Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/PTHY3FnSNKL1qGShlQcnArSa6Vw.roa
File: PTHY3FnSNKL1qGShlQcnArSa6Vw.roa (raw, json)
Hash identifier: 22MCtIjTOoVjb+/8ROR7rUF3WXBTnYqIsuSyg3TfbOE=
Subject key identifier: 3D:31:D8:DC:59:D2:34:A2:F5:A8:64:A1:95:07:27:02:B4:9A:E9:5C
Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial: 018CC64B5526A267F9F52765E8D155A16E90
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/PTHY3FnSNKL1qGShlQcnArSa6Vw.roa
Signing time: Mon 01 Jan 2024 18:31:14 +0000
ROA not before: Mon 01 Jan 2024 18:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41370
IP address blocks: 31.172.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Jun 2024 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:55:26:a2:67:f9:f5:27:65:e8:d1:55:a1:6e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
Validity
Not Before: Jan 1 18:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d31d8dc59d234a2f5a864a195072702b49ae95c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:40:fd:7b:b4:31:db:66:36:c2:fc:4f:39:13:
10:6b:b4:a1:21:46:38:14:f8:44:12:70:98:c9:c9:
c7:ac:f8:62:04:b7:ab:67:06:89:bb:c4:07:86:07:
1f:03:66:62:5d:e5:7c:bb:e4:0e:b9:78:b1:6d:60:
dc:4b:0c:66:d9:cc:e9:ac:13:0f:a3:fc:f9:6c:21:
77:41:dc:e6:16:ce:aa:4a:10:41:33:7e:26:61:2c:
db:0d:dd:fe:2f:4f:e6:72:d9:bd:6d:40:c6:ec:33:
07:71:3c:0b:e2:18:67:04:92:e7:5c:b4:d6:12:7d:
9e:4d:2f:f8:f2:8d:92:71:26:e5:cb:0e:7d:62:95:
3c:57:c6:91:4f:67:37:7a:1e:33:ed:8e:6b:0b:7a:
0b:15:92:dc:d3:88:69:7f:cb:3d:10:83:a5:ec:dc:
7c:b1:78:90:8b:26:c8:57:48:66:5e:d4:86:c1:4a:
69:72:30:d8:ad:4a:91:fd:0d:4a:42:7b:e5:9f:ce:
ce:22:f6:ca:51:21:dd:b0:06:b5:ea:7a:f9:31:0e:
c3:4f:dd:14:94:1f:34:bb:b1:84:85:ba:85:84:94:
ff:9a:f2:42:a0:34:3c:df:6f:47:36:d3:8f:0e:0c:
a3:d1:88:00:1f:bb:c9:a5:41:95:bc:52:58:b3:c8:
2a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:31:D8:DC:59:D2:34:A2:F5:A8:64:A1:95:07:27:02:B4:9A:E9:5C
X509v3 Authority Key Identifier:
keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/PTHY3FnSNKL1qGShlQcnArSa6Vw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.161.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:49:a0:0a:7d:fc:7b:cf:8c:d4:3f:40:ef:f8:60:50:3b:b7:
c5:e2:56:88:08:7f:de:d5:d3:54:1f:ba:24:f2:2f:59:bc:9f:
7a:9a:27:ff:4c:d7:56:d6:b6:8a:0a:a4:c5:5e:25:0c:2a:be:
4c:1c:dd:48:d3:6c:15:40:5f:25:b5:47:7f:a5:33:31:58:57:
b9:83:48:23:6e:9a:75:d2:81:ee:46:0a:dd:cc:9b:98:df:64:
44:eb:e3:b0:90:35:37:61:8c:d1:a6:c5:9b:0b:16:78:74:5e:
42:33:f6:a3:69:ae:5a:2e:c9:85:15:27:eb:ca:3d:55:57:e1:
c3:b0:70:97:dc:74:85:08:b1:c2:40:b1:d7:8c:b2:02:87:fe:
fb:1b:38:c2:27:80:4e:1c:02:b9:16:da:76:74:5d:f3:8b:28:
2c:69:68:d1:dd:88:24:c1:19:6a:9d:53:c1:08:0d:40:f4:91:
82:67:89:35:75:b5:f7:01:30:cb:91:7a:8c:0c:1a:d1:a6:9e:
8b:11:f2:15:ab:60:9a:36:30:4c:41:92:fe:cd:2c:c7:5d:25:
f2:3d:b4:93:51:a8:66:47:75:18:fd:d4:40:36:a8:98:ac:b4:
1b:d5:39:1e:16:a8:f6:80:28:22:cf:2e:29:df:df:a3:e2:5e:
fc:c2:2b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 15:56:41 2024 by rpki-client on console-ams.rpki-client.org