Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/oc5MgIF-U4swQ0jLXlrTiwIjTVw.roa
File: oc5MgIF-U4swQ0jLXlrTiwIjTVw.roa (raw, json)
Hash identifier: 2PLWExNXc/CPbMjrrHsEfpHhfpwL20r1AKigJ8rJEQk=
Subject key identifier: A1:CE:4C:80:81:7E:53:8B:30:43:48:CB:5E:5A:D3:8B:02:23:4D:5C
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBE076BC4B8618BE0BAAA44CA7DAF1
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/oc5MgIF-U4swQ0jLXlrTiwIjTVw.roa
Signing time: Wed 01 Jan 2025 17:48:39 +0000
ROA not before: Wed 01 Jan 2025 17:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397204
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:e0:76:bc:4b:86:18:be:0b:aa:a4:4c:a7:da:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1ce4c80817e538b304348cb5e5ad38b02234d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:99:4e:ab:dd:d9:b2:14:df:f8:b8:f9:26:5e:
8c:2b:75:a3:89:3b:f4:44:69:16:b0:00:14:f2:95:
b1:42:2d:1f:dd:1a:19:a6:7e:84:77:9d:07:11:66:
ad:79:d2:ab:d2:89:3e:9c:b7:61:3c:0e:b3:22:b3:
dc:b7:cc:df:b3:eb:09:80:9d:e9:f9:be:d1:6f:81:
b3:b9:3e:e1:96:0c:fb:d6:8e:a9:a0:29:0f:80:f9:
6b:e9:e2:dc:e5:0e:b6:88:08:b1:c6:72:5b:34:6f:
20:24:4c:78:a5:35:65:fc:6f:e5:12:ee:f6:cd:4f:
2d:67:04:2c:4d:59:be:53:56:09:1b:1c:cf:99:e3:
4f:1f:52:d6:c2:20:48:3e:3c:37:45:b2:da:6f:0e:
90:d6:21:4b:bb:a0:fa:50:f5:df:c2:30:16:1d:a3:
b9:ad:17:eb:9f:ca:a7:61:f0:0b:4f:70:4f:c0:f2:
a2:62:43:4a:9e:c6:42:60:d6:49:c6:9d:f9:d0:70:
99:a8:a5:40:b0:d1:b6:cf:35:00:93:b7:4b:a3:06:
09:8e:63:83:ac:17:0b:8d:d4:48:6d:bc:c9:94:b6:
7e:3d:be:ab:50:42:e5:81:d5:f0:08:c6:f4:b8:25:
5d:e8:ed:ca:2b:ad:e7:1c:7b:66:53:2a:cb:8d:29:
e5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CE:4C:80:81:7E:53:8B:30:43:48:CB:5E:5A:D3:8B:02:23:4D:5C
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/oc5MgIF-U4swQ0jLXlrTiwIjTVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
24:8b:14:44:b8:16:79:61:68:28:26:75:5c:1c:c2:ae:5e:83:
d3:1d:e6:db:3c:c6:ae:cd:eb:00:7d:c9:68:6a:93:a2:cb:ab:
9f:92:d3:a8:17:11:37:b0:ba:fd:de:32:a7:07:a6:01:f4:b9:
68:91:4d:d5:5e:f7:f1:35:0a:81:cb:c6:40:a2:a1:65:bf:ae:
9f:fb:59:ef:c7:d1:89:9c:d8:1b:c4:0e:6e:d0:dd:a6:a3:4e:
30:13:be:54:8c:b5:57:46:32:14:04:1f:73:e0:77:12:a9:11:
e3:67:e3:ec:02:43:54:89:da:c0:99:fc:21:43:ab:e6:7a:43:
26:5e:79:53:97:99:74:79:1e:6d:f0:f1:9a:9f:31:e3:9e:02:
d0:b5:36:fa:25:b1:68:3e:c4:fa:2e:32:65:85:e6:9d:bf:aa:
62:e0:14:89:b8:30:40:91:f6:04:ef:f8:c0:83:45:cd:17:fa:
84:e5:09:34:82:94:57:76:21:df:94:33:04:e8:eb:ee:8d:42:
22:7d:c1:d9:51:31:dc:e5:18:eb:22:4d:d5:02:a9:4d:72:cd:
12:e9:f5:d1:27:99:4e:0a:d1:e1:28:76:40:55:7a:2c:71:02:
33:bf:27:96:19:9d:6f:01:71:f0:da:c2:09:fd:06:50:7e:f6:
9c:7b:27:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:20 2025 by rpki-client