Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/m8z4s8moeQnWXhH_tEzm2d004-Q.roa
File: m8z4s8moeQnWXhH_tEzm2d004-Q.roa (raw, json)
Hash identifier: gvakhuCrEAXuKSos3LW+4/CrWAxLjr2esnrZwidgIHc=
Subject key identifier: 9B:CC:F8:B3:C9:A8:79:09:D6:5E:11:FF:B4:4C:E6:D9:DD:34:E3:E4
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBB929A5D5B21584F8DA71D6144FE0
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/m8z4s8moeQnWXhH_tEzm2d004-Q.roa
Signing time: Wed 01 Jan 2025 17:48:29 +0000
ROA not before: Wed 01 Jan 2025 17:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396544
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:b9:29:a5:d5:b2:15:84:f8:da:71:d6:14:4f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bccf8b3c9a87909d65e11ffb44ce6d9dd34e3e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1d:d3:71:f9:f8:6b:54:09:1d:28:85:6b:85:
4b:e5:44:48:ec:b0:3b:13:1f:00:1f:65:f9:12:92:
75:4c:b3:06:f2:f8:b3:4c:59:de:0f:9b:70:c3:16:
f7:09:fa:57:4e:e4:0b:52:19:81:86:a0:bd:53:d3:
c0:c3:84:04:68:59:93:e3:2a:23:cb:96:84:4a:01:
93:e4:a7:69:85:bb:1f:2d:6b:83:92:bd:7b:38:51:
57:1c:81:e4:df:65:53:c1:55:14:b3:c0:46:58:2d:
9e:e4:40:23:d8:5f:29:7e:24:5b:16:d6:42:06:b7:
67:3e:e6:85:f2:d2:90:58:91:5b:6a:50:13:07:bb:
25:a7:a0:9d:d7:77:91:d3:e4:8e:76:82:86:a8:64:
de:ff:96:ad:6f:50:3f:4c:fc:7a:d4:b5:9e:aa:87:
9c:36:a8:41:96:81:0d:3c:ad:87:f7:df:02:c2:f5:
72:95:d5:28:4b:51:02:4e:a3:a5:48:3e:0c:c9:c7:
f5:ef:de:e1:3e:61:41:2f:ff:1a:46:63:5e:ac:78:
ab:db:44:3d:3c:0c:cb:07:1d:3e:8f:6a:84:f6:21:
34:36:11:a1:2d:6d:d0:40:b6:d4:ed:b4:f8:96:82:
e3:14:fd:d5:21:15:39:93:96:f1:59:a3:9e:c0:2c:
67:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CC:F8:B3:C9:A8:79:09:D6:5E:11:FF:B4:4C:E6:D9:DD:34:E3:E4
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/m8z4s8moeQnWXhH_tEzm2d004-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
7b:6d:58:fc:48:ef:2d:6c:4a:73:a7:58:2a:d4:78:01:5b:44:
1a:a2:d3:d7:ff:ef:f9:7b:bb:a7:bf:bf:2f:6f:59:74:1b:70:
85:af:46:58:18:c3:2f:36:14:c1:6e:0d:02:0a:5f:30:33:6d:
eb:a5:c2:5d:2f:b8:e8:f9:14:fe:f9:eb:7d:de:f8:01:a8:d0:
ba:f0:0d:2a:40:a4:96:b2:4e:7f:18:d2:0a:27:13:db:ad:1c:
a5:30:20:4c:68:f8:64:68:15:13:1e:fa:cc:49:20:90:29:aa:
c5:7a:55:7d:60:7b:3c:75:d9:ab:a7:d0:09:3a:83:e6:8b:e6:
19:2f:ad:59:e8:5f:c0:98:99:d1:77:d5:63:81:63:ca:d4:5e:
e7:dc:60:ad:1c:5b:64:be:94:63:3b:8c:65:fb:4d:6d:2c:47:
c8:78:2c:8f:69:28:68:cc:f8:b7:dc:aa:d7:96:91:cd:d1:ac:
f9:22:ca:da:de:22:57:65:4d:94:09:5e:1e:a9:e6:0d:13:fa:
1f:8b:a4:66:02:e5:0e:2a:bc:ff:d7:da:cb:aa:e0:a7:23:a7:
92:c5:4a:a0:e1:c2:fe:8a:77:e1:be:a3:43:3e:30:6b:ac:6f:
fc:c1:18:33:ae:88:5e:10:bb:0a:3f:e1:d8:7d:00:7e:9d:0f:
e9:6c:60:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:12 2025 by rpki-client