Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS31715.roa
File: AS31715.roa (raw, json)
Hash identifier: LixnwmE1BUZK7v57dtALnyKOGg+R6bKxk9ZDyIRbZS8=
Subject key identifier: F3:DF:26:87:ED:8C:23:E8:DF:71:8D:22:77:50:2D:82:29:C3:7A:28
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 7ABCAE6B5E274AB990B6E2C9A97CE2C02EB531EE
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS31715.roa
Signing time: Thu 26 Dec 2024 02:29:37 +0000
ROA not before: Thu 26 Dec 2024 02:24:37 +0000
ROA not after: Thu 25 Dec 2025 02:29:37 +0000
asID: 31715
IP address blocks: 185.137.14.0/24 maxlen: 24
193.31.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Feb 2025 19:35:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:bc:ae:6b:5e:27:4a:b9:90:b6:e2:c9:a9:7c:e2:c0:2e:b5:31:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Dec 26 02:24:37 2024 GMT
Not After : Dec 25 02:29:37 2025 GMT
Subject: CN=F3DF2687ED8C23E8DF718D2277502D8229C37A28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f2:ed:6b:d6:71:83:e6:ec:72:3e:36:2a:15:
2c:c7:4f:95:d9:cb:48:c3:e7:19:47:31:26:78:71:
1c:39:75:43:ba:3d:f0:1a:b4:7e:28:1e:37:8b:6b:
93:ab:37:2b:23:0f:4c:9e:34:4d:e0:5a:39:e8:7a:
10:d4:7c:44:cb:43:a6:c2:6a:bd:69:ef:5e:38:90:
ff:da:c1:78:da:e0:24:aa:30:89:d6:13:d0:47:4b:
4e:82:b9:7a:c6:7b:50:93:13:39:0d:12:3f:35:e2:
1c:e2:84:d0:bc:45:6a:87:b7:4a:60:f3:5c:5d:3e:
7c:02:5a:f4:36:00:49:a7:95:98:6c:86:c7:c4:79:
ad:0f:fb:02:0d:64:e1:02:78:4f:ab:d3:f1:a8:ec:
6e:15:a0:e6:db:14:10:0a:62:e4:43:0a:eb:28:58:
6a:11:04:69:19:18:58:6d:75:83:5b:b5:1a:b3:e8:
8d:8f:57:49:07:2c:73:66:a6:cf:65:fb:3f:5c:7b:
e8:95:8c:03:52:e8:77:d9:c9:6e:16:62:e3:79:83:
df:ac:b7:05:5b:91:16:c5:8f:74:e7:10:9c:f1:47:
30:c1:8e:7a:12:f1:d3:c3:aa:41:27:73:e2:f7:9e:
e9:7c:79:3b:5f:26:85:95:c0:4d:dd:a4:a1:f0:97:
6f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DF:26:87:ED:8C:23:E8:DF:71:8D:22:77:50:2D:82:29:C3:7A:28
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS31715.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.14.0/24
193.31.43.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:1f:cf:1f:88:c6:7c:cf:f8:66:2f:9e:e3:35:5a:6e:11:95:
5e:43:36:27:a1:23:8e:de:0b:24:8f:09:d6:80:dc:97:00:07:
b9:33:21:31:07:c2:b6:8f:36:0c:65:c8:fc:77:e0:53:e9:12:
82:b9:78:25:c7:6e:df:4d:5d:44:fb:00:34:ce:76:8d:ce:1b:
df:fd:27:ef:29:74:d4:b5:3c:1e:78:85:47:cc:3e:5c:7f:42:
3a:7f:04:60:20:47:ee:88:fc:e5:d5:52:b2:a8:f9:90:f0:17:
1f:88:2b:a5:6f:3b:c0:ec:42:32:3a:d4:85:78:04:a1:71:30:
31:78:c8:0e:b9:80:f7:a5:09:e8:c7:5f:28:2a:58:fa:04:9b:
e9:21:e9:97:16:80:71:88:11:4e:78:07:b7:20:40:37:f5:3d:
25:56:27:cc:27:d4:e4:e8:e0:e5:9a:77:5e:84:9d:d1:57:bd:
c5:3f:c8:71:0d:27:b9:15:9f:66:29:ff:50:0d:7f:13:99:6d:
22:9b:67:91:ae:5c:8c:5d:f5:0d:75:88:99:98:3a:d2:37:1e:
37:3a:7b:12:9b:da:eb:8b:3f:21:00:74:73:25:43:e8:68:81:
b2:b0:12:7a:fd:61:51:7a:a0:f9:e0:52:13:9b:42:aa:a1:99:
3e:f8:5c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 08:50:19 2025 by rpki-client