Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/sgM5xHG89pzL0p6kxyScnV1D8Jo.roa
File: sgM5xHG89pzL0p6kxyScnV1D8Jo.roa (raw, json)
Hash identifier: ZUAxdyYq4XRDckg7kuR75k0wdenUtC/NImRzSOBOcTM=
Subject key identifier: B2:03:39:C4:71:BC:F6:9C:CB:D2:9E:A4:C7:24:9C:9D:5D:43:F0:9A
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F6244096EF38C3133920DE6AA569399
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/sgM5xHG89pzL0p6kxyScnV1D8Jo.roa
Signing time: Tue 25 Jun 2024 12:32:38 +0000
ROA not before: Tue 25 Jun 2024 12:32:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396540
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:44:09:6e:f3:8c:31:33:92:0d:e6:aa:56:93:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b20339c471bcf69ccbd29ea4c7249c9d5d43f09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3c:75:ad:27:16:3b:90:34:e4:06:49:07:41:
5c:e8:04:57:3f:7c:ca:9e:a2:51:42:29:20:21:fe:
60:a9:f0:66:01:96:49:d9:36:3a:e0:e7:44:e6:f4:
cd:dd:00:ec:5f:f2:7c:f4:99:9d:12:95:e6:2f:79:
6a:0b:63:0a:80:3a:f0:07:4d:9b:e1:d9:34:3d:f0:
f1:e7:d0:69:3c:14:a2:87:e4:1e:18:af:02:3d:c1:
94:6c:cc:dd:1b:06:43:9b:a1:83:e0:20:25:18:f8:
c7:6a:31:58:9a:91:de:10:23:46:a6:be:51:e4:33:
2c:8a:c4:1c:0e:d7:8f:90:f7:d8:db:a7:e9:10:6b:
03:76:65:7a:b7:c9:10:99:7c:9b:8b:70:24:f5:00:
cc:6e:aa:8d:da:c1:cb:ac:8d:ef:17:03:a8:3f:f0:
a5:c7:16:96:bc:ae:83:7f:13:d8:30:03:1c:34:ca:
20:d4:a3:64:15:0e:bf:d0:8b:f1:89:6f:50:df:5a:
aa:8c:64:a3:2d:59:1a:64:45:d3:21:dc:99:1f:cb:
ef:d7:fd:51:46:85:0a:83:df:a4:c7:9e:67:12:7c:
3f:55:80:74:f7:17:bb:53:59:10:ee:f6:b7:04:7f:
57:cd:fa:34:48:e6:78:0c:07:7a:01:d5:25:f0:0c:
39:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:03:39:C4:71:BC:F6:9C:CB:D2:9E:A4:C7:24:9C:9D:5D:43:F0:9A
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/sgM5xHG89pzL0p6kxyScnV1D8Jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
61:cc:bf:35:99:06:c9:89:42:86:29:7d:e9:fb:37:91:bd:14:
73:5d:03:06:12:fc:68:b3:46:b1:68:ce:80:4c:cb:bd:b8:57:
a0:0e:df:02:f0:59:fe:13:be:71:28:df:9c:2a:d4:9b:dd:cf:
57:5d:90:d7:ee:9f:84:0c:f7:28:c7:a5:79:61:45:8b:4b:fd:
cf:0d:46:42:d0:e5:f0:db:1e:90:11:73:5e:90:b0:5f:1d:4a:
2b:81:57:06:ed:b1:6b:52:1b:8e:29:54:ad:81:d3:98:3d:52:
4e:0d:20:e2:1e:16:05:9c:ae:99:bd:d1:5c:8e:f0:1f:79:f7:
0d:0f:07:86:d3:a0:84:8b:d0:9f:01:e2:87:4e:c2:38:80:ac:
22:37:f0:84:67:af:6c:21:db:66:03:70:58:c8:e3:48:5f:16:
f7:07:bd:e1:a8:74:eb:88:97:33:a0:6e:83:d7:75:26:a8:45:
42:fb:fa:2f:43:51:ed:38:d1:6d:00:05:ba:9b:de:fd:0d:15:
41:e1:7b:c9:68:33:31:67:f1:b2:28:09:50:14:20:f6:1d:79:
ae:d6:8b:bc:e7:28:32:e0:51:f5:f4:ca:0c:9e:61:0a:b9:f4:
db:b7:a0:97:53:a2:c1:8c:ac:e5:71:6e:cb:04:80:e9:ed:0e:
56:c7:cf:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:47:18 2024 by rpki-client on console-ams.rpki-client.org