Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS31898.roa
File: AS31898.roa (raw, json)
Hash identifier: XnkXnyqejofY1mzV7tojPF8BTe3Pq0+yNB7pSzV7ts8=
Subject key identifier: 73:A4:A3:B7:CA:6F:27:E1:F7:D6:AC:03:14:BB:FE:31:4B:95:C4:E8
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 2134F35295871C2F24048FD395A8A4E75E766766
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS31898.roa
Signing time: Fri 10 Jan 2025 18:26:11 +0000
ROA not before: Fri 10 Jan 2025 18:21:11 +0000
ROA not after: Fri 09 Jan 2026 18:26:11 +0000
asID: 31898
IP address blocks: 82.29.42.0/24 maxlen: 24
82.29.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:34:f3:52:95:87:1c:2f:24:04:8f:d3:95:a8:a4:e7:5e:76:67:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: Jan 10 18:21:11 2025 GMT
Not After : Jan 9 18:26:11 2026 GMT
Subject: CN=73A4A3B7CA6F27E1F7D6AC0314BBFE314B95C4E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ec:ea:e3:53:0b:f3:f8:a6:f8:e9:de:b0:f4:
fc:d4:12:c6:a1:16:b2:8e:c4:cc:02:09:8b:5f:ef:
b8:38:ab:6e:d3:b6:70:6d:e4:db:67:4c:46:1e:c7:
2f:30:d2:e7:38:9a:5f:b2:fe:a8:c0:f0:24:8b:8c:
38:59:11:f6:06:9e:56:79:5d:52:89:42:a3:65:9c:
f4:9d:da:1c:c8:83:e7:f8:d7:2a:4b:0e:6c:77:4e:
9a:d0:fd:fd:45:4d:d0:4e:87:23:2b:21:5a:be:84:
66:33:9e:3e:e6:05:16:96:08:bf:ae:03:73:c0:42:
bf:db:65:c2:b0:f4:97:b5:9c:73:74:22:7f:86:91:
b5:6c:95:49:2a:e7:ca:6d:84:9a:15:11:a0:26:48:
19:94:5f:8e:bf:56:3f:71:e2:3f:e0:03:c0:6a:95:
e9:95:48:6c:0d:9b:5e:b5:ef:28:4d:61:7b:74:0c:
cc:eb:e1:53:dd:c2:75:43:d6:77:a2:94:f6:4a:e2:
c3:ca:43:01:24:da:bf:c3:fe:3f:e1:54:3f:15:79:
70:5d:8a:de:c0:8b:3f:8e:f0:90:96:ad:9f:fe:54:
cc:5a:14:39:b6:fc:eb:3f:d1:40:54:b0:80:bc:f0:
a9:25:98:32:17:d3:c5:3c:05:7a:1a:f1:7f:c3:5a:
dc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A4:A3:B7:CA:6F:27:E1:F7:D6:AC:03:14:BB:FE:31:4B:95:C4:E8
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS31898.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.29.42.0/24
82.29.69.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:8b:c2:93:89:bb:05:f8:10:c9:0a:04:b3:7b:a6:a2:42:16:
b7:7c:b2:65:5a:ff:e2:5f:8a:14:e8:0e:9d:5e:a5:6c:a4:e0:
23:8b:23:91:12:93:f1:eb:81:ec:dd:c6:f8:df:e5:76:87:c0:
e3:99:ff:70:c5:a9:0a:c7:eb:7a:1b:09:14:fd:1e:74:e1:2c:
54:e0:e5:12:87:8d:ed:26:5a:dd:36:8c:a3:48:35:22:44:77:
cb:ad:76:89:c6:0f:dd:21:a1:fb:86:6e:98:15:c4:6a:55:78:
e3:b5:a8:46:a7:45:85:b1:84:69:0a:5c:d0:30:79:ce:13:ce:
b7:b9:71:2e:7e:b2:58:90:7c:3f:b7:ac:3e:a3:83:c7:1b:a7:
fd:72:f4:e3:b2:2b:bd:fd:af:ba:9d:50:6f:7b:ef:65:73:31:
8b:f2:46:86:d8:68:01:f2:cc:d0:36:4c:33:d3:17:3a:ab:d8:
20:cf:d6:71:bb:28:72:41:9f:33:df:95:d2:00:87:d4:cb:c9:
56:c3:6f:0d:82:39:d0:09:98:c6:c7:f7:20:aa:f4:d1:f7:e7:
af:84:27:55:63:99:ff:e9:fe:cc:d7:b0:cf:46:31:d0:43:12:
ae:a4:19:ce:fc:ea:dc:50:c4:51:b1:6a:c8:ba:02:2f:b2:b3:
b3:d7:04:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:59:00 2025 by rpki-client