Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/n8gh4Z9GOzCcydVToXkaqPJePp0.roa
File: n8gh4Z9GOzCcydVToXkaqPJePp0.roa (raw, json)
Hash identifier: dhpEZNGgGd7ZEdSTH/+qwHP92MNoflxoKoVlt010AxM=
Subject key identifier: 9F:C8:21:E1:9F:46:3B:30:9C:C9:D5:53:A1:79:1A:A8:F2:5E:3E:9D
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F6244E08D046E83F117BECE1D652E44
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/n8gh4Z9GOzCcydVToXkaqPJePp0.roa
Signing time: Tue 25 Jun 2024 12:32:38 +0000
ROA not before: Tue 25 Jun 2024 12:32:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396543
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:44:e0:8d:04:6e:83:f1:17:be:ce:1d:65:2e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9fc821e19f463b309cc9d553a1791aa8f25e3e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:16:0a:21:59:0a:1b:eb:4f:fb:ad:af:73:47:
9d:2a:3f:11:a5:d4:14:28:ec:bc:88:b6:05:f1:c5:
e4:49:70:71:a7:30:8e:c9:2e:00:7d:8f:e0:d8:92:
b2:12:13:8a:d9:15:ed:27:53:9d:ce:45:4f:05:fa:
10:15:71:1e:06:4c:09:78:a8:09:31:a2:6f:63:0d:
ec:70:c9:56:e4:da:78:30:98:57:ad:2c:8b:1c:f7:
a3:75:df:38:bf:75:b9:1d:69:1c:42:a9:56:f4:eb:
86:a4:1b:61:fe:37:da:e4:cd:68:55:46:02:59:26:
28:70:ad:25:e2:c1:c7:76:ad:88:34:73:45:1d:1d:
f7:04:b8:6b:c5:cb:7d:6b:d1:c8:00:e3:a1:56:72:
2e:5d:92:ae:40:df:da:4e:01:24:9e:1a:7d:f7:98:
81:23:82:6f:83:f3:4a:22:ee:e7:09:f2:03:4e:ba:
c7:1a:9b:a9:44:5a:57:28:33:35:a7:23:3c:92:82:
44:2b:e0:5a:79:0b:fb:09:9e:3e:ec:81:fe:fe:54:
84:d3:be:41:d7:61:2d:62:0c:26:c4:8c:15:eb:2a:
64:ba:c8:42:fb:ae:a0:c1:89:00:10:33:1f:32:be:
a4:12:72:34:94:b5:3c:eb:9e:80:ed:ed:aa:b0:ea:
f0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C8:21:E1:9F:46:3B:30:9C:C9:D5:53:A1:79:1A:A8:F2:5E:3E:9D
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/n8gh4Z9GOzCcydVToXkaqPJePp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
66:26:75:4b:0f:b9:86:4a:fd:bd:8a:ab:69:a9:16:dc:7f:c5:
7e:52:5d:ab:6a:3d:e7:8a:c5:04:34:7e:7a:43:33:1b:aa:56:
50:c9:a0:b6:4a:ce:59:ff:3d:d2:78:bc:3d:59:8b:ae:88:19:
fc:3e:c4:c2:f6:8b:2e:fc:85:a3:08:52:24:b7:a6:1e:a7:3d:
db:11:d8:0a:af:9c:69:25:f0:fc:4e:22:08:e3:0e:4c:a5:43:
c1:ad:e2:54:fd:d3:69:ad:9e:36:ba:4d:e2:7a:80:05:a0:0f:
1c:0d:3e:b0:0d:e2:28:cd:37:58:25:85:e5:cd:e3:bd:5a:be:
01:86:35:06:04:56:f8:da:06:3b:d3:28:00:e4:2f:0f:f4:d4:
5b:50:57:a6:24:aa:f6:7b:25:11:55:cf:4f:da:58:43:21:4a:
5b:f6:bb:5b:24:e8:19:2c:d2:9f:8d:f7:4b:6e:a6:23:e6:65:
d3:18:29:73:4a:28:e6:e4:a1:2d:e2:42:e0:7b:a0:30:aa:d4:
78:9e:15:f4:fb:11:0e:0a:8f:7a:09:0d:10:1c:cf:fa:1b:92:
06:0d:a2:18:d5:1c:15:b2:c4:e0:8c:c0:d3:61:94:df:a7:c5:
08:6c:03:de:62:35:6d:b1:29:b2:2a:b7:8b:35:c6:5d:42:25:
d9:43:cf:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:47:18 2024 by rpki-client on console-ams.rpki-client.org