Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/AxYmYew-8GkvvEdONlUZ2C5eznw.roa
File: AxYmYew-8GkvvEdONlUZ2C5eznw.roa (raw, json)
Hash identifier: Rjyz9bZz9t/HLx+4uBG/Nu7v/cHXAAlnqPtbI9bPg2o=
Subject key identifier: 03:16:26:61:EC:3E:F0:69:2F:BC:47:4E:36:55:19:D8:2E:5E:CE:7C
Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Certificate serial: 018CC801B25EF6F641B220620F2A3AAA4EBA
Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/AxYmYew-8GkvvEdONlUZ2C5eznw.roa
Signing time: Tue 02 Jan 2024 02:30:03 +0000
ROA not before: Tue 02 Jan 2024 02:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213191
IP address blocks: 31.40.168.0/22 maxlen: 22
31.40.174.0/23 maxlen: 23
31.40.176.0/23 maxlen: 23
31.40.180.0/22 maxlen: 22
31.40.184.0/22 maxlen: 22
91.214.80.0/24 maxlen: 24
31.40.131.0/24 maxlen: 24
31.40.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 21:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:b2:5e:f6:f6:41:b2:20:62:0f:2a:3a:aa:4e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7
Validity
Not Before: Jan 2 02:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03162661ec3ef0692fbc474e365519d82e5ece7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:63:0c:c4:91:0a:2e:c7:dc:17:c2:82:5e:1f:
15:c0:f1:b6:a7:10:79:ae:14:fb:56:c8:75:ae:e9:
29:58:77:cc:39:77:79:1c:c7:c9:af:1d:ff:38:a6:
82:03:55:64:1f:ce:ae:9c:20:b0:59:04:9f:52:79:
20:c6:8b:48:22:cf:84:07:4b:2a:92:73:91:34:54:
b3:c4:71:92:b4:28:84:8f:2a:24:b8:be:90:21:df:
7a:60:da:89:02:a1:e2:a8:28:50:2c:dc:e0:19:c6:
e2:cc:cd:1a:e5:2f:97:48:7b:08:5a:c0:04:ed:f4:
af:4e:e0:ac:0f:02:59:d2:ab:bf:d9:24:b0:65:56:
b9:d1:3b:0b:07:22:55:fd:88:74:d5:91:e3:70:20:
42:77:29:48:e0:0f:f9:d1:09:93:8c:86:6d:5e:dc:
6c:69:3b:37:33:ca:03:5b:c8:a3:e5:fd:dc:52:71:
14:18:0c:fc:79:19:6a:53:07:dd:bc:2a:0c:e4:0d:
6c:76:ae:5c:e3:41:fa:3b:c1:53:8f:40:15:e1:99:
36:a7:8a:1f:45:7e:f7:24:67:b0:9c:c1:f0:25:2a:
a2:fd:08:5b:af:ad:00:36:50:c7:0d:78:08:09:15:
34:92:69:61:7c:b3:dd:6d:ac:9b:c9:43:e4:56:11:
ab:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:16:26:61:EC:3E:F0:69:2F:BC:47:4E:36:55:19:D8:2E:5E:CE:7C
X509v3 Authority Key Identifier:
keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/AxYmYew-8GkvvEdONlUZ2C5eznw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.131.0/24
31.40.139.0/24
31.40.168.0/22
31.40.174.0-31.40.177.255
31.40.180.0-31.40.187.255
91.214.80.0/24
Signature Algorithm: sha256WithRSAEncryption
45:87:05:b6:a0:c1:13:d8:3a:5d:9c:2f:d3:a5:d2:37:32:9d:
53:e1:91:80:9c:1b:7f:03:49:73:65:a3:dd:4f:9a:4b:58:7d:
f0:64:6d:14:d7:92:bd:58:7e:55:34:1f:09:58:fe:b6:9e:80:
f2:e6:15:fd:db:8b:e8:68:b3:c8:df:41:56:94:fa:7f:a8:b3:
0d:e5:1b:c6:3c:57:98:e3:54:6c:85:39:7d:7a:6c:57:f4:35:
c7:75:3e:f5:e5:5c:04:37:f8:05:34:6c:e5:fb:00:92:5f:5a:
5d:5c:2a:fc:ba:42:53:43:e5:68:92:59:b6:57:96:37:9b:13:
57:5e:4b:14:d3:d2:2e:50:f5:dc:14:e9:5e:f8:d9:31:b6:09:
1b:4e:ac:c9:af:fe:48:5b:87:47:dd:ab:96:84:e3:4c:91:24:
81:2b:6d:4a:4d:e0:78:6c:c8:6e:31:bf:d1:e0:9e:47:30:83:
b6:31:41:20:51:63:c8:11:fe:05:43:63:24:d2:2c:91:7a:d3:
da:f8:d5:73:b1:22:ed:12:16:7d:48:15:17:ff:f0:28:d6:ae:
eb:73:a8:61:36:c9:e6:8b:b1:71:38:5c:fb:f0:ea:0d:bc:00:
9b:34:93:e2:eb:5c:36:0e:25:ec:f3:99:84:d8:9b:85:0b:00:
54:95:9a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 06:02:15 2024 by rpki-client on console-ams.rpki-client.org