Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/ugxS9hW6kA387ZaZ95Lus_qoqT4.roa
File: ugxS9hW6kA387ZaZ95Lus_qoqT4.roa (raw, json)
Hash identifier: dbzSzI4L8oly7mT/fQ0J5J6iQJbBiHpqcAAEbhTM5DI=
Subject key identifier: BA:0C:52:F6:15:BA:90:0D:FC:ED:96:99:F7:92:EE:B3:FA:A8:A9:3E
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F625F6F586016378D3E9B96AE4945DF
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/ugxS9hW6kA387ZaZ95Lus_qoqT4.roa
Signing time: Tue 25 Jun 2024 12:32:45 +0000
ROA not before: Tue 25 Jun 2024 12:32:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396596
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:5f:6f:58:60:16:37:8d:3e:9b:96:ae:49:45:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba0c52f615ba900dfced9699f792eeb3faa8a93e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:49:29:b0:a5:11:89:31:57:52:b7:8f:2c:22:
f8:d9:e5:df:07:83:6b:6e:12:2b:17:5a:34:95:8b:
39:b7:01:a8:54:ea:aa:88:ad:5c:ac:c3:bc:41:40:
d8:28:cb:d5:79:4c:b0:da:d4:6a:19:03:77:b6:07:
4f:36:e1:44:ac:6d:5e:93:84:c6:89:d2:90:ee:64:
30:0a:58:51:bd:a5:54:7a:e3:d6:0a:36:d8:54:38:
fa:4f:35:b6:27:5a:8b:a2:7f:b3:5e:ff:c6:31:3f:
80:81:d2:e2:08:a9:0d:e7:ef:b2:bb:22:73:5a:ae:
bf:5b:97:b9:95:34:df:89:29:77:5f:35:ea:b9:75:
bc:a3:10:55:71:0b:37:3e:0d:3b:f2:13:29:9a:ed:
2d:37:af:14:81:a3:01:c8:cc:29:88:dc:f6:0f:fd:
a1:34:a6:4a:0f:28:21:67:38:32:d3:4d:80:7f:ec:
fa:37:7e:f3:46:a5:8b:6b:66:c0:70:c2:61:0a:5c:
ea:06:0c:6d:b8:38:dd:05:ec:66:b4:10:5a:4f:77:
d5:63:36:ba:96:91:0f:83:aa:5f:88:06:36:67:70:
cb:55:47:e4:85:66:ad:14:16:ed:97:7e:9d:b0:33:
d0:88:ef:67:dc:33:ca:ed:d8:5b:e5:8f:8f:1b:9f:
ed:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0C:52:F6:15:BA:90:0D:FC:ED:96:99:F7:92:EE:B3:FA:A8:A9:3E
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/ugxS9hW6kA387ZaZ95Lus_qoqT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
47:a0:df:24:70:b1:69:b6:5f:1f:36:59:39:17:1c:cf:d4:bf:
4f:56:34:67:3f:7e:c1:1f:d4:c8:1a:f0:65:21:57:71:f4:70:
95:9a:9f:3e:91:af:ce:87:29:60:24:81:67:9a:4f:25:48:0b:
59:d9:e6:e4:85:8e:1b:6d:d1:d4:f1:9e:86:94:26:b7:c5:a3:
10:f3:db:7e:d7:ad:50:99:02:d7:74:5c:c9:39:7a:71:7d:ef:
fc:d3:93:ce:9d:4c:d5:87:99:54:37:b2:3a:21:17:76:15:d2:
7b:97:b8:59:e4:dd:7f:45:da:05:72:eb:5d:1c:68:b9:bc:5a:
71:26:69:4b:72:75:a9:d1:fd:d0:64:32:50:b4:0e:3b:10:fb:
73:c8:d2:8a:0e:56:79:9b:4c:e2:e7:71:30:d8:a4:06:54:8a:
57:79:a6:92:58:67:30:b8:c6:00:dc:75:c4:52:1f:c4:57:53:
a1:89:27:d4:5f:35:da:94:8e:1b:d4:7e:b3:16:94:72:35:42:
aa:6b:1b:85:4b:e9:3f:30:a2:63:34:b1:d5:d5:bb:72:4c:43:
6e:04:3a:dd:5d:fa:1b:a6:fe:d6:5e:51:57:6d:ef:15:0b:18:
d3:49:fd:02:cb:9d:c0:29:09:8d:e6:d1:17:85:db:92:ee:0c:
2b:2c:62:e9
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZBPYl9vWGAWN40+m5auSUXfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjQwNjI1MTIzMjQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTBjNTJmNjE1YmE5MDBkZmNlZDk2OTlmNzkyZWViM2ZhYThhOTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EkpsKURiTFXUrePLCL42eXfB4Nr
bhIrF1o0lYs5twGoVOqqiK1crMO8QUDYKMvVeUyw2tRqGQN3tgdPNuFErG1ek4TG
idKQ7mQwClhRvaVUeuPWCjbYVDj6TzW2J1qLon+zXv/GMT+AgdLiCKkN5++yuyJz
Wq6/W5e5lTTfiSl3XzXquXW8oxBVcQs3Pg078hMpmu0tN68UgaMByMwpiNz2D/2h
NKZKDyghZzgy002Af+z6N37zRqWLa2bAcMJhClzqBgxtuDjdBexmtBBaT3fVYza6
lpEPg6pfiAY2Z3DLVUfkhWatFBbtl36dsDPQiO9n3DPK7dhb5Y+PG5/tuwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFLoMUvYVupAN/O2WmfeS7rP6qKk+MB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvdWd4UzloVzZrQTM4N1phWjk1THVzX3FvcVQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUBURPDHjAN
BgkqhkiG9w0BAQsFAAOCAQEAR6DfJHCxabZfHzZZORccz9S/T1Y0Zz9+wR/UyBrw
ZSFXcfRwlZqfPpGvzocpYCSBZ5pPJUgLWdnm5IWOG23R1PGehpQmt8WjEPPbftet
UJkC13RcyTl6cX3v/NOTzp1M1YeZVDeyOiEXdhXSe5e4WeTdf0XaBXLrXRxoubxa
cSZpS3J1qdH90GQyULQOOxD7c8jSig5WeZtM4udxMNikBlSKV3mmklhnMLjGANx1
xFIfxFdToYkn1F812pSOG9R+sxaUcjVCqmsbhUvpPzCiYzSx1dW7ckxDbgQ63V36
G6b+1l5RV23vFQsY00n9AsudwCkJjebRF4Xbku4MKyxi6Q==
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:13:23 2024 by rpki-client on console-fra.rpki-client.org