Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/LwR5e-3XdDXFjm5eJuuKPbFg1wM.roa
File: LwR5e-3XdDXFjm5eJuuKPbFg1wM.roa (raw, json)
Hash identifier: 4JsswUG9Ou5/9jUtsWyiDQhEMAGV7MLxdDyUU0ZVg4A=
Subject key identifier: 2F:04:79:7B:ED:D7:74:35:C5:8E:6E:5E:26:EB:8A:3D:B1:60:D7:03
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 019422FC347478B018E58B858B64FCDCC301
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/LwR5e-3XdDXFjm5eJuuKPbFg1wM.roa
Signing time: Wed 01 Jan 2025 17:49:01 +0000
ROA not before: Wed 01 Jan 2025 17:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 81.31.244.0/24 maxlen: 24
81.31.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:34:74:78:b0:18:e5:8b:85:8b:64:fc:dc:c3:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Jan 1 17:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f04797bedd77435c58e6e5e26eb8a3db160d703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:45:bd:22:cb:f4:cc:a3:fc:01:c5:4b:47:8a:
b7:df:b3:a6:96:a4:ce:e7:90:1d:54:eb:f1:46:04:
41:b2:f4:a3:e9:b7:13:db:fb:27:b8:81:2b:0f:40:
83:57:01:1f:96:54:6e:6f:33:03:89:3f:ce:50:5f:
8a:59:22:9c:af:f3:08:67:03:cb:13:ea:79:58:82:
4c:cf:e2:cf:5f:d8:9d:0d:60:8b:2c:cb:e1:7d:25:
56:94:70:a2:0a:7a:57:cb:6a:f4:b2:e3:d8:d9:0c:
e1:8e:95:4a:dc:d6:c3:42:a2:3d:5b:ff:0d:bd:26:
fa:5e:60:68:ce:44:cf:d5:78:b5:1e:29:94:b5:cd:
58:ea:1c:60:22:e5:c7:88:91:29:f2:cc:aa:fe:e1:
29:cb:8c:b7:74:f6:75:77:09:ea:8b:38:e6:31:a7:
13:96:2e:d4:e9:e0:33:9c:81:46:01:0a:cf:55:68:
0c:25:ef:a1:1a:99:c5:41:84:78:1b:83:46:ed:07:
ff:aa:c5:0e:17:c0:2f:bc:c7:1f:f7:76:92:c6:85:
a5:fb:ac:ca:98:bf:18:aa:3d:11:39:03:e2:7d:5e:
4c:ae:88:94:61:09:25:73:74:a0:6f:72:04:b8:ef:
1e:9e:c2:07:53:97:ed:bf:2e:11:38:17:30:54:60:
24:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:04:79:7B:ED:D7:74:35:C5:8E:6E:5E:26:EB:8A:3D:B1:60:D7:03
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/LwR5e-3XdDXFjm5eJuuKPbFg1wM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.244.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:76:59:dc:06:fa:3b:91:c0:ff:1b:a9:3b:db:84:24:f1:25:
2b:53:b1:34:48:f5:3a:46:5e:00:79:89:66:8c:ed:85:d9:1e:
f9:a7:14:73:12:01:73:38:f4:46:21:30:3c:c8:42:0b:3e:9c:
ad:7f:35:8c:7b:3d:6f:b1:dd:5c:23:e0:bf:5d:6a:d7:28:b4:
57:e2:bc:7d:76:c1:ef:ef:ba:4f:f0:43:9f:8d:87:48:5e:11:
e6:53:55:24:cb:1d:fc:4c:d4:71:28:ae:ac:dd:7e:fa:a1:8c:
65:91:4a:1e:9d:08:b3:63:23:c9:d8:8f:34:11:94:a0:b1:4b:
80:9e:a3:db:bd:6d:f8:7d:02:e3:e5:d6:24:4e:b0:66:cb:27:
57:55:44:41:ad:33:5f:74:2c:56:02:64:08:92:39:da:69:75:
e5:53:03:32:1e:fd:55:2d:de:5f:80:a2:0d:4c:86:c3:10:ce:
44:60:d2:dc:fa:28:b2:1f:a0:37:6d:62:0c:26:8d:bf:df:f8:
62:07:91:09:12:8c:56:1d:8a:7f:b0:74:d2:17:a9:d3:de:9b:
7c:02:5a:4a:2c:6f:71:4d:21:da:6b:ed:4b:4c:03:04:2b:1e:
0d:69:a4:89:63:d8:96:3e:88:47:78:a8:0c:bc:62:41:f1:88:
7d:6d:cf:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:03:16 2025 by rpki-client