Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EXOzgHW5xF_eCb4beMY-ADgtMig.roa
File: EXOzgHW5xF_eCb4beMY-ADgtMig.roa (raw, json)
Hash identifier: JdWcweOl3G9hcB5kydjQVTXm2d9bZdeGrMw625AtAxc=
Subject key identifier: 11:73:B3:80:75:B9:C4:5F:DE:09:BE:1B:78:C6:3E:00:38:2D:32:28
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 019422FC38FCA9F7D3FF9E5F103E83ECE298
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EXOzgHW5xF_eCb4beMY-ADgtMig.roa
Signing time: Wed 01 Jan 2025 17:49:02 +0000
ROA not before: Wed 01 Jan 2025 17:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214506
IP address blocks: 81.31.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:38:fc:a9:f7:d3:ff:9e:5f:10:3e:83:ec:e2:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Jan 1 17:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1173b38075b9c45fde09be1b78c63e00382d3228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:84:8f:75:b9:d5:1a:af:45:66:ad:d7:a2:b4:
73:51:bf:77:a0:6e:b3:66:0e:f5:72:c1:2b:d6:3a:
4c:33:95:61:52:ad:6f:19:68:70:e2:b8:9c:d2:6d:
a9:19:21:5a:9f:a3:33:2d:40:e1:49:3d:23:54:9e:
e7:98:8f:0d:3d:69:92:3f:ab:61:5c:0e:de:2d:08:
6f:dc:db:aa:c8:b4:48:e6:2b:bf:1f:2a:47:f4:97:
b4:75:83:b1:2c:37:a4:5a:11:04:90:76:e0:de:a8:
c8:ae:ea:57:d1:a9:58:39:e4:72:c8:56:00:ed:e6:
6c:8c:8b:f9:81:3e:b4:ca:d6:c5:4e:c6:db:cb:1f:
c8:d1:c8:17:9e:8c:06:66:e0:b8:f2:8a:b4:74:8a:
f5:52:73:87:6d:ac:4d:7e:2b:1f:23:87:11:f9:1d:
b6:95:4c:e4:7c:42:9c:a0:82:74:d6:f3:41:3d:f9:
e8:b0:e4:1e:10:40:19:68:49:88:bb:b9:50:42:76:
54:9f:58:c0:ce:b5:65:5c:ff:4d:a3:51:c7:79:27:
fa:45:17:ff:19:c7:5c:2d:54:fa:96:ab:06:ab:bb:
ad:ed:81:8e:89:87:d1:39:f4:6b:26:7a:b9:2d:90:
a1:2d:a1:b6:a7:95:98:99:3d:fd:88:6c:80:f6:18:
45:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:73:B3:80:75:B9:C4:5F:DE:09:BE:1B:78:C6:3E:00:38:2D:32:28
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EXOzgHW5xF_eCb4beMY-ADgtMig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.231.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:77:4d:9a:ad:d6:38:64:58:f3:f8:6e:16:bb:53:3e:20:07:
ed:00:91:4c:da:89:cd:98:8c:3b:89:41:e8:04:37:e4:90:ba:
b7:5a:1c:5b:11:e4:6c:a9:93:ac:5b:75:0e:42:f3:af:06:5a:
f2:b4:f1:62:b3:c0:6f:28:d9:ac:5c:e3:a9:6f:76:69:66:ff:
4d:64:c9:a4:5f:30:33:68:66:c5:8f:4f:8c:3f:ca:a4:a8:d4:
a9:f0:b2:22:fb:d3:7e:a1:71:71:a2:94:92:4e:d6:14:e2:48:
0b:8d:75:d9:38:74:a1:11:8f:09:d9:d2:5a:6a:29:8d:2f:3d:
08:b1:08:a1:ce:07:41:2c:cf:f5:36:f9:16:75:a3:f1:5b:02:
87:83:43:3b:17:58:61:4c:a7:1f:37:5c:ac:db:92:71:f8:f9:
59:bd:1b:92:fb:73:f5:94:f0:62:ff:23:d9:f9:3a:a1:6f:6a:
c1:b0:b7:ab:36:ab:da:ba:56:16:bc:04:6b:c6:c2:b9:08:75:
f0:9a:c4:3c:72:36:a2:8d:2f:15:5f:de:35:a4:2e:40:96:e5:
3f:8b:57:ba:5b:bf:94:59:f0:e3:3d:f6:04:4f:48:05:fa:88:
c7:3c:eb:59:bd:dc:6a:f0:6e:73:0a:f2:da:d5:d7:ca:11:d5:
da:1c:4c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 11:47:08 2025 by rpki-client