Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/zTcfiXECMl4-w9PKG0vU4p2zN0g.roa
File: zTcfiXECMl4-w9PKG0vU4p2zN0g.roa (raw, json)
Hash identifier: 4DQ0bGcA+CTU2Ig0O/Qhk6yUYrd0OK1AQZ6x0ppePPc=
Subject key identifier: CD:37:1F:89:71:02:32:5E:3E:C3:D3:CA:1B:4B:D4:E2:9D:B3:37:48
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 01904F6245D24A4F25F0782570450C4001A1
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/zTcfiXECMl4-w9PKG0vU4p2zN0g.roa
Signing time: Tue 25 Jun 2024 12:32:38 +0000
ROA not before: Tue 25 Jun 2024 12:32:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396546
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:62:45:d2:4a:4f:25:f0:78:25:70:45:0c:40:01:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jun 25 12:32:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd371f897102325e3ec3d3ca1b4bd4e29db33748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:dd:d2:7f:eb:98:51:84:44:fe:38:e5:75:a9:
10:6e:07:33:c3:2b:46:c7:6c:1a:e4:31:30:2e:53:
0c:73:15:18:2e:cf:74:02:0f:b7:e2:6a:d9:6b:dc:
ee:68:a5:85:61:b4:91:42:46:ea:8e:3a:a4:6f:06:
de:0b:3d:61:48:2b:0d:79:b6:21:e5:4e:46:b9:87:
ff:df:a6:c1:54:4e:19:72:ab:8c:ef:5d:54:fd:72:
93:c3:6f:6c:8f:4c:2e:02:e7:19:2e:99:db:09:78:
60:7e:37:d9:a7:d9:fa:ba:9f:5b:6b:6d:8d:10:ed:
97:66:cc:7c:46:7f:d9:39:04:08:5d:d4:ba:72:da:
f6:46:b6:16:c4:20:d4:17:93:53:b5:32:1e:64:44:
fd:6f:47:37:c9:f5:fc:c0:c1:ab:fa:e7:45:2a:09:
0a:cc:ca:75:52:fb:46:3d:4e:b2:83:51:ef:7b:bf:
cc:b5:1d:67:21:92:47:ae:87:7f:00:86:db:96:c6:
f7:51:30:4f:19:25:95:5f:b2:6b:38:c6:a0:0c:88:
6e:9c:86:ca:4e:3b:cf:a3:b1:03:c5:55:5d:4b:c8:
09:35:cd:6e:89:22:42:55:6a:ef:c6:1b:42:10:e4:
ff:43:44:25:53:8c:9f:52:9a:a4:b2:5c:98:b6:11:
47:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:37:1F:89:71:02:32:5E:3E:C3:D3:CA:1B:4B:D4:E2:9D:B3:37:48
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/zTcfiXECMl4-w9PKG0vU4p2zN0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
Signature Algorithm: sha256WithRSAEncryption
ab:91:c7:b0:89:51:3e:66:00:81:16:4c:50:eb:58:3e:a6:c1:
86:f3:5c:a5:28:e9:f1:ec:49:69:71:92:39:82:48:b5:68:3f:
22:94:65:95:30:e2:40:d4:e5:cc:c8:49:38:a6:f6:bf:9b:05:
5d:d0:71:f3:da:73:4e:31:31:82:1f:ce:60:8f:d5:75:71:20:
f9:9b:fc:42:f6:40:3e:6d:69:4f:38:15:0a:08:bb:68:59:b0:
fa:96:7a:9c:3f:86:3b:5c:25:82:64:54:48:c9:d4:84:19:73:
38:45:3e:52:d1:7d:36:b8:f1:91:01:6f:10:81:50:35:6e:38:
b8:0f:67:45:d7:0d:18:e4:6f:7a:78:a0:b5:37:21:e1:39:c2:
08:b9:cb:47:3d:ed:d2:03:55:b7:d8:2e:6d:3a:d2:74:28:bd:
cd:96:48:58:81:ed:ca:dd:9c:a5:09:d6:a4:eb:f1:2f:0e:14:
36:55:b1:24:e3:f3:04:47:ed:d0:79:e3:af:a3:35:36:13:48:
83:ea:d8:c0:9a:0b:6a:13:e6:8b:a7:c9:0d:9f:10:5e:c1:42:
7c:c6:68:27:25:f0:d2:42:5e:a8:e7:ba:f6:8c:da:1c:c0:7a:
bd:b6:16:bd:25:e0:79:de:da:c6:53:28:9f:ab:e2:dd:1e:1b:
d6:b5:d8:1d
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZBPYkXSSk8l8HglcEUMQAGhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl
MDZkNTIwHhcNMjQwNjI1MTIzMjM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDM3MWY4OTcxMDIzMjVlM2VjM2QzY2ExYjRiZDRlMjlkYjMzNzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA693Sf+uYUYRE/jjldakQbgczwytG
x2wa5DEwLlMMcxUYLs90Ag+34mrZa9zuaKWFYbSRQkbqjjqkbwbeCz1hSCsNebYh
5U5GuYf/36bBVE4ZcquM711U/XKTw29sj0wuAucZLpnbCXhgfjfZp9n6up9ba22N
EO2XZsx8Rn/ZOQQIXdS6ctr2RrYWxCDUF5NTtTIeZET9b0c3yfX8wMGr+udFKgkK
zMp1UvtGPU6yg1Hve7/MtR1nIZJHrod/AIbblsb3UTBPGSWVX7JrOMagDIhunIbK
TjvPo7EDxVVdS8gJNc1uiSJCVWrvxhtCEOT/Q0QlU4yfUpqkslyYthFHaQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFM03H4lxAjJePsPTyhtL1OKdszdIMB8GA1UdIwQY
MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt
MzZjY2I1YTA2MTk1LzEvelRjZmlYRUNNbDQtdzlQS0cwdlU0cDJ6TjBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1
LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUBURPDHjAN
BgkqhkiG9w0BAQsFAAOCAQEAq5HHsIlRPmYAgRZMUOtYPqbBhvNcpSjp8exJaXGS
OYJItWg/IpRllTDiQNTlzMhJOKb2v5sFXdBx89pzTjExgh/OYI/VdXEg+Zv8QvZA
Pm1pTzgVCgi7aFmw+pZ6nD+GO1wlgmRUSMnUhBlzOEU+UtF9NrjxkQFvEIFQNW44
uA9nRdcNGORvenigtTch4TnCCLnLRz3t0gNVt9gubTrSdCi9zZZIWIHtyt2cpQnW
pOvxLw4UNlWxJOPzBEft0Hnjr6M1NhNIg+rYwJoLahPmi6fJDZ8QXsFCfMZoJyXw
0kJeqOe69ozaHMB6vbYWvSXged7axlMon6vi3R4b1rXYHQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:47:18 2024 by rpki-client on console-ams.rpki-client.org