Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/utCZiElRknRodUkH1OI5ko2Ra04.roa
File: utCZiElRknRodUkH1OI5ko2Ra04.roa (raw, json)
Hash identifier: 7ALqI6nu49zu/gswBTzIej+4VDjnYpdTmFoIoThZoTk=
Subject key identifier: BA:D0:99:88:49:51:92:74:68:75:49:07:D4:E2:39:92:8D:91:6B:4E
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F6273944F8A8489F886657084AD335C
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/utCZiElRknRodUkH1OI5ko2Ra04.roa
Signing time: Tue 25 Jun 2024 12:32:50 +0000
ROA not before: Tue 25 Jun 2024 12:32:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397208
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:73:94:4f:8a:84:89:f8:86:65:70:84:ad:33:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bad099884951927468754907d4e239928d916b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6d:8b:fd:04:6f:39:4c:80:89:57:a8:62:c0:
8c:e7:24:e7:1a:60:09:a4:0f:b3:78:6a:22:b1:45:
8f:ba:a2:ea:95:b9:5b:57:5a:aa:65:1a:27:1c:a1:
69:46:15:80:de:1a:d1:b0:5c:c9:06:b8:9e:0b:d7:
c8:93:5e:9f:49:6b:13:36:cd:3d:01:ff:39:72:ae:
95:5f:c9:3c:21:b3:44:fe:57:85:6a:f3:1e:8c:03:
62:bb:80:9b:ad:1f:08:6d:36:25:e3:90:69:af:d3:
fd:b2:84:75:ba:27:c9:0e:80:1d:11:aa:e0:7d:13:
67:f1:2b:0d:61:c8:25:01:ab:19:a2:09:36:0c:f6:
d0:e4:dc:ca:9a:1a:f8:95:03:53:14:f0:35:24:da:
80:c8:c4:d3:33:c1:b6:17:d8:39:c4:5f:6f:92:92:
a8:32:8e:69:b7:97:99:ed:d9:84:e6:47:6e:c5:9b:
38:41:85:50:dc:6f:c5:01:1e:07:e2:c3:fe:c4:0e:
b1:3a:16:45:aa:10:67:ee:fe:ee:91:ee:56:4a:dc:
0e:b8:53:aa:1a:da:2b:92:87:38:e5:3b:82:c1:d5:
d9:3f:ab:83:ba:ce:2b:d7:57:3d:69:b4:e1:0b:24:
ca:d4:5e:05:ed:93:7a:43:82:23:3f:9c:3e:14:16:
21:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D0:99:88:49:51:92:74:68:75:49:07:D4:E2:39:92:8D:91:6B:4E
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/utCZiElRknRodUkH1OI5ko2Ra04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
9b:fe:18:5d:59:66:1f:02:38:54:a9:ad:da:18:46:1c:e4:ef:
0f:ba:72:54:c9:87:c6:99:1e:fa:bf:39:fb:3d:89:8b:7d:04:
7c:25:25:7d:21:94:3a:e2:9d:60:cd:1a:c7:e3:7e:4e:7f:54:
4b:de:39:95:53:92:85:b6:a2:ef:b2:a5:31:51:a8:61:01:6c:
dc:cb:ee:76:f5:0c:d8:74:b2:cd:67:86:b9:fa:6c:68:6f:16:
5c:f2:c9:de:5e:10:11:f3:37:be:a7:e5:b4:f4:0f:9a:e1:33:
18:f6:dd:fb:7e:60:82:91:ec:84:c7:5c:67:a1:f3:99:b0:d3:
61:dc:6d:9f:39:ef:18:1a:48:54:4f:09:1d:62:96:9c:29:c8:
fa:74:2a:52:bb:f5:0e:26:be:39:00:69:10:01:f2:9c:b5:a8:
60:56:3a:6e:fb:02:06:42:50:b2:6b:e4:78:c5:30:05:7f:72:
24:91:f9:9d:22:dd:ab:16:d0:bd:1c:0f:07:6b:a9:c1:a5:c5:
15:ab:16:78:70:53:75:05:8d:78:1c:33:d2:fa:d3:07:73:13:
18:43:b5:55:6f:e7:d8:db:a5:48:a3:6e:be:93:98:7a:3d:93:
17:10:d4:6f:9c:32:b7:b7:77:d2:d8:8c:be:13:e0:00:89:32:
e5:8b:cc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:13:23 2024 by rpki-client on console-fra.rpki-client.org