Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/oaELbxW93ALbUENig83lmVqvfCc.roa
File: oaELbxW93ALbUENig83lmVqvfCc.roa (raw, json)
Hash identifier: ZoOuRkxRHMgym+2Sb0DIaUKF3Sw4+zZEMxGSAHYLhpc=
Subject key identifier: A1:A1:0B:6F:15:BD:DC:02:DB:50:43:62:83:CD:E5:99:5A:AF:7C:27
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 018FE8B725D800970C28C1A270010870D08C
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/oaELbxW93ALbUENig83lmVqvfCc.roa
Signing time: Wed 05 Jun 2024 14:04:27 +0000
ROA not before: Wed 05 Jun 2024 14:04:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212609
IP address blocks: 81.31.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Dec 2024 16:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e8:b7:25:d8:00:97:0c:28:c1:a2:70:01:08:70:d0:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Jun 5 14:04:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1a10b6f15bddc02db50436283cde5995aaf7c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:06:87:24:b9:61:a5:f0:95:22:8e:87:dd:14:
6e:b1:8d:ac:ca:97:8e:ba:bf:00:5e:c7:2f:c7:b2:
d0:7c:8c:6b:95:6e:53:1c:6d:5d:28:c2:f0:02:bd:
d2:30:82:07:95:af:ab:70:b2:cf:57:26:b5:30:99:
56:f0:6e:d0:9c:9d:87:b6:f1:7a:b4:f2:79:86:3d:
86:c1:2c:04:23:02:7b:34:cf:8e:0d:dd:0f:78:53:
14:2f:35:73:de:e3:f8:24:fb:ce:c2:e5:3c:c3:e3:
76:de:ae:66:19:b0:4a:dd:b9:b9:ca:a7:2a:07:b7:
89:4f:99:2b:f2:bd:31:42:59:8f:8b:a0:79:cd:78:
a6:18:aa:6a:21:d7:9a:2e:ea:ce:ff:a5:d0:14:88:
1e:c6:f3:4d:8b:83:e5:7a:c2:17:d1:9a:6b:d9:79:
bd:74:5d:40:86:d4:62:71:34:53:16:a0:31:9d:08:
ac:d9:33:ac:db:50:e5:b0:28:32:8a:17:c5:09:57:
b1:fa:96:5a:1f:a2:9b:8c:e0:c3:51:1c:75:f2:bc:
ca:80:df:e0:b5:13:2f:a0:82:db:c7:12:d4:b9:57:
ad:2b:eb:b0:63:1f:c7:d4:8c:b5:95:7c:8e:c1:6f:
53:7b:45:df:35:ac:8f:cf:ac:b8:7f:75:c0:d9:6c:
e5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A1:0B:6F:15:BD:DC:02:DB:50:43:62:83:CD:E5:99:5A:AF:7C:27
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/oaELbxW93ALbUENig83lmVqvfCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.235.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:5e:8a:23:72:d7:de:47:56:c1:49:d9:6b:f7:42:9f:e4:b2:
2d:78:74:32:e2:69:ad:62:9c:6f:97:0b:2f:66:51:58:05:d1:
13:04:f6:0c:ff:c6:ec:8f:71:e8:45:62:e1:e5:3d:c9:fc:88:
71:ef:97:61:e8:a1:6f:a1:e3:a6:be:0f:a6:d4:6d:2f:1a:eb:
7d:07:40:37:05:eb:ea:b3:34:05:e4:d6:74:cd:5e:cc:a5:d3:
84:a3:50:64:77:85:90:a1:60:df:f9:26:ee:b0:5a:71:df:52:
69:14:5c:7b:97:65:f0:70:58:84:07:06:1b:7b:41:89:98:d6:
57:c9:b5:94:74:50:ab:87:6c:a5:ed:b8:ec:ff:52:fb:1d:87:
99:da:b8:8d:e5:89:ac:26:8e:cf:c9:e1:f1:bb:3d:9e:fa:e5:
0b:27:4a:67:89:8f:f7:5d:7b:69:1d:16:c3:e3:f9:50:b0:0e:
b6:4a:0a:05:be:3b:1d:ec:d7:a1:b0:14:df:00:07:df:e9:e6:
90:58:ac:4f:71:fa:57:a0:44:e1:8a:30:12:f4:67:4e:22:fb:
ef:fe:bc:e3:e6:f5:25:25:9d:7f:e6:38:9f:d7:f0:4e:a1:a5:
18:c8:06:64:c2:b6:dc:69:85:c5:01:56:3c:5a:f5:e1:0f:94:
f4:87:3f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 10 22:41:20 2024 by rpki-client on console-ams.rpki-client.org