Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/MTEb-aObky_GvuQPAkeqYsNXKN4.roa
File: MTEb-aObky_GvuQPAkeqYsNXKN4.roa (raw, json)
Hash identifier: 5nKKuDkgKFHRLDuN+19Yi8MCFJaTdcCtwLJ9MjAqzpU=
Subject key identifier: 31:31:1B:F9:A3:9B:93:2F:C6:BE:E4:0F:02:47:AA:62:C3:57:28:DE
Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44
Certificate serial: 018F7BD32427EC0C681471D5C9E3F11B1853
Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/MTEb-aObky_GvuQPAkeqYsNXKN4.roa
Signing time: Wed 15 May 2024 10:36:25 +0000
ROA not before: Wed 15 May 2024 10:36:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43531
IP address blocks: 31.217.128.0/19 maxlen: 24
31.217.128.0/24 maxlen: 24
31.217.129.0/24 maxlen: 24
31.217.130.0/24 maxlen: 24
46.18.168.0/21 maxlen: 24
83.243.16.0/21 maxlen: 24
89.30.0.0/17 maxlen: 24
89.30.68.0/22 maxlen: 24
91.196.184.0/22 maxlen: 24
185.55.16.0/22 maxlen: 24
185.143.244.0/22 maxlen: 22
2a01:8200::/32 maxlen: 48
2a02:27f0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:7b:d3:24:27:ec:0c:68:14:71:d5:c9:e3:f1:1b:18:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44
Validity
Not Before: May 15 10:36:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31311bf9a39b932fc6bee40f0247aa62c35728de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9b:d9:55:16:59:e8:9c:cd:6c:8a:7d:31:08:
1c:4d:29:86:3d:cb:76:8f:9c:17:60:d2:1e:01:b3:
4c:96:b8:dc:14:16:79:b5:ca:16:48:85:b0:49:e6:
33:e9:1e:ab:a0:9b:96:32:91:b3:81:6c:85:db:ae:
5c:f3:66:8d:31:de:9f:11:7e:03:60:57:a6:eb:35:
2e:b4:82:de:bb:01:5a:52:49:d2:24:f7:0d:ce:0b:
ce:6e:8a:78:35:8b:ab:d1:fe:99:53:cc:2f:34:11:
86:15:9a:99:59:53:08:0a:13:29:45:bb:c7:51:48:
fd:41:ad:30:a2:7b:69:4f:b4:9f:bf:4a:71:10:a0:
48:25:6b:c3:85:a8:34:46:cb:3a:46:f9:56:29:12:
fb:d1:91:35:65:19:d9:bb:8a:8f:b6:fd:85:d8:50:
37:a4:a0:4e:fa:4e:c7:24:28:10:83:42:bd:56:ef:
bd:30:22:f8:5b:e3:e5:d7:12:90:f3:49:23:5e:63:
fe:15:f1:c2:66:79:b9:59:c2:d5:7f:6a:d5:1c:e9:
fa:d3:d8:dc:86:c5:d7:58:aa:12:09:4d:39:c3:19:
fd:05:11:c2:6e:c6:ae:f5:bd:7d:f1:ad:1f:e8:53:
40:cc:62:f3:18:b4:3f:64:f3:91:9d:28:3e:39:a7:
b8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:31:1B:F9:A3:9B:93:2F:C6:BE:E4:0F:02:47:AA:62:C3:57:28:DE
X509v3 Authority Key Identifier:
keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/MTEb-aObky_GvuQPAkeqYsNXKN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.217.128.0/19
46.18.168.0/21
83.243.16.0/21
89.30.0.0/17
91.196.184.0/22
185.55.16.0/22
185.143.244.0/22
IPv6:
2a01:8200::/32
2a02:27f0::/32
Signature Algorithm: sha256WithRSAEncryption
11:27:1e:54:49:af:10:74:d0:aa:a1:83:bf:fb:fd:af:18:c3:
10:9b:7e:b3:f5:75:d8:e5:75:37:cd:49:c7:2d:a0:b2:b6:d9:
8a:1b:63:aa:bc:68:98:f8:93:7d:88:e6:53:38:f5:f4:9d:1b:
d2:ac:9d:03:dd:1f:6c:e0:c3:94:b8:98:6f:19:aa:9b:74:64:
3a:2c:9b:c3:ab:e2:e1:61:67:2a:4e:6e:01:9f:d8:ce:55:73:
5f:0e:76:33:18:e5:2b:56:7c:40:8f:33:e6:0f:35:f7:e6:b5:
42:60:0e:b1:c5:c9:79:4a:cf:c5:8d:ef:b9:34:81:07:ef:ff:
3b:91:b1:79:cc:98:65:14:23:71:eb:c5:93:f7:ca:64:22:91:
ad:5c:ee:34:64:68:3f:56:4e:b8:dd:06:d7:ef:04:fb:11:42:
ff:66:dd:85:f6:14:2f:33:bd:a5:4d:88:6b:f9:ca:29:39:19:
1d:09:f6:13:5b:44:a4:33:13:5e:e8:4e:c1:ba:ac:6a:8f:a7:
cd:26:22:96:6f:4b:ec:0a:07:c7:68:d8:64:a1:5f:b5:2d:01:
55:f3:18:c7:81:53:d0:1f:73:19:4b:34:d5:09:52:0e:9b:08:
62:38:64:b3:02:07:82:00:71:0e:e7:f9:50:a2:a4:03:33:21:
6f:ec:e8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:56:33 2024 by rpki-client on console-ams.rpki-client.org