Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/nmZbb_A4XA_AMw3eN1J4Sg3Stpc.roa
File: nmZbb_A4XA_AMw3eN1J4Sg3Stpc.roa (raw, json)
Hash identifier: 1PJLnDkL3FkwrhxsLkua33kVdkCpQFZed+igza5nvxY=
Subject key identifier: 9E:66:5B:6F:F0:38:5C:0F:C0:33:0D:DE:37:52:78:4A:0D:D2:B6:97
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F6255683A1C6F4522A7567793E18CDA
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/nmZbb_A4XA_AMw3eN1J4Sg3Stpc.roa
Signing time: Tue 25 Jun 2024 12:32:42 +0000
ROA not before: Tue 25 Jun 2024 12:32:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396576
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:55:68:3a:1c:6f:45:22:a7:56:77:93:e1:8c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e665b6ff0385c0fc0330dde3752784a0dd2b697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:86:65:73:13:56:b5:be:ae:f2:71:40:c2:0e:
a1:e4:2f:de:a2:2d:90:24:c0:ab:77:01:9d:a5:3c:
c5:af:73:ce:fe:ed:f4:28:68:b0:0e:e9:22:0e:3b:
d3:75:e5:15:19:31:dc:04:6f:b4:dc:13:59:2c:98:
a7:1a:d6:ec:cd:cc:55:74:38:b1:5c:52:cc:e6:d1:
1d:7a:f9:79:65:97:b1:5a:30:68:b8:54:f7:fc:c6:
65:bf:97:1d:2d:71:e1:fa:e1:9c:c4:0a:ba:76:59:
5d:db:05:6e:b6:91:32:41:95:a3:5b:62:6b:d8:de:
0f:c1:80:1d:77:cb:17:76:67:07:f2:c2:0e:da:42:
3a:59:c7:d9:4a:ba:24:11:80:ba:13:9e:47:13:3d:
db:3e:d4:af:d5:29:55:8e:b1:44:a3:a8:2f:25:c4:
dc:82:bb:a7:ed:e9:69:08:be:38:6f:1d:37:3f:df:
b9:e5:31:94:29:9a:5c:19:2d:0f:fa:75:2f:82:f4:
03:34:34:d1:06:49:db:94:54:60:c3:cd:47:3e:2d:
a9:a8:f6:fa:24:87:dd:c8:42:a7:5e:7d:6f:45:1a:
0b:0e:c6:ed:40:f7:94:aa:3a:9f:ce:db:62:a7:59:
27:e0:42:c7:32:1a:27:08:6c:07:00:9f:82:2f:ee:
85:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:66:5B:6F:F0:38:5C:0F:C0:33:0D:DE:37:52:78:4A:0D:D2:B6:97
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/nmZbb_A4XA_AMw3eN1J4Sg3Stpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
a3:ac:6b:74:48:b6:60:bf:0e:a9:6f:b6:c5:6d:4b:53:46:4c:
44:c3:b6:e9:79:63:8b:66:79:38:92:23:1d:64:d2:d9:88:96:
81:d6:a4:0e:cb:48:35:9c:b6:70:1a:60:64:d1:d6:32:69:a9:
77:19:0a:f8:cd:bb:22:32:fc:85:ca:5c:e7:d2:c2:6a:e3:c4:
4f:f1:af:ab:66:bc:26:4d:f2:c2:97:d4:66:01:be:78:30:c7:
ff:c3:d8:57:c9:03:13:e0:7b:c7:ce:20:69:cc:64:f9:c3:1b:
4e:ca:1d:89:16:0c:34:13:ad:56:8d:1e:07:f4:d5:bb:af:1b:
eb:be:9a:88:df:35:c1:fb:b7:14:c2:55:3a:d3:d1:a2:59:ee:
1a:d9:68:c6:7d:f9:bc:40:38:28:d5:c5:2f:8e:50:8b:2d:a5:
cf:e5:59:c0:e6:8c:e5:9d:71:b6:0f:ee:f6:38:bf:39:44:a8:
28:08:93:91:c8:c5:f7:ec:60:b8:ae:33:f3:e0:d8:f0:db:7f:
8b:09:c7:c4:fc:d4:fe:c5:8a:e2:fe:20:d8:00:6b:26:c6:a2:
75:5d:32:c9:17:1c:a5:af:bf:9c:e6:de:e5:b7:5a:fe:98:e0:
5c:7c:3d:f8:b0:67:f4:7a:d1:a0:4e:d9:fd:79:04:96:0d:32:
e4:f1:e8:c4
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZBPYlVoOhxvRSKnVneT4YzaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjQwNjI1MTIzMjQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTY2NWI2ZmYwMzg1YzBmYzAzMzBkZGUzNzUyNzg0YTBkZDJiNjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIZlcxNWtb6u8nFAwg6h5C/eoi2Q
JMCrdwGdpTzFr3PO/u30KGiwDukiDjvTdeUVGTHcBG+03BNZLJinGtbszcxVdDix
XFLM5tEdevl5ZZexWjBouFT3/MZlv5cdLXHh+uGcxAq6dlld2wVutpEyQZWjW2Jr
2N4PwYAdd8sXdmcH8sIO2kI6WcfZSrokEYC6E55HEz3bPtSv1SlVjrFEo6gvJcTc
grun7elpCL44bx03P9+55TGUKZpcGS0P+nUvgvQDNDTRBknblFRgw81HPi2pqPb6
JIfdyEKnXn1vRRoLDsbtQPeUqjqfzttip1kn4ELHMhonCGwHAJ+CL+6FGwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFJ5mW2/wOFwPwDMN3jdSeEoN0raXMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvbm1aYmJfQTRYQV9BTXczZU4xSjRTZzNTdHBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUBURPDHjAN
BgkqhkiG9w0BAQsFAAOCAQEAo6xrdEi2YL8OqW+2xW1LU0ZMRMO26Xlji2Z5OJIj
HWTS2YiWgdakDstINZy2cBpgZNHWMmmpdxkK+M27IjL8hcpc59LCauPET/Gvq2a8
Jk3ywpfUZgG+eDDH/8PYV8kDE+B7x84gacxk+cMbTsodiRYMNBOtVo0eB/TVu68b
676aiN81wfu3FMJVOtPRolnuGtloxn35vEA4KNXFL45Qiy2lz+VZwOaM5Z1xtg/u
9ji/OUSoKAiTkcjF9+xguK4z8+DY8Nt/iwnHxPzU/sWK4v4g2ABrJsaidV0yyRcc
pa+/nObe5bda/pjgXHw9+LBn9HrRoE7Z/XkElg0y5PHoxA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:13:23 2024 by rpki-client on console-fra.rpki-client.org