Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/aQLSPM2r6x2nztD4Mh5MgIhGDPM.roa
File: aQLSPM2r6x2nztD4Mh5MgIhGDPM.roa (raw, json)
Hash identifier: ZROeaG8KQULgjgWVFWqMKKqblI6KXUxuBG40n/xanOw=
Subject key identifier: 69:02:D2:3C:CD:AB:EB:1D:A7:CE:D0:F8:32:1E:4C:80:88:46:0C:F3
Certificate issuer: /CN=c722ad43471b606bcc853bba11b8ed663c151882
Certificate serial: 018CC4932CBBEDD316F2E78D29D19654B51E
Authority key identifier: C7:22:AD:43:47:1B:60:6B:CC:85:3B:BA:11:B8:ED:66:3C:15:18:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/aQLSPM2r6x2nztD4Mh5MgIhGDPM.roa
Signing time: Mon 01 Jan 2024 10:30:28 +0000
ROA not before: Mon 01 Jan 2024 10:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197617
IP address blocks: 31.24.64.0/22 maxlen: 22
31.24.71.0/24 maxlen: 24
31.24.65.0/24 maxlen: 24
31.24.70.0/24 maxlen: 24
185.61.108.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.mft
rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:2c:bb:ed:d3:16:f2:e7:8d:29:d1:96:54:b5:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c722ad43471b606bcc853bba11b8ed663c151882
Validity
Not Before: Jan 1 10:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6902d23ccdabeb1da7ced0f8321e4c8088460cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b3:6e:9c:58:18:81:10:29:a4:71:e6:ab:46:
fd:84:95:80:b9:6d:85:4b:f3:78:10:eb:74:5f:fb:
70:f3:65:c1:38:6e:a7:74:25:e5:d5:b3:8d:e4:92:
e5:d5:c8:26:0a:50:c6:29:3b:39:5d:ef:f1:f6:76:
d0:ca:18:ca:47:75:ed:b1:76:ec:f3:3a:94:5d:22:
a0:53:0f:66:54:23:4c:2c:f5:3e:df:9b:d9:49:7b:
b1:5f:6a:14:28:0e:66:0f:5c:91:9f:0e:81:f0:48:
5d:28:86:8a:9a:9c:6f:06:f4:c4:45:84:e0:92:d8:
68:7b:49:0b:bb:69:49:a5:19:e0:86:1e:fa:e7:0c:
60:5e:19:0b:63:8d:33:77:b2:1f:53:c5:30:9f:2c:
34:d4:0c:1c:11:de:3a:a1:70:87:b4:3e:ef:08:1d:
18:b3:a3:15:59:74:31:5f:05:74:1e:3e:aa:23:19:
3c:67:21:be:5b:a7:2c:a0:d3:3b:f5:9c:a5:a0:73:
ea:4b:ad:9f:95:c0:6f:2e:9e:f2:79:f0:4a:4a:03:
8c:77:26:90:29:69:ae:cd:b0:08:7a:ad:83:65:62:
75:30:d1:f6:6b:fc:56:b5:d8:42:e6:6b:0c:ab:cc:
b9:80:c6:ff:02:2a:65:29:3d:83:d0:f9:fd:81:7a:
5c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:02:D2:3C:CD:AB:EB:1D:A7:CE:D0:F8:32:1E:4C:80:88:46:0C:F3
X509v3 Authority Key Identifier:
keyid:C7:22:AD:43:47:1B:60:6B:CC:85:3B:BA:11:B8:ED:66:3C:15:18:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyKtQ0cbYGvMhTu6EbjtZjwVGII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/aQLSPM2r6x2nztD4Mh5MgIhGDPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d3a0b1-08a0-44dd-8774-066ffefd0cab/1/xyKtQ0cbYGvMhTu6EbjtZjwVGII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.64.0/22
31.24.70.0/23
185.61.108.0/22
Signature Algorithm: sha256WithRSAEncryption
c4:17:cb:f6:cc:ca:40:9d:70:0e:02:13:d3:74:aa:38:7f:4e:
e5:fb:1a:7d:90:45:41:2c:6e:d1:28:19:63:9c:53:82:e8:d6:
08:b2:f6:17:f5:62:9f:8b:9e:ef:fa:c4:98:90:98:06:52:bb:
c5:47:f2:f9:ba:8c:2e:a1:a3:6d:0f:53:b1:34:f9:84:64:e1:
ee:75:ef:bd:e1:ce:58:3a:77:21:e9:15:27:82:b2:d2:0a:ef:
2d:ac:e1:ed:2b:a9:89:0b:a1:19:aa:06:d6:bd:b0:18:7a:3d:
b8:21:3b:c7:3e:83:fe:1f:79:d0:8c:af:80:1b:e9:e6:1f:f1:
b6:6e:e0:aa:c0:60:e2:02:92:49:52:8a:dd:95:a2:98:15:c3:
cb:91:a5:61:b9:6f:53:76:44:4d:70:ce:85:c3:75:76:d3:43:
73:28:76:4c:92:54:15:0e:b6:a2:6f:2a:65:c4:1e:c5:be:70:
45:a7:18:e8:7a:57:2d:4e:b9:76:32:ad:88:ba:4a:ae:a8:37:
8e:f9:df:af:4f:77:4d:f8:ad:75:33:a2:d6:75:a2:7e:71:e9:
c1:39:08:76:06:0b:2d:83:45:61:bb:3f:f3:b5:48:d8:5f:bf:
e1:5d:29:a7:01:e3:b8:8f:c5:92:b7:0b:ac:4c:8b:e1:cc:61:
b4:91:82:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:38:41 2024 by rpki-client on console-ams.rpki-client.org