D:4C:43:A8:9C:DD:EB:01
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBB5335BD2B16EABE450A65F4FEAF3
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/kiDF9C7kqJSwag0GbUxDqJzd6wE.roa
Signing time: Wed 01 Jan 2025 17:48:28 +0000
ROA not before: Wed 01 Jan 2025 17:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36630
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:b5:33:5b:d2:b1:6e:ab:e4:50:a6:5f:4f:ea:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9220c5f42ee4a894b06a0d066d4c43a89cddeb01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:47:96:29:d5:78:79:a1:39:a3:cf:ba:58:f0:
89:c8:e5:39:ff:08:9f:df:bb:b2:75:36:7d:26:d3:
d0:6b:f3:27:d6:0b:90:d2:55:ee:45:24:18:ca:90:
aa:13:60:9d:44:7d:cc:3f:32:bf:cd:c4:57:a5:52:
b9:05:f7:6b:24:a8:da:4b:4e:ea:c9:fc:59:70:33:
ef:b1:7c:16:97:f4:ef:19:be:63:55:a3:41:d9:d4:
6e:87:5c:40:43:9c:df:da:b8:1d:32:b4:d8:32:12:
1c:ef:60:f4:a1:14:e2:fd:d6:84:e5:dd:72:81:aa:
e6:c3:55:a8:05:af:90:0e:89:4d:e0:e7:25:99:b8:
34:93:7b:2f:75:11:8c:9f:a7:da:a4:40:f1:bf:67:
96:30:77:2c:b9:49:7e:b7:0f:a7:8a:91:b8:26:d7:
e6:39:cf:43:30:da:68:7f:5b:1c:e3:f1:3b:43:8c:
c5:23:c4:80:86:68:cb:0b:82:fe:2b:14:59:c0:50:
cc:29:66:a6:66:34:28:37:02:c5:e9:56:a1:03:b1:
89:d3:c2:47:e5:08:4f:04:56:2c:91:ad:1b:f8:62:
d7:c7:46:b3:8c:38:2d:a3:c0:d1:f4:ab:63:94:b5:
90:60:ed:cc:80:54:5b:6e:49:a3:d2:cb:03:1d:a1:
90:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:20:C5:F4:2E:E4:A8:94:B0:6A:0D:06:6D:4C:43:A8:9C:DD:EB:01
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/kiDF9C7kqJSwag0GbUxDqJzd6wE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
74:d1:c0:1e:6c:45:d1:3c:7e:fb:42:e0:a2:c9:ef:3d:78:dd:
df:ae:36:8b:10:04:4b:5b:e2:f7:5a:e8:91:7e:aa:8b:73:32:
be:00:20:81:a7:d5:5c:19:78:4d:d8:0c:c5:5d:00:12:d3:8a:
13:be:93:9c:ec:1f:90:fe:26:f5:ee:c3:16:4a:2e:fb:ae:76:
47:1c:f8:68:b7:9d:b6:9c:f8:c3:26:2d:2e:75:01:c5:b5:6d:
da:c4:27:9f:e2:4b:c0:ce:a1:26:41:d5:ba:e2:81:80:c8:b8:
22:e9:b5:be:12:4f:d5:62:03:c5:41:0b:d1:0d:95:b1:c8:7b:
11:bc:d4:6c:ba:e7:8c:c7:5b:e2:c9:31:90:67:17:0b:d0:b8:
2a:47:e4:aa:2b:20:f2:31:ac:7a:d2:5c:71:28:b5:1a:43:5f:
c0:d9:46:af:5b:7a:28:2a:3f:6a:e9:de:e5:bf:46:be:23:99:
24:0a:b1:cb:5c:97:99:25:99:8a:f4:c0:6e:6a:a4:16:e0:72:
4c:ff:da:4c:25:2f:41:a3:00:dc:e5:41:87:95:df:13:f8:d0:
09:f5:3b:0a:4d:d9:2a:a2:b2:ec:88:00:d6:fb:52:15:2d:7b:
e8:b7:12:5e:4c:35:8e:23:fc:de:1a:58:dd:f6:2a:c9:c9:5d:
22:79:d8:21
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQi+7UzW9KxbqvkUKZfT+rzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjUwMTAxMTc0ODI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjIwYzVmNDJlZTRhODk0YjA2YTBkMDY2ZDRjNDNhODljZGRlYjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EeWKdV4eaE5o8+6WPCJyOU5/wif
37uydTZ9JtPQa/Mn1guQ0lXuRSQYypCqE2CdRH3MPzK/zcRXpVK5BfdrJKjaS07q
yfxZcDPvsXwWl/TvGb5jVaNB2dRuh1xAQ5zf2rgdMrTYMhIc72D0oRTi/daE5d1y
garmw1WoBa+QDolN4Oclmbg0k3svdRGMn6fapEDxv2eWMHcsuUl+tw+nipG4Jtfm
Oc9DMNpof1sc4/E7Q4zFI8SAhmjLC4L+KxRZwFDMKWamZjQoNwLF6VahA7GJ08JH
5QhPBFYska0b+GLXx0azjDgto8DR9KtjlLWQYO3MgFRbbkmj0ssDHaGQEwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFJIgxfQu5KiUsGoNBm1MQ6ic3esBMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEva2lERjlDN2txSlN3YWcwR2JVeERxSnpkNndFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF
ALlkADUwDQYJKoZIhvcNAQELBQADggEBAHTRwB5sRdE8fvtC4KLJ7z143d+uNosQ
BEtb4vda6JF+qotzMr4AIIGn1VwZeE3YDMVdABLTihO+k5zsH5D+JvXuwxZKLvuu
dkcc+Gi3nbac+MMmLS51AcW1bdrEJ5/iS8DOoSZB1brigYDIuCLptb4ST9ViA8VB
C9ENlbHIexG81Gy654zHW+LJMZBnFwvQuCpH5KorIPIxrHrSXHEotRpDX8DZRq9b
eigqP2rp3uW/Rr4jmSQKsctcl5klmYr0wG5qpBbgckz/2kwlL0GjANzlQYeV3xP4
0An1OwpN2SqisuyIANb7UhUte+i3El5MNY4j/N4aWN32KsnJXSJ52CE=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:46 2025 by rpki-client