Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/mqGCXkh-AqItjjxYSDBL7fQlV0c.roa
File: mqGCXkh-AqItjjxYSDBL7fQlV0c.roa (raw, json)
Hash identifier: Kbzy9OzCERwwhAVB7fDD5acpeBms/u11BIQMQTbRCeI=
Subject key identifier: 9A:A1:82:5E:48:7E:02:A2:2D:8E:3C:58:48:30:4B:ED:F4:25:57:47
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBE235C5C61B2004D7E36615695589
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/mqGCXkh-AqItjjxYSDBL7fQlV0c.roa
Signing time: Wed 01 Jan 2025 17:48:40 +0000
ROA not before: Wed 01 Jan 2025 17:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397207
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:e2:35:c5:c6:1b:20:04:d7:e3:66:15:69:55:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9aa1825e487e02a22d8e3c5848304bedf4255747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5a:75:08:d5:b0:53:d9:6c:45:1f:45:3d:fb:
d8:a9:8f:98:0e:e9:eb:4d:39:49:1e:ae:fb:15:1f:
16:26:ab:32:e6:b1:7d:8c:75:ee:c4:27:ac:b7:8d:
ba:98:84:2f:6a:51:6e:33:40:dc:65:d9:0a:d6:db:
cd:99:e7:57:cb:20:d0:97:09:0e:43:96:b3:f9:d6:
06:df:43:e0:88:e4:ce:55:34:a2:60:29:4a:10:23:
f5:e1:21:71:6e:8b:51:6e:26:eb:0d:43:ba:18:a3:
6d:02:9b:14:d6:e6:68:94:cb:90:c0:e9:62:2b:da:
3d:51:00:23:24:5a:25:6b:14:92:a8:c1:77:b8:e5:
78:95:a6:6c:cf:5d:48:21:6d:52:d5:44:15:9d:63:
64:7e:f7:ef:52:88:ed:55:98:89:99:4c:10:97:75:
21:fe:3c:af:4b:eb:e9:cb:09:71:11:2a:55:27:1f:
ff:91:a2:45:65:ab:33:e2:fb:bc:65:30:37:9e:94:
4a:13:16:c0:3e:e2:af:7e:4a:56:f5:9f:65:a4:48:
be:2b:4b:24:68:cb:f6:d8:ca:a0:c7:06:08:e6:8c:
f3:60:ba:bf:1e:b4:cf:89:b5:fc:26:21:ab:b2:c5:
7d:61:f3:7b:cd:be:d1:5f:a0:4f:45:04:df:4c:f3:
cd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A1:82:5E:48:7E:02:A2:2D:8E:3C:58:48:30:4B:ED:F4:25:57:47
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/mqGCXkh-AqItjjxYSDBL7fQlV0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
49:33:ec:f7:a3:74:1b:95:ab:1a:e6:cc:24:fd:79:32:b4:7c:
57:70:1c:00:f0:c6:74:25:85:c7:f6:96:53:b4:b6:98:02:e3:
14:2c:d7:0b:32:4a:61:52:56:40:8d:e1:00:af:bc:68:8f:56:
03:d3:7c:0d:36:87:fb:d0:c8:2f:ac:f2:7b:a5:25:31:e0:0f:
ab:52:b4:cc:37:9a:a5:39:73:a7:ed:c1:42:7c:84:53:c0:55:
4c:b5:61:93:1c:8f:57:82:64:60:34:f3:8e:4f:be:e3:2d:2c:
50:78:15:9c:ce:e6:1f:b6:0b:a4:36:60:2d:91:91:e7:b8:76:
1a:ed:69:ab:0c:5d:f3:6a:a6:14:cb:2f:a6:c9:d3:f1:3b:3f:
b2:f4:c5:1a:96:14:16:9b:e9:b5:82:55:8f:b9:6b:02:d5:fd:
4c:21:c4:ec:c9:81:e6:65:ee:fe:f8:b3:76:87:21:27:16:c4:
04:1a:03:c9:be:d9:24:4a:4c:b2:08:73:a5:e2:bc:69:45:5b:
9b:86:fd:33:c4:37:eb:1e:d2:a0:ca:39:c1:5d:9f:9e:74:19:
eb:5d:59:2b:86:4a:64:78:17:67:ef:d4:28:de:2e:ce:ba:65:
f7:6a:82:e6:50:31:2f:31:fc:eb:c5:19:3a:88:03:f7:9c:26:
d5:60:ab:07
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQi++I1xcYbIATX42YVaVWJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjUwMTAxMTc0ODQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YWExODI1ZTQ4N2UwMmEyMmQ4ZTNjNTg0ODMwNGJlZGY0MjU1NzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlp1CNWwU9lsRR9FPfvYqY+YDunr
TTlJHq77FR8WJqsy5rF9jHXuxCest426mIQvalFuM0DcZdkK1tvNmedXyyDQlwkO
Q5az+dYG30PgiOTOVTSiYClKECP14SFxbotRbibrDUO6GKNtApsU1uZolMuQwOli
K9o9UQAjJFolaxSSqMF3uOV4laZsz11IIW1S1UQVnWNkfvfvUojtVZiJmUwQl3Uh
/jyvS+vpywlxESpVJx//kaJFZasz4vu8ZTA3npRKExbAPuKvfkpW9Z9lpEi+K0sk
aMv22MqgxwYI5ozzYLq/HrTPibX8JiGrssV9YfN7zb7RX6BPRQTfTPPNCwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFJqhgl5IfgKiLY48WEgwS+30JVdHMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvbXFHQ1hraC1BcUl0amp4WVNEQkw3ZlFsVjBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF
ALlkADUwDQYJKoZIhvcNAQELBQADggEBAEkz7PejdBuVqxrmzCT9eTK0fFdwHADw
xnQlhcf2llO0tpgC4xQs1wsySmFSVkCN4QCvvGiPVgPTfA02h/vQyC+s8nulJTHg
D6tStMw3mqU5c6ftwUJ8hFPAVUy1YZMcj1eCZGA0845PvuMtLFB4FZzO5h+2C6Q2
YC2Rkee4dhrtaasMXfNqphTLL6bJ0/E7P7L0xRqWFBab6bWCVY+5awLV/UwhxOzJ
geZl7v74s3aHIScWxAQaA8m+2SRKTLIIc6XivGlFW5uG/TPEN+se0qDKOcFdn550
GetdWSuGSmR4F2fv1CjeLs66ZfdqguZQMS8x/OvFGTqIA/ecJtVgqwc=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:02 2025 by rpki-client