Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/rNsqqDbmF8vZlU8v5BqdU609QzY.roa
File: rNsqqDbmF8vZlU8v5BqdU609QzY.roa (raw, json)
Hash identifier: uOHuiuoYzwL4lkExnEzh+0IT8sIADcnURHGso5PMkQ4=
Subject key identifier: AC:DB:2A:A8:36:E6:17:CB:D9:95:4F:2F:E4:1A:9D:53:AD:3D:43:36
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F62729851C1F6781792686D8647CE8C
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/rNsqqDbmF8vZlU8v5BqdU609QzY.roa
Signing time: Tue 25 Jun 2024 12:32:50 +0000
ROA not before: Tue 25 Jun 2024 12:32:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397205
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:72:98:51:c1:f6:78:17:92:68:6d:86:47:ce:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=acdb2aa836e617cbd9954f2fe41a9d53ad3d4336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:61:4e:76:b8:88:15:94:9d:42:b6:e2:0f:a9:
51:c0:47:fb:1d:fb:69:b6:71:de:c0:1f:1f:42:c8:
85:a0:a8:7c:50:74:b1:06:64:ea:de:1e:2e:0e:cc:
52:8d:51:9e:61:28:e2:fe:59:98:4a:67:73:16:13:
8a:21:6b:a3:33:8d:96:c1:71:4d:c1:24:ae:58:f7:
54:cb:d4:25:45:03:05:d6:1e:58:c6:37:76:e5:67:
b1:d2:1e:56:cd:b7:a3:41:9e:40:88:9e:71:25:2b:
81:d6:45:5c:de:6e:8c:c0:08:ac:41:75:de:6c:22:
09:fa:c1:a7:71:25:39:50:f6:47:4d:3d:8c:1d:12:
f7:2b:42:af:5a:4c:99:c5:2a:f0:03:4b:9e:bc:8a:
d8:1e:59:e6:26:f9:f1:6b:6f:4a:96:98:00:da:62:
15:88:b1:21:2f:41:4f:a5:2a:82:1a:32:50:6c:bc:
b9:6e:90:e2:9a:7f:0e:04:f0:26:2c:0c:ac:88:40:
f1:79:a8:39:88:70:96:77:62:88:59:50:94:d2:d0:
d5:66:87:37:3b:0a:66:22:47:d2:55:00:f5:19:0a:
5d:4a:52:9a:f9:f1:89:52:a2:9d:b7:e1:75:ca:8d:
95:44:cf:80:11:c3:8f:d0:89:db:4c:cc:41:48:2b:
5d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:DB:2A:A8:36:E6:17:CB:D9:95:4F:2F:E4:1A:9D:53:AD:3D:43:36
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/rNsqqDbmF8vZlU8v5BqdU609QzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
93:47:59:2e:b1:01:01:2d:79:a0:d2:d7:c2:70:c3:6d:68:22:
1f:c8:3c:d9:bf:5f:01:be:9e:90:0c:ac:3e:f5:91:2b:a0:55:
0d:47:02:80:42:e6:bb:9f:90:8e:7e:c1:26:54:99:bd:09:3d:
a8:d5:f5:45:ce:f8:e8:ef:91:11:ae:8c:20:4f:61:18:0d:f2:
34:a5:5b:fb:d9:f0:ab:ee:9a:05:d1:3b:d8:62:53:b4:db:c7:
37:f7:1e:8a:ab:cd:e5:0d:33:c9:7c:0c:cc:70:28:4e:d2:dc:
b4:1d:43:74:31:50:3e:ad:af:ae:b1:09:9a:5d:15:bd:aa:3c:
8b:58:d8:03:2e:d0:86:93:99:53:ea:33:c2:e5:8e:a7:e7:1b:
6e:82:60:72:db:5e:2a:79:2a:75:b6:2d:59:99:a5:35:15:b5:
5b:b9:8d:8a:b5:ff:d6:09:40:f7:8a:5f:67:e8:27:55:61:45:
d7:3f:a2:13:68:e0:d7:c8:9b:8e:27:47:e9:ca:e4:02:3e:be:
26:65:04:82:8a:ad:aa:43:dd:2b:dd:27:1e:d7:40:18:8e:9d:
ba:09:68:c4:cd:23:97:df:c7:2f:8d:aa:20:07:4e:9a:9b:93:
c0:4b:0e:90:1b:05:ab:ee:ac:c3:42:be:8a:0d:e9:34:9e:1e:
80:02:75:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:34:19 2024 by rpki-client on console-fra.rpki-client.org