Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/omdnZyAIlzw3qtItFI1VtvcPprg.roa
File: omdnZyAIlzw3qtItFI1VtvcPprg.roa (raw, json)
Hash identifier: b69nMfHyJIdzn9rwC5BLuM514CUYkNQK5iL6z04IA8A=
Subject key identifier: A2:67:67:67:20:08:97:3C:37:AA:D2:2D:14:8D:55:B6:F7:0F:A6:B8
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBAB87E8B535C15964D445B89B4BC4
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/omdnZyAIlzw3qtItFI1VtvcPprg.roa
Signing time: Wed 01 Jan 2025 17:48:26 +0000
ROA not before: Wed 01 Jan 2025 17:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19836
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:ab:87:e8:b5:35:c1:59:64:d4:45:b8:9b:4b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a26767672008973c37aad22d148d55b6f70fa6b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e6:d2:b9:42:d8:ec:6f:ec:a9:27:04:3d:f0:
d5:62:6e:4b:97:d1:10:ff:70:0a:ab:f4:ea:a9:c6:
d2:3f:cd:97:74:ac:fa:93:b3:9f:ac:1d:cf:57:ab:
91:86:05:84:6d:f9:3a:7f:6b:eb:49:3c:be:59:69:
97:19:27:ee:a1:86:a6:de:68:c2:3d:17:24:52:b5:
f2:b0:a1:fc:80:21:a6:40:0a:7a:d4:a2:5f:d9:2c:
4f:44:a6:15:22:37:51:f2:ab:32:7b:ee:9d:b6:67:
22:91:a4:04:fe:43:b4:b2:01:19:c9:2d:12:43:f8:
e0:eb:90:35:a2:93:9d:5e:91:9f:38:94:e3:3b:6b:
63:43:13:53:3a:65:ee:d1:ed:5f:cf:58:7f:ed:de:
f7:e5:03:00:ef:06:9e:72:6c:db:71:21:8a:29:c6:
f5:6a:89:91:4c:2a:da:fa:e4:62:29:28:29:0b:ef:
5f:e9:4e:5d:d3:71:65:96:23:99:22:d4:aa:76:cc:
57:29:8e:9e:35:1a:2b:e5:f6:17:a3:8f:97:8c:84:
4f:0f:6f:d9:5b:0a:6c:bc:c2:3b:77:9e:ba:f5:9e:
8e:79:9e:1a:1d:f4:8e:3e:36:64:72:e3:f4:f3:36:
57:77:85:69:9d:59:dd:36:4c:6c:23:e0:37:84:a9:
ac:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:67:67:67:20:08:97:3C:37:AA:D2:2D:14:8D:55:B6:F7:0F:A6:B8
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/omdnZyAIlzw3qtItFI1VtvcPprg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
ba:1c:e9:8c:8d:87:dd:15:fa:f9:a4:03:4a:35:96:27:d8:f4:
77:80:cb:ab:db:e4:38:9c:58:32:5f:57:87:04:2d:24:ee:fc:
e6:60:b3:41:19:ba:6c:ca:5d:96:c5:2d:4e:80:4c:56:45:23:
33:38:40:5a:4a:e4:ee:89:31:92:03:5a:df:33:04:32:4c:93:
15:eb:da:e4:ec:22:1b:07:20:f7:90:34:85:06:0d:fb:07:9a:
67:2e:c2:67:a1:63:f8:e5:3f:c9:51:14:7a:b8:3f:17:d3:3d:
f8:4f:b1:c8:f5:ac:82:15:eb:eb:42:3c:7a:20:c5:08:80:2f:
09:d3:2f:8f:0a:99:8b:8b:dd:4a:06:ad:4e:17:23:ad:d9:ce:
fe:82:58:ab:94:34:2d:2d:01:63:2e:ec:bf:03:c0:97:ee:58:
79:81:df:79:1f:a0:0c:00:6c:80:f0:29:ad:73:6f:3d:c2:22:
a1:07:bb:c5:37:7e:bd:4e:50:a2:47:a8:0c:4f:a5:b6:f7:7b:
d2:16:d0:04:f1:19:db:5e:3b:86:cb:84:8e:e3:b3:bb:28:39:
ee:b9:63:7b:39:58:7b:04:4d:a9:a9:e8:30:5f:c9:2f:8d:4a:
5a:01:27:5f:79:11:ec:f0:0b:81:c6:6f:fd:2b:84:99:53:e5:
b0:7e:0a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:18 2025 by rpki-client