Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/MV5dYJDLLpX3RBmhci7pFCsR54g.roa
File: MV5dYJDLLpX3RBmhci7pFCsR54g.roa (raw, json)
Hash identifier: hR97hadtABUdUsW1eszjpxxPWOPvza5t0ja26QPtMoc=
Subject key identifier: 31:5E:5D:60:90:CB:2E:95:F7:44:19:A1:72:2E:E9:14:2B:11:E7:88
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 0190A38EF9BDC36D045EF6489BCC525EB5CD
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/MV5dYJDLLpX3RBmhci7pFCsR54g.roa
Signing time: Thu 11 Jul 2024 20:49:34 +0000
ROA not before: Thu 11 Jul 2024 20:49:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152599
IP address blocks: 81.31.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a3:8e:f9:bd:c3:6d:04:5e:f6:48:9b:cc:52:5e:b5:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Jul 11 20:49:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=315e5d6090cb2e95f74419a1722ee9142b11e788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:69:04:df:49:15:74:1f:ce:b2:53:d2:40:e0:
bb:b0:78:b8:e1:2a:65:c1:af:f1:87:12:ad:e8:fa:
1b:5f:78:49:f7:d5:1d:65:2c:93:60:34:2a:5b:da:
89:a3:d5:a3:5e:45:d9:ce:1e:87:6c:65:95:45:59:
2c:fc:53:93:fa:88:93:1f:7c:eb:da:06:da:01:dd:
4d:60:b7:ad:46:f0:34:7e:aa:63:cd:1c:01:ce:5a:
9e:5e:11:43:52:37:86:4e:23:ac:ff:18:a3:07:0c:
73:3b:65:57:5a:f4:6b:e0:55:6b:b1:23:2c:aa:94:
87:e2:ac:73:d5:b7:92:9f:4e:9c:06:91:b2:3a:5a:
8b:05:e3:d9:78:1c:40:31:57:e9:b8:e3:6d:d8:c1:
4a:34:7e:8a:65:03:77:6e:ca:ec:50:c2:c2:f0:2e:
f3:de:10:72:7e:40:c0:a6:5e:5b:ef:b6:58:91:c8:
77:c9:ae:c6:4d:90:1d:80:8f:55:10:af:75:34:b4:
e5:bf:b6:7b:ca:94:91:69:4f:24:b8:3c:8c:8e:32:
05:8c:46:9a:05:2e:c7:a4:77:98:dc:fe:91:b1:a0:
25:c0:e1:4e:e0:2f:37:f4:b7:e1:a0:cb:87:24:85:
9f:34:5f:e3:20:f9:71:b8:9e:cb:9d:f5:02:da:64:
1e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5E:5D:60:90:CB:2E:95:F7:44:19:A1:72:2E:E9:14:2B:11:E7:88
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/MV5dYJDLLpX3RBmhci7pFCsR54g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.234.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:6d:22:42:42:f4:79:60:f1:49:2e:11:e7:d7:70:c8:6d:43:
c8:d1:9e:1f:9a:a1:97:a9:92:21:52:e5:82:fd:8c:ce:e6:c2:
54:99:bd:d5:41:af:2a:8d:85:21:f0:46:b6:9a:88:3d:df:2b:
8b:0e:86:8c:ea:56:90:a9:c5:25:16:06:c3:6d:0d:8c:a7:91:
14:98:3e:04:18:88:50:d6:3c:00:73:53:cb:70:57:7d:c0:ea:
dd:9a:35:8e:2c:f1:d2:5d:0b:ca:69:d3:72:95:b3:38:6a:28:
2f:74:d7:d1:05:b7:ca:7f:82:48:4b:f0:92:cc:be:b2:06:19:
da:0c:9c:00:41:9d:29:02:bc:9d:30:31:50:d2:9c:2a:de:15:
5c:e1:12:50:e3:3d:12:cd:50:6c:2a:bc:90:c8:9e:53:bc:77:
c8:b8:c2:c5:11:75:de:c1:9b:f7:fb:f2:f5:fe:ac:82:ef:e7:
08:0e:b6:d5:3b:f8:d8:16:24:f2:94:12:1e:50:12:4d:c0:57:
f7:a3:c0:46:9a:39:d1:3c:44:db:b2:02:3d:d4:a2:23:64:97:
81:87:d9:7d:72:78:5e:9f:1b:ba:96:b8:6a:67:da:c5:6d:01:
8a:b2:46:41:c9:ad:71:63:10:c8:6f:11:d0:f7:fd:b1:60:73:
a0:8f:a3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:31:40 2024 by rpki-client on console-ams.rpki-client.org