Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/sWzwjfLG3sH-gonkQrsbJVpxfEo.roa
File: sWzwjfLG3sH-gonkQrsbJVpxfEo.roa (raw, json)
Hash identifier: cRN2iWY5fzXhuY6c+m4tgSVCPlnesnQKhfNtxDrPmgQ=
Subject key identifier: B1:6C:F0:8D:F2:C6:DE:C1:FE:82:89:E4:42:BB:1B:25:5A:71:7C:4A
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBE2B89754B25BC9D7E15846EA04C3
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/sWzwjfLG3sH-gonkQrsbJVpxfEo.roa
Signing time: Wed 01 Jan 2025 17:48:40 +0000
ROA not before: Wed 01 Jan 2025 17:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397208
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:e2:b8:97:54:b2:5b:c9:d7:e1:58:46:ea:04:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b16cf08df2c6dec1fe8289e442bb1b255a717c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c8:79:89:8b:75:90:a8:f6:d8:75:f6:ca:98:
9d:83:c5:23:27:1f:d7:4d:e5:18:ab:86:a8:91:81:
b3:a5:a0:e0:da:6f:cf:76:6e:54:e2:cb:c8:d8:af:
64:f7:b0:36:97:6f:e4:cc:df:86:fb:42:b3:ac:7e:
c9:56:d9:9a:fa:b0:83:75:89:e0:72:89:e0:38:c5:
04:17:39:81:f6:4e:fb:a8:d7:3b:0b:32:c7:db:80:
31:b7:ee:01:54:4d:f7:65:f0:98:78:ab:be:cb:49:
58:e7:4c:32:88:05:d2:60:61:75:b8:12:db:e6:f0:
47:75:56:96:23:05:c6:e4:f5:6d:d8:88:38:79:87:
20:09:bb:5a:11:32:a3:53:12:eb:0e:d2:07:78:8b:
11:fe:5d:ad:c9:14:da:82:97:ca:04:f1:c5:bd:66:
7c:67:32:1f:8b:62:55:82:a0:7f:1c:a5:a8:55:ef:
11:57:ed:f1:10:f7:36:a3:90:89:9f:c6:39:f1:18:
69:a6:b9:10:ba:ee:17:7a:fa:b4:f9:71:da:8e:c2:
d1:a0:b3:a3:1a:f2:c0:b4:5d:e6:b4:fb:43:5a:ca:
69:64:ea:68:6d:db:ab:f1:c0:8c:89:3c:0d:85:68:
cc:61:c4:fb:3e:31:04:c0:2a:d8:d4:d8:71:9b:ac:
28:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6C:F0:8D:F2:C6:DE:C1:FE:82:89:E4:42:BB:1B:25:5A:71:7C:4A
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/sWzwjfLG3sH-gonkQrsbJVpxfEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
71:33:2d:72:11:cd:5d:a6:b5:e5:8e:13:a5:a6:f6:2d:20:45:
5a:e3:80:f0:f5:9c:12:5c:2e:f6:9b:f8:7b:cc:25:73:94:dc:
01:7c:1c:2f:2c:93:b1:cb:3d:76:2e:55:60:26:0f:91:d7:ed:
26:8d:e8:4b:17:84:12:12:06:26:58:6c:d4:84:02:e6:d9:21:
72:10:37:9d:83:ae:de:fc:77:97:82:00:61:1d:f1:3a:ca:88:
cc:ef:09:d2:a3:12:f4:79:40:99:91:40:05:6e:35:3c:7a:f7:
a8:68:d8:b8:ba:84:7b:c4:80:68:49:f7:14:43:83:62:61:4a:
6d:10:fe:22:30:59:e9:21:d2:0e:5b:11:26:b6:d7:00:4a:c8:
46:3a:94:54:d8:00:b0:c5:c6:ea:ec:57:f6:64:3b:94:bc:0d:
a8:3f:ec:6f:a5:e3:25:af:96:2f:90:92:dd:b3:f5:c3:d2:a7:
a0:65:02:d0:43:df:d3:ec:4a:11:88:e2:b6:7b:3a:10:db:4d:
9b:2a:ea:e9:96:99:2f:c9:21:ee:4c:c0:f6:f1:e4:33:ab:cd:
00:b4:b3:97:ee:65:0d:b4:e5:54:84:97:5f:fb:1b:1f:02:33:
06:bd:2d:36:d7:69:14:78:e3:15:06:4d:8a:ce:1e:31:98:47:
64:50:bf:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:07 2025 by rpki-client