Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/q8noyEm5vszqVuSr5kD3UE8ngWg.roa
File: q8noyEm5vszqVuSr5kD3UE8ngWg.roa (raw, json)
Hash identifier: /pV/2YDqdfLwJO8FsjDDVYp3QftMQGT71bh4h0elsRM=
Subject key identifier: AB:C9:E8:C8:49:B9:BE:CC:EA:56:E4:AB:E6:40:F7:50:4F:27:81:68
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F625C1D08E39A104C7128853BE03B0A
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/q8noyEm5vszqVuSr5kD3UE8ngWg.roa
Signing time: Tue 25 Jun 2024 12:32:44 +0000
ROA not before: Tue 25 Jun 2024 12:32:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396588
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:5c:1d:08:e3:9a:10:4c:71:28:85:3b:e0:3b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=abc9e8c849b9beccea56e4abe640f7504f278168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:86:d1:b9:df:c3:cd:17:f0:0f:2d:d8:6b:67:
21:ca:65:01:80:76:b6:47:ca:ad:16:6c:9c:bf:9f:
0d:81:b1:ce:2a:94:d0:82:25:3c:e2:53:78:e0:5a:
84:8f:8a:10:6d:07:73:55:68:fa:fe:a7:a6:43:22:
5f:59:52:d9:87:5a:18:eb:ea:24:9c:74:d4:c8:68:
c0:60:a2:13:71:f1:ae:f3:d1:e6:cc:08:8e:dd:cc:
a3:48:0d:ec:bf:6a:6f:d4:c2:60:3b:a4:8a:f1:28:
da:c5:07:10:dc:92:f4:a4:81:65:7c:5f:d5:3e:e1:
13:5d:f5:b6:c8:f5:eb:e6:09:5c:c8:f6:5d:85:8d:
a6:34:b7:74:e7:88:12:0f:c9:e2:9a:4f:34:c0:8d:
0d:cb:9f:90:85:c2:68:41:4c:55:25:fc:aa:5c:62:
be:2a:f1:47:33:e7:fb:56:d1:43:ad:04:eb:2d:7c:
ca:81:de:74:ba:05:5e:08:2b:77:62:8e:ad:3d:8f:
87:3e:e3:58:0a:e0:92:7f:67:61:76:0b:bf:ed:83:
14:59:be:7e:24:29:85:78:e4:62:b8:4f:8c:b2:15:
2c:01:b2:bc:58:68:86:83:16:b3:74:cb:cc:08:75:
20:15:e1:23:eb:73:70:a4:5a:e3:a6:1c:7a:f9:f4:
bb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C9:E8:C8:49:B9:BE:CC:EA:56:E4:AB:E6:40:F7:50:4F:27:81:68
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/q8noyEm5vszqVuSr5kD3UE8ngWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
7a:ad:ff:9d:6e:15:ac:fa:0c:59:85:f9:09:74:67:85:b6:17:
61:5e:cb:9b:9a:b5:5f:16:c9:60:14:f0:71:2c:10:96:3d:49:
41:ff:7b:93:75:01:e4:4f:b1:bd:45:a3:81:40:46:25:39:9a:
d6:7f:ed:8f:ba:89:47:d1:7b:74:72:fc:c7:9b:2f:06:e9:a5:
5f:5c:35:63:34:92:91:6c:9c:d3:20:37:dc:3c:e8:52:f6:f0:
d8:04:c5:02:b6:48:e5:bc:0b:0e:31:16:9c:4b:18:0f:c5:25:
4a:cb:ed:c7:01:3c:d7:08:43:c2:3c:81:a6:16:2c:d4:23:93:
28:13:99:69:ef:5c:15:f7:7d:26:f5:61:80:eb:29:4d:f7:da:
ee:56:a0:9a:8c:84:29:1b:e4:e3:a3:d5:64:48:db:ee:fd:18:
ea:4f:8e:64:12:48:ef:fb:03:25:7f:e4:b5:8a:18:d1:9b:0b:
5d:30:63:0a:ac:ce:84:d5:1a:a7:89:37:ce:73:30:f4:84:c3:
9a:67:ba:98:6a:5f:3b:6e:f2:98:c0:71:8d:88:d1:ba:20:eb:
a7:f5:c5:e1:4f:9f:c1:c9:e6:3c:c5:6e:27:a0:9f:a6:94:f7:
51:51:2a:d5:40:7e:d2:f6:01:09:ed:eb:48:dd:3f:c5:ea:46:
c2:e3:73:3e
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZBPYlwdCOOaEExxKIU74DsKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjQwNjI1MTIzMjQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYmM5ZThjODQ5YjliZWNjZWE1NmU0YWJlNjQwZjc1MDRmMjc4MTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYbRud/DzRfwDy3Ya2chymUBgHa2
R8qtFmycv58NgbHOKpTQgiU84lN44FqEj4oQbQdzVWj6/qemQyJfWVLZh1oY6+ok
nHTUyGjAYKITcfGu89HmzAiO3cyjSA3sv2pv1MJgO6SK8SjaxQcQ3JL0pIFlfF/V
PuETXfW2yPXr5glcyPZdhY2mNLd054gSD8nimk80wI0Ny5+QhcJoQUxVJfyqXGK+
KvFHM+f7VtFDrQTrLXzKgd50ugVeCCt3Yo6tPY+HPuNYCuCSf2dhdgu/7YMUWb5+
JCmFeORiuE+MshUsAbK8WGiGgxazdMvMCHUgFeEj63NwpFrjphx6+fS71wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFKvJ6MhJub7M6lbkq+ZA91BPJ4FoMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvcThub3lFbTV2c3pxVnVTcjVrRDNVRThuZ1dnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUBURPDHjAN
BgkqhkiG9w0BAQsFAAOCAQEAeq3/nW4VrPoMWYX5CXRnhbYXYV7Lm5q1XxbJYBTw
cSwQlj1JQf97k3UB5E+xvUWjgUBGJTma1n/tj7qJR9F7dHL8x5svBumlX1w1YzSS
kWyc0yA33DzoUvbw2ATFArZI5bwLDjEWnEsYD8UlSsvtxwE81whDwjyBphYs1COT
KBOZae9cFfd9JvVhgOspTffa7lagmoyEKRvk46PVZEjb7v0Y6k+OZBJI7/sDJX/k
tYoY0ZsLXTBjCqzOhNUap4k3znMw9ITDmme6mGpfO27ymMBxjYjRuiDrp/XF4U+f
wcnmPMVuJ6CfppT3UVEq1UB+0vYBCe3rSN0/xepGwuNzPg==
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:34:19 2024 by rpki-client on console-fra.rpki-client.org