Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/la183hkgwVoKZw3v4pDuPx9KPpg.roa
File: la183hkgwVoKZw3v4pDuPx9KPpg.roa (raw, json)
Hash identifier: uD4qkmYJApIvjGpBxnud6oOQbJ0kNyDxfCpJvUOb/jE=
Subject key identifier: 95:AD:7C:DE:19:20:C1:5A:0A:67:0D:EF:E2:90:EE:3F:1F:4A:3E:98
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBC5BF9C906BC9F2DD3C17353A93A4
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/la183hkgwVoKZw3v4pDuPx9KPpg.roa
Signing time: Wed 01 Jan 2025 17:48:33 +0000
ROA not before: Wed 01 Jan 2025 17:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396571
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:c5:bf:9c:90:6b:c9:f2:dd:3c:17:35:3a:93:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95ad7cde1920c15a0a670defe290ee3f1f4a3e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1b:87:53:f7:91:8c:6a:20:05:45:73:34:8e:
ce:e7:a8:82:5f:f3:3c:c9:32:77:cf:51:4e:ab:de:
c1:3a:fd:7b:54:87:12:97:21:ab:55:ec:e1:fc:72:
69:85:fe:75:02:8e:b0:87:6b:1a:ee:bb:e4:1b:4d:
84:b2:b3:e7:a5:d1:e9:86:29:10:08:e4:34:13:3f:
46:ca:a0:87:8b:a6:dd:c0:4d:1a:92:a4:83:28:35:
eb:a1:c0:d6:5b:7f:4d:1e:dc:da:0a:73:39:7d:2d:
ec:11:6e:4e:0c:5e:48:4b:56:f5:ce:4a:3a:21:33:
3a:99:69:22:bf:33:0e:28:d1:13:99:ff:04:89:35:
d2:7d:78:87:68:9d:86:46:42:02:e9:f7:f4:7c:44:
00:38:c0:6c:b1:16:07:12:3d:a1:dc:1b:d7:8d:c5:
ac:27:2f:89:7b:41:e3:f1:12:e5:46:f5:ef:4c:80:
9f:1c:de:d3:72:42:1f:2e:19:a2:3b:42:3a:9a:f9:
c0:93:d0:7f:0b:9a:05:aa:c4:bf:26:3f:e8:65:42:
ef:2b:bd:dc:94:9f:96:96:81:b1:18:a1:a6:cf:e2:
9a:96:66:88:2b:72:73:a0:48:44:26:42:25:21:26:
d8:b7:9b:4b:08:65:65:53:0b:2a:cd:b7:36:0e:91:
01:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AD:7C:DE:19:20:C1:5A:0A:67:0D:EF:E2:90:EE:3F:1F:4A:3E:98
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/la183hkgwVoKZw3v4pDuPx9KPpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
9c:8b:99:d8:f7:f6:72:82:2c:ff:48:cc:35:30:14:d7:8a:7d:
0c:f3:7f:8a:c8:14:37:75:c5:4a:24:c5:c1:07:21:4b:b2:12:
21:9c:a3:15:46:0c:20:94:60:f0:37:8a:4d:e1:b8:1c:87:3e:
8f:57:48:04:8e:cd:48:9c:de:5a:59:8c:c7:73:ed:f9:05:ec:
b0:e4:47:77:98:6d:c0:8b:7d:9c:b8:ac:4f:07:5c:78:9e:ab:
ff:cd:2c:74:d3:5f:19:29:3f:9e:27:1a:d8:ca:17:10:ac:d5:
1d:e1:bf:37:41:f3:32:10:ab:a6:03:96:b0:62:c5:3e:24:58:
28:53:44:be:d3:b1:95:a9:86:52:53:0c:a3:51:13:d6:2e:db:
18:44:07:8c:29:f5:17:23:c1:49:6d:7e:86:78:bb:50:e8:77:
48:28:79:1a:a8:f8:22:8d:e8:10:d6:b5:84:26:c1:5a:54:f5:
75:e5:3c:1a:ce:18:fb:45:87:dc:24:28:0d:b8:17:d8:ff:20:
45:e5:af:d0:83:60:03:b5:b7:be:d0:f8:39:8e:ce:29:f5:97:
fb:29:a5:1d:9b:87:de:2a:a0:5d:f4:ad:5a:fd:67:87:69:e5:
1a:ee:5b:6f:e1:b5:82:1e:6b:c6:c8:9f:5c:d4:56:63:41:b3:
e8:e7:56:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:15:58 2025 by rpki-client