Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS31786.roa
File: AS31786.roa (raw, json)
Hash identifier: GHcfxNUVHg6WX9MO6KY4r4VOZlzP5gg5xg1yiK5LmqY=
Subject key identifier: 52:2F:4B:8A:DB:A1:7C:B7:FF:4C:EC:34:12:B8:73:88:99:B1:A7:85
Certificate issuer: /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial: 4B21DB71362B6A7D60D358A4120188EC9B579B49
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS31786.roa
Signing time: Thu 21 Nov 2024 12:46:38 +0000
ROA not before: Thu 21 Nov 2024 12:41:38 +0000
ROA not after: Thu 20 Nov 2025 12:46:38 +0000
asID: 31786
IP address blocks: 46.202.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 10:55:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:21:db:71:36:2b:6a:7d:60:d3:58:a4:12:01:88:ec:9b:57:9b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Validity
Not Before: Nov 21 12:41:38 2024 GMT
Not After : Nov 20 12:46:38 2025 GMT
Subject: CN=522F4B8ADBA17CB7FF4CEC3412B8738899B1A785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:32:e7:e9:63:4d:6c:0c:ed:dd:02:1f:3b:bb:
fa:19:6d:b7:9e:c3:3d:13:b7:2b:16:34:1b:98:00:
d5:ea:d4:77:34:d0:c4:9a:ed:2c:6d:0a:7c:93:36:
5a:22:65:ae:ed:41:e6:10:f0:da:93:9a:01:81:1a:
4e:74:91:8d:5e:0a:f5:d7:01:76:43:fd:66:b1:90:
d9:a7:26:02:b2:fa:70:fd:66:a9:59:e1:10:eb:1d:
75:ad:78:eb:ee:a8:00:0b:3b:f1:ae:22:eb:51:f2:
76:f4:78:cf:31:36:9f:26:92:8a:d9:fc:55:1d:13:
ed:6f:56:02:cc:63:d4:73:56:20:ca:c7:4b:32:97:
d0:25:15:0b:56:b2:da:4a:df:23:1e:96:40:05:93:
a7:3d:b7:2d:ef:45:77:91:8b:9a:bd:85:c5:1c:75:
c1:73:21:6e:57:2f:b2:a6:56:74:06:6f:6c:3e:5a:
f7:dc:b4:c5:4a:1b:58:a2:d6:df:2a:34:89:eb:81:
a2:ae:35:a7:1e:6b:db:3e:c9:c1:48:56:4b:e1:e3:
44:47:c7:c0:0c:0b:1d:28:ff:64:85:a8:0e:95:24:
5a:87:2e:f5:77:bd:35:75:9b:88:32:0b:ed:dd:56:
aa:6b:3f:bb:b8:e8:e6:b2:f0:0c:04:b3:28:48:72:
26:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:2F:4B:8A:DB:A1:7C:B7:FF:4C:EC:34:12:B8:73:88:99:B1:A7:85
X509v3 Authority Key Identifier:
keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS31786.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.202.225.0/24
Signature Algorithm: sha256WithRSAEncryption
51:f7:cd:25:cd:02:44:8f:70:c5:80:b3:57:5b:94:6c:03:3f:
55:10:28:7d:0d:80:8c:53:22:b4:d6:b2:37:68:1d:f5:db:9d:
42:64:68:1f:ad:57:14:90:6d:6b:da:54:04:ca:41:0c:dc:f5:
72:aa:1f:99:23:7d:2e:18:15:b8:32:d9:f3:5d:07:ea:78:e3:
8b:38:49:04:69:92:8e:f0:f6:67:bd:f6:cf:37:03:82:1f:b7:
79:83:f3:86:0f:ae:e7:71:62:88:7b:bc:43:d4:87:70:40:4c:
36:77:07:93:d9:0b:ec:75:41:e8:16:ae:71:45:23:c1:73:fb:
88:50:2a:97:e0:e7:23:a5:1f:56:5b:b1:88:74:fc:4b:24:5d:
15:0a:0f:41:b2:be:72:26:95:ba:34:12:26:08:c7:b3:6e:b8:
a0:dd:27:a3:b6:b3:fd:48:56:0d:b0:26:ae:65:31:3a:a8:f5:
9c:0c:ae:96:13:9a:bc:68:3b:1e:45:6e:72:cf:ff:cd:e4:cc:
98:f3:53:6c:22:18:04:01:db:c4:b3:6d:f0:7c:66:80:c6:76:
3b:43:0d:66:8c:a1:a9:f7:4a:c1:db:46:2c:c1:f7:f5:5f:4e:
98:2e:71:9c:29:f2:cb:fa:4e:7f:b9:77:30:4e:16:24:ef:13:
f5:f7:34:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:14:53 2025 by rpki-client