Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/ofPYvOUWygCtc1zz-GV2ai3za-M.roa
File: ofPYvOUWygCtc1zz-GV2ai3za-M.roa (raw, json)
Hash identifier: ZGyarIGbQCfr0qvA9cMYCVw1OweYXhx92zJbjePQEkY=
Subject key identifier: A1:F3:D8:BC:E5:16:CA:00:AD:73:5C:F3:F8:65:76:6A:2D:F3:6B:E3
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBAFAA10D1D4E488894D340FC9DCBC
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/ofPYvOUWygCtc1zz-GV2ai3za-M.roa
Signing time: Wed 01 Jan 2025 17:48:27 +0000
ROA not before: Wed 01 Jan 2025 17:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36616
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:af:aa:10:d1:d4:e4:88:89:4d:34:0f:c9:dc:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1f3d8bce516ca00ad735cf3f865766a2df36be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:16:f7:3f:3b:e3:87:e0:57:b9:a0:1d:96:62:
76:4d:ea:25:4d:e5:3b:7d:1b:d8:7c:74:34:62:8d:
85:d4:2d:9a:d6:20:6c:57:3f:2c:bb:90:18:4d:fb:
e0:1a:ae:bb:31:b5:e5:fc:59:e6:84:15:3c:09:c3:
0f:d8:93:bc:34:d9:68:74:64:bb:27:ea:0e:9f:3b:
50:cb:87:46:b9:b8:a3:3f:6b:d2:f1:72:ab:bc:2a:
46:df:86:96:12:07:b4:d9:f2:b1:a1:cd:ca:49:5d:
34:4b:97:09:ce:62:db:86:80:dd:a0:35:a9:f4:d5:
91:44:bb:66:fe:64:5e:da:98:12:9b:a8:1b:e7:74:
96:06:36:1d:12:d1:33:5b:39:5d:dc:d8:ff:8b:2f:
ef:bc:73:86:32:c3:6c:5b:99:ff:48:54:76:68:53:
ad:4f:30:1a:b3:9e:c5:fe:e2:cc:6e:cd:6c:e2:ca:
f4:32:9c:ee:43:d7:b8:fe:95:24:6f:69:db:5e:4e:
42:e8:3a:e1:3f:3a:e7:7b:0f:82:02:5a:c1:8b:ba:
c1:24:aa:b3:79:dc:55:0f:e9:e9:f5:1e:fc:7d:4e:
43:fe:57:4a:fe:2e:57:52:be:37:c8:df:88:65:96:
31:c1:27:1e:81:f5:4a:d7:1b:a1:cb:b4:6a:8f:c1:
b6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F3:D8:BC:E5:16:CA:00:AD:73:5C:F3:F8:65:76:6A:2D:F3:6B:E3
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/ofPYvOUWygCtc1zz-GV2ai3za-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
a4:15:72:6b:37:08:f2:a2:b3:4f:3e:db:44:fb:8a:c9:c9:08:
b9:e5:5b:ef:c9:1f:84:5e:a2:8d:a2:2b:18:46:f4:72:46:00:
ad:7f:af:80:3f:2f:74:1c:f4:0d:15:d0:0d:89:d4:ae:9e:5d:
da:44:86:f4:37:0f:84:ca:96:e7:74:85:57:64:9d:64:35:f1:
6f:27:4b:b4:97:9c:1b:3c:21:22:75:b9:e9:47:a2:e4:e3:5d:
ce:d5:25:a4:6a:58:44:9e:b3:09:80:30:2c:c2:4b:68:91:a3:
26:d1:07:02:5d:c4:8e:18:cc:21:10:9b:d6:52:6e:f1:d9:84:
45:21:08:e5:c9:b0:62:8d:ea:ed:73:9f:c7:83:f3:5e:9b:ba:
b2:c1:1b:e2:57:cf:64:cf:43:4a:08:25:3b:d1:20:ba:e1:5f:
f6:c9:52:f4:56:1c:64:e0:a5:e9:e2:54:fa:d8:84:ca:32:e5:
6f:5c:e7:a2:94:0b:41:d4:7b:bf:8f:63:a5:d1:2a:7b:b4:bd:
7f:40:05:5e:f1:2e:f5:9b:e7:15:e6:22:c2:54:72:8d:0b:67:
2a:13:fd:7a:24:03:7f:6e:19:2b:f2:ca:7c:a7:12:1b:a5:9a:
a1:aa:a4:d8:08:67:4e:16:aa:56:d4:e7:78:1e:1e:f6:63:53:
93:62:8a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:47 2025 by rpki-client