Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/MbprR2fnc987LEbWk_Wc-vNnmEA.roa
File: MbprR2fnc987LEbWk_Wc-vNnmEA.roa (raw, json)
Hash identifier: SY3n19v9zpB4C+Led+iY/eKumc/G/IfetWzlvF9/z8g=
Subject key identifier: 31:BA:6B:47:67:E7:73:DF:3B:2C:46:D6:93:F5:9C:FA:F3:67:98:40
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 018CC6B93BF64674A56EBDDEB7F98561E1F8
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/MbprR2fnc987LEbWk_Wc-vNnmEA.roa
Signing time: Mon 01 Jan 2024 20:31:17 +0000
ROA not before: Mon 01 Jan 2024 20:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209154
IP address blocks: 31.145.11.0/24 maxlen: 24
31.145.9.0/24 maxlen: 24
31.145.8.0/22 maxlen: 22
31.145.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:3b:f6:46:74:a5:6e:bd:de:b7:f9:85:61:e1:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 20:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31ba6b4767e773df3b2c46d693f59cfaf3679840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:41:b0:1e:b0:ce:b4:e3:c1:24:37:cf:dc:41:
48:d7:40:0a:be:6a:16:f2:9b:f2:af:33:06:81:d3:
12:7b:15:d4:dc:71:98:66:82:b4:76:3b:c6:75:67:
3b:31:9c:df:38:b4:bd:5a:d5:2b:01:6d:00:86:58:
0c:a2:75:57:c1:26:79:c7:59:3d:f3:61:18:b2:1e:
6e:b0:b4:04:6f:72:33:e8:c6:b9:35:6e:83:2e:95:
2b:e7:ec:18:06:b3:c5:7f:9f:8f:7c:61:91:5b:f5:
b0:8a:fb:b0:79:4d:e1:6c:8e:1a:2f:f8:04:8d:76:
36:30:3a:44:1f:1c:75:e7:9a:88:0a:be:9e:7b:2d:
84:b8:c3:bd:87:da:bc:4c:0c:e3:ed:1a:83:81:da:
f1:5c:0e:8f:b4:31:1a:24:b2:2a:96:ad:e8:54:a1:
b2:a8:f6:a3:f4:b2:e1:bb:aa:8e:ec:96:f5:cc:63:
59:1a:a6:8c:70:36:c8:34:e4:c4:fc:5f:20:72:a4:
ad:3a:92:c7:f7:1d:0f:52:66:e2:63:0c:5b:d5:70:
1c:51:b3:72:5e:cd:c8:7d:b1:ce:61:bb:ea:95:fe:
db:a6:52:11:8d:b8:da:82:10:b6:91:a1:85:de:62:
7a:79:f6:07:52:e3:ae:5c:d7:29:81:bd:49:4c:72:
ad:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BA:6B:47:67:E7:73:DF:3B:2C:46:D6:93:F5:9C:FA:F3:67:98:40
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/MbprR2fnc987LEbWk_Wc-vNnmEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.145.8.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:d3:a1:74:35:d0:20:9e:eb:a9:19:34:05:be:51:69:1e:af:
91:c7:49:15:ef:62:c8:5d:d1:ad:20:f8:9d:f9:49:89:99:e2:
f3:e7:49:d2:6f:2e:be:1c:05:3e:a4:74:b9:21:10:03:c8:c6:
ea:eb:c9:c8:b6:6b:39:5b:7b:63:4d:a4:5c:3d:c8:81:37:44:
dc:55:c7:e7:dc:82:21:e9:bc:34:e0:e2:f7:99:7d:df:50:7c:
ca:d4:a3:aa:62:4b:b8:d9:7f:0b:8a:55:61:91:dd:22:46:96:
b7:51:9b:d8:39:9c:96:3e:85:01:94:89:c1:28:67:cd:89:32:
18:00:d3:fc:bb:73:d8:f8:53:fe:98:3a:78:60:b8:b0:9f:d2:
73:33:1c:14:35:90:29:03:c2:1a:e9:72:ae:61:a5:9d:a0:9f:
31:a0:94:95:ae:2e:c6:5f:4f:b2:f1:19:93:f5:a4:a1:15:d8:
30:48:7e:bc:1b:ab:8f:61:80:ec:9b:ca:92:4e:88:ee:97:c1:
79:0b:b0:e4:4e:c7:a2:bf:f5:0e:a6:93:c0:6f:0e:2c:ea:9f:
c8:9f:9c:fb:2d:81:1d:8e:52:5c:d9:31:b5:28:06:5c:33:ab:
5e:1c:cc:59:1f:80:28:9e:70:3d:a8:11:e0:6d:e6:6f:01:65:
53:ce:cb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:06:24 2024 by rpki-client on console-fra.rpki-client.org