Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/zyLYOBEb1YKJqgvtYmJ0-uw3oC4.roa
File: zyLYOBEb1YKJqgvtYmJ0-uw3oC4.roa (raw, json)
Hash identifier: +TR/zuT1zHfB5dMQOk+7TLtdbOOmgpWkO0tYQKJkTF0=
Subject key identifier: CF:22:D8:38:11:1B:D5:82:89:AA:0B:ED:62:62:74:FA:EC:37:A0:2E
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBD2C8590A911758479BBF15CBADE7
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/zyLYOBEb1YKJqgvtYmJ0-uw3oC4.roa
Signing time: Wed 01 Jan 2025 17:48:36 +0000
ROA not before: Wed 01 Jan 2025 17:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396603
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:d2:c8:59:0a:91:17:58:47:9b:bf:15:cb:ad:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf22d838111bd58289aa0bed626274faec37a02e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3c:26:38:c6:30:51:7c:7b:69:57:4d:1c:f3:
0a:a5:d3:de:3f:ca:8f:b6:b5:fc:15:91:cb:9f:38:
6e:1b:35:4c:74:bb:97:23:f9:95:8c:2e:70:44:f4:
f1:cc:c6:8a:94:50:42:d5:a3:2a:95:3c:9c:20:2a:
7b:94:21:3a:50:3e:8c:f9:7e:7d:4f:b2:6b:a8:34:
92:e2:70:c0:6d:85:ba:fc:5d:c8:32:b6:b7:2e:8e:
3b:09:71:ec:61:89:e5:c8:61:59:5b:dc:7a:26:36:
a3:8c:55:1b:19:b4:4b:70:5c:f1:72:d1:06:09:b4:
2b:7a:f5:08:91:e9:f1:ee:38:73:03:b0:30:5e:2b:
52:cc:4f:5a:f5:23:0c:75:2f:ff:dc:5d:67:c2:ae:
c3:df:60:b5:05:38:0b:8f:ea:0d:28:c0:b5:ec:32:
6e:37:4d:1e:e4:7b:c6:32:f3:db:14:61:56:c3:cc:
17:93:3f:cc:a4:4a:fa:cc:f5:78:3d:c0:1f:d1:00:
e7:bd:03:f9:d3:18:45:bc:a4:b4:72:2a:c6:d4:21:
6c:42:0d:ba:e5:c0:fb:d1:3b:db:f3:f6:85:76:38:
da:4c:75:36:70:a9:a5:34:c9:e7:4b:30:8a:dc:b3:
d8:54:23:62:f8:b0:1e:ad:5f:ea:f8:93:c0:bf:b9:
d8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:22:D8:38:11:1B:D5:82:89:AA:0B:ED:62:62:74:FA:EC:37:A0:2E
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/zyLYOBEb1YKJqgvtYmJ0-uw3oC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
53:cc:3b:c7:f2:9d:d3:21:fb:50:a8:a2:b9:2c:58:03:f7:2c:
c0:eb:20:b5:e6:85:a8:49:b5:cd:9c:7e:b0:8d:ba:32:83:5b:
6d:eb:f7:d8:f8:f0:d9:8e:da:84:36:cb:96:b8:c2:5e:a2:16:
7a:d4:d9:77:b3:0c:02:51:42:98:d3:5d:e9:e0:44:ec:c5:16:
99:b5:ff:35:dc:96:ef:fc:29:f3:cc:89:60:b0:6b:b3:90:03:
77:1f:16:cf:45:d2:42:a9:2e:92:b3:48:5b:9d:18:2d:96:46:
3e:3f:63:49:d9:07:3f:a7:87:ac:c9:0e:de:95:4a:cd:2c:9f:
13:62:47:94:be:a1:94:8b:32:56:4e:13:03:ef:75:5c:1f:0f:
ae:ef:c6:03:ad:b5:e1:de:95:0e:79:c7:06:63:ff:d0:33:97:
0f:c8:14:a2:24:0f:91:5d:d4:bc:0e:a2:15:11:de:d5:aa:12:
b2:d4:6f:b7:7c:01:4c:cc:3b:ba:70:c5:08:32:9f:14:10:31:
cd:31:cd:f0:85:e6:62:1c:e4:a1:12:b9:db:ed:9e:99:8f:a1:
17:03:3b:d5:b3:8a:55:b0:df:e4:b7:a4:f7:65:b0:8c:c9:0b:
48:88:4f:c1:3b:00:ad:97:33:81:94:5b:1d:84:68:85:d0:73:
41:02:cd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:02 2025 by rpki-client