Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/yCShamzuLlfoKYOBcpk5tKdzcBU.roa
File: yCShamzuLlfoKYOBcpk5tKdzcBU.roa (raw, json)
Hash identifier: KlmNg+EAmQnIt5yZxbI4L2QMImSXct/QG2q8CD77POg=
Subject key identifier: C8:24:A1:6A:6C:EE:2E:57:E8:29:83:81:72:99:39:B4:A7:73:70:15
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F62378EB5CD7B637E7EF85303128F0F
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/yCShamzuLlfoKYOBcpk5tKdzcBU.roa
Signing time: Tue 25 Jun 2024 12:32:35 +0000
ROA not before: Tue 25 Jun 2024 12:32:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25485
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:37:8e:b5:cd:7b:63:7e:7e:f8:53:03:12:8f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c824a16a6cee2e57e8298381729939b4a7737015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:53:ca:a6:28:2a:a1:68:69:20:86:ae:f1:68:
29:40:22:57:7b:c9:bc:e5:16:a6:e9:f5:c5:b0:48:
2d:1e:35:22:0d:89:66:be:ba:96:06:f3:bd:ed:5e:
d9:9a:b1:58:ef:45:6a:08:18:6f:b8:03:30:da:cb:
9e:2d:77:8d:70:de:81:26:d9:b2:2e:9b:82:83:d3:
de:e5:d5:c2:e5:0e:7a:4f:8f:ed:cd:50:f1:13:b4:
1a:00:ea:7b:f3:c9:5b:de:9c:0c:9c:3f:fb:55:9e:
6c:3a:1b:c7:f1:37:6c:58:ef:a3:b2:a9:66:e3:49:
de:e5:52:23:08:1f:8e:f0:43:ee:95:68:bd:11:14:
ab:1a:c2:42:63:43:ae:96:39:20:c8:f4:14:62:cf:
8e:9e:e5:ee:54:fe:fb:2a:d2:b0:43:9e:c5:47:a2:
3f:90:b9:69:f9:28:90:af:88:1b:75:03:34:3b:b3:
e1:a5:a3:82:e6:df:56:17:43:ec:8a:51:08:09:25:
35:1c:20:e4:8e:05:f1:63:14:d3:57:93:d9:a4:b6:
7e:ee:2d:77:af:b8:8b:8d:7c:57:00:e8:ef:36:3e:
10:72:87:b1:d0:b0:67:35:fa:31:b9:2d:6b:e9:b6:
78:df:ff:35:8e:1a:dc:62:f4:a8:d3:59:d2:25:da:
5e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:24:A1:6A:6C:EE:2E:57:E8:29:83:81:72:99:39:B4:A7:73:70:15
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/yCShamzuLlfoKYOBcpk5tKdzcBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
1d:5d:0f:2e:73:88:83:07:c8:9d:c6:e1:66:ca:2c:ba:b3:33:
c8:05:05:80:eb:65:29:93:65:5f:5d:05:fc:5a:7b:cf:2f:64:
89:b8:7d:6e:33:1b:21:ff:7d:ed:6d:74:11:72:98:f4:09:d1:
80:58:36:e2:83:b1:32:5c:b9:26:96:11:a4:76:5e:b7:3f:80:
c6:7e:69:1a:d9:3f:6f:5b:fc:5f:15:ab:c7:59:f6:d8:97:56:
e4:55:09:ed:6b:65:46:55:da:a0:40:9d:ff:e6:f3:a5:d2:22:
c0:9f:49:32:25:3f:af:86:92:f4:08:3e:e3:4a:f7:1f:c9:3c:
fd:a4:3a:8f:75:92:0f:1e:17:ab:1d:65:9e:7d:39:1e:41:f9:
11:2f:44:5d:26:ab:c6:fa:b0:c6:96:ea:66:36:fc:ed:52:2b:
0e:58:e1:9b:fd:f8:59:b1:c7:04:f6:f3:83:45:9c:0b:59:f5:
ce:14:97:8e:69:13:e8:29:c4:de:ac:c6:8b:89:8f:2e:a3:49:
bc:95:ba:fe:b1:81:0d:96:15:78:92:4f:f2:48:e8:53:54:e3:
35:3b:fc:39:66:4c:ed:7f:04:81:19:9e:49:b9:08:82:21:e4:
0f:08:ba:3c:a5:45:3f:07:4b:7b:f1:74:8d:74:4b:a0:28:96:
77:f1:5d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:47:18 2024 by rpki-client on console-ams.rpki-client.org