Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/SAakE3Q6cPmNMskO24QrOSj97nQ.roa
File: SAakE3Q6cPmNMskO24QrOSj97nQ.roa (raw, json)
Hash identifier: K+vKwpdJcXezDVocgDTnKOGHRqJsGkEUAJr6FHEobNA=
Subject key identifier: 48:06:A4:13:74:3A:70:F9:8D:32:C9:0E:DB:84:2B:39:28:FD:EE:74
Certificate issuer: /CN=32ee1bcd8ce393d98a7583ac13f1425d4faf27c9
Certificate serial: 018CC26D7ABDCC55E4A217FF74AA904E5A85
Authority key identifier: 32:EE:1B:CD:8C:E3:93:D9:8A:75:83:AC:13:F1:42:5D:4F:AF:27:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/SAakE3Q6cPmNMskO24QrOSj97nQ.roa
Signing time: Mon 01 Jan 2024 00:30:03 +0000
ROA not before: Mon 01 Jan 2024 00:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 31.171.212.0/24 maxlen: 24
31.171.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:7a:bd:cc:55:e4:a2:17:ff:74:aa:90:4e:5a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ee1bcd8ce393d98a7583ac13f1425d4faf27c9
Validity
Not Before: Jan 1 00:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4806a413743a70f98d32c90edb842b3928fdee74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:aa:b6:79:4f:bc:92:12:12:0f:2c:48:82:88:
3a:11:a1:0f:ea:9d:60:a8:de:50:75:0b:57:ea:ac:
a9:97:b5:1c:1d:5e:af:56:95:85:2e:0c:09:be:70:
66:28:08:e8:e1:94:32:af:ea:3e:2e:e6:2f:f9:cf:
38:ef:41:86:5f:0f:99:15:c8:b2:06:de:e8:c5:3e:
62:95:87:4f:86:82:48:8d:da:75:b1:f4:9e:9a:14:
1f:37:63:ac:14:4a:e4:db:ff:a2:0e:e7:57:15:4d:
5e:d2:01:5b:d6:0a:19:6f:61:7e:1c:15:39:74:53:
de:6a:d1:8e:04:5d:85:68:20:55:1d:4e:9c:3f:03:
8f:ae:f7:ca:0b:8d:a3:6b:cb:1d:8b:a9:94:db:3f:
1b:22:38:0c:0a:7a:bb:b2:8a:fd:fa:01:28:92:d6:
5f:61:d6:77:01:64:02:66:28:2d:17:de:8d:26:3f:
12:63:e3:ea:92:3e:5d:c6:c7:bf:a1:3a:45:39:9d:
ba:89:c5:82:4e:4d:fd:10:81:50:24:21:d2:da:fe:
1b:b2:e8:d5:95:df:fe:6a:88:a8:09:2d:a1:1d:d4:
ac:e7:10:68:73:4c:b2:d7:82:fe:fe:ce:2a:46:cf:
67:3b:ce:d1:e7:14:c9:5d:2c:e5:63:b8:5c:37:44:
5b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:06:A4:13:74:3A:70:F9:8D:32:C9:0E:DB:84:2B:39:28:FD:EE:74
X509v3 Authority Key Identifier:
keyid:32:EE:1B:CD:8C:E3:93:D9:8A:75:83:AC:13:F1:42:5D:4F:AF:27:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/SAakE3Q6cPmNMskO24QrOSj97nQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.171.211.0-31.171.212.255
Signature Algorithm: sha256WithRSAEncryption
08:79:b9:99:31:41:44:07:4c:b3:b7:ee:4b:a1:63:0d:8b:84:
7b:8d:36:30:93:21:87:d7:c2:2e:92:1f:1b:ce:0b:89:99:f2:
41:42:97:d7:56:aa:bf:f5:03:e9:25:0d:eb:67:3f:88:9b:db:
e8:c1:b3:1a:2e:e2:d7:38:a3:f3:43:9a:68:c1:c5:b4:8c:11:
6b:ab:b3:40:8b:c8:4b:de:e3:d1:ea:22:e8:7c:fd:ee:1b:bb:
db:dd:3c:c1:fb:c3:d2:1c:08:24:c5:18:32:4c:f9:d5:b7:c3:
c6:b0:80:f1:d1:40:1d:f2:67:e3:b3:ef:e2:42:e0:d6:e6:43:
c0:17:ae:e1:f6:7f:50:a0:8a:ee:82:43:7e:1e:83:66:30:87:
86:57:c0:50:56:dd:61:aa:50:77:7c:fd:5c:09:a5:91:56:d4:
5f:ea:52:fd:67:09:ce:ac:cb:4c:40:0a:6d:2e:75:46:2e:ea:
5f:17:d6:8d:2c:51:84:5e:ec:3f:ac:b5:af:6a:c3:d0:e7:9c:
11:ec:b1:5b:22:1d:03:7b:71:d4:eb:6a:65:2a:15:25:fd:f0:
05:69:3f:ed:2d:cc:90:87:fc:c7:6a:9f:bf:8c:af:1c:d3:da:
94:02:12:9a:f2:95:14:43:ad:0b:e1:4b:52:85:64:e5:3e:29:
4f:80:16:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:51:25 2024 by rpki-client on console-ams.rpki-client.org