Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/AFLdMj-2hrAkGS51QGZMsNNUZi8.roa
File: AFLdMj-2hrAkGS51QGZMsNNUZi8.roa (raw, json)
Hash identifier: nXTomWeqXGL6NOEqQcSlOnijbyF0Km4Rz/aB4NHbSgw=
Subject key identifier: 00:52:DD:32:3F:B6:86:B0:24:19:2E:75:40:66:4C:B0:D3:54:66:2F
Certificate issuer: /CN=b8c15fe1e19cb81cb3469fcaa5c6023a6c5c45a3
Certificate serial: 018CC64B30E5F454E8A66582407624023456
Authority key identifier: B8:C1:5F:E1:E1:9C:B8:1C:B3:46:9F:CA:A5:C6:02:3A:6C:5C:45:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMFf4eGcuByzRp_KpcYCOmxcRaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/AFLdMj-2hrAkGS51QGZMsNNUZi8.roa
Signing time: Mon 01 Jan 2024 18:31:05 +0000
ROA not before: Mon 01 Jan 2024 18:31:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42162
IP address blocks: 85.31.152.0/21 maxlen: 21
185.70.80.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMFf4eGcuByzRp_KpcYCOmxcRaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:30:e5:f4:54:e8:a6:65:82:40:76:24:02:34:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c15fe1e19cb81cb3469fcaa5c6023a6c5c45a3
Validity
Not Before: Jan 1 18:31:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0052dd323fb686b024192e7540664cb0d354662f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:35:9c:8f:e3:9d:00:69:22:6a:b4:f8:ac:ac:
25:23:06:20:86:e9:ff:19:e6:74:78:90:e1:6c:3b:
87:b2:6a:43:0a:02:b2:36:27:d2:00:64:bd:12:2a:
34:d3:aa:b4:13:8c:bf:0f:78:27:ff:b6:b7:b4:fd:
cb:a8:87:84:55:3a:eb:98:14:97:35:5a:7c:ac:99:
3a:f0:3d:8c:cc:52:8e:2d:a5:55:8c:98:c0:87:e4:
41:f3:ee:94:99:30:01:ba:7b:bd:fe:e1:28:7a:b8:
d1:23:08:49:eb:c1:89:95:5e:55:80:c0:6d:32:8c:
e5:1f:88:1d:3b:0a:e3:ab:42:ea:50:43:b4:15:f4:
3f:b1:7e:28:51:77:0e:3b:56:39:7e:4c:88:cb:f4:
ec:03:e0:8b:ad:91:74:6e:0a:84:42:2b:7a:3a:1e:
45:57:42:3a:59:24:88:99:08:02:8e:80:85:31:55:
73:21:29:4d:7e:48:a8:ef:6d:16:fa:50:f4:b2:fd:
38:1e:86:e2:d1:01:1d:c6:31:a9:46:fb:17:7b:f2:
aa:3c:45:a4:45:13:da:5a:34:98:1f:17:95:ca:44:
be:d6:78:f2:91:ec:1c:9d:6d:b2:51:48:d2:d1:35:
a3:18:5c:b4:7f:ff:ba:23:86:6a:ee:51:cd:2c:71:
e8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:52:DD:32:3F:B6:86:B0:24:19:2E:75:40:66:4C:B0:D3:54:66:2F
X509v3 Authority Key Identifier:
keyid:B8:C1:5F:E1:E1:9C:B8:1C:B3:46:9F:CA:A5:C6:02:3A:6C:5C:45:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMFf4eGcuByzRp_KpcYCOmxcRaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/AFLdMj-2hrAkGS51QGZMsNNUZi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74192f-e7f4-48c0-84c9-f258c11ce77e/1/uMFf4eGcuByzRp_KpcYCOmxcRaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.152.0/21
185.70.80.0/22
Signature Algorithm: sha256WithRSAEncryption
33:63:29:68:11:fe:23:2e:85:da:87:3c:08:49:dd:5d:df:c7:
c9:f0:08:8e:2f:ac:82:63:80:7a:89:6b:29:dd:bc:f9:e7:c2:
2b:43:f9:a8:68:b2:03:39:1d:8a:30:24:c9:cf:6e:18:b0:79:
0b:20:55:5b:4e:d8:15:6f:c1:50:b5:4c:05:18:52:7b:d7:88:
fb:bd:5b:58:f0:e5:74:65:75:f4:a1:28:16:d8:b7:12:cf:8b:
91:4a:04:fa:35:56:b0:5d:bb:5f:b1:8f:a3:b0:2e:37:eb:e2:
94:8e:d0:d4:f5:52:23:c5:59:c2:89:8c:96:cb:6f:eb:6a:2a:
b4:d8:48:9e:01:99:e7:78:a6:80:d6:df:e3:16:95:d7:2a:a8:
c1:77:ec:f3:0c:67:1b:23:92:b3:ca:8a:b3:5e:35:d6:a6:4c:
c5:f3:ed:fd:6d:66:27:95:27:83:a6:2b:6e:ef:b0:3b:f8:bc:
bd:ea:35:35:0f:93:59:3f:80:7d:c7:f2:c0:d6:dd:a0:55:c4:
86:90:c0:31:7a:41:03:b6:82:19:5b:c7:16:0a:a8:72:8f:4c:
bd:03:d7:18:4e:2d:24:25:ce:99:60:d1:5f:76:04:7b:f0:87:
da:72:89:f6:cc:d8:ee:f0:71:f3:e1:bf:e8:ce:f0:3d:6d:82:
a7:72:1b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:43:07 2024 by rpki-client on console-ams.rpki-client.org