Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS31715.roa
File: AS31715.roa (raw, json)
Hash identifier: pTtiTj4tfRRX/sgZ56uvHVEj0d0QVu06lgKGTTD6+eI=
Subject key identifier: AF:63:96:12:6D:06:27:1B:25:50:CC:37:54:71:8D:1C:7D:38:38:BB
Certificate issuer: /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial: 065E99B18B740683AFEC6B964096AE0975145922
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS31715.roa
Signing time: Mon 24 Feb 2025 13:11:32 +0000
ROA not before: Mon 24 Feb 2025 13:06:32 +0000
ROA not after: Mon 23 Feb 2026 13:11:32 +0000
asID: 31715
IP address blocks: 185.137.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:5e:99:b1:8b:74:06:83:af:ec:6b:96:40:96:ae:09:75:14:59:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Validity
Not Before: Feb 24 13:06:32 2025 GMT
Not After : Feb 23 13:11:32 2026 GMT
Subject: CN=AF6396126D06271B2550CC3754718D1C7D3838BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:97:54:07:c6:f2:eb:c8:86:66:28:2b:ad:6e:
48:92:4f:23:84:b7:3e:82:0b:44:11:96:11:5d:38:
58:ec:66:98:72:58:ca:b1:ec:a5:c8:2d:cc:0f:67:
14:f0:80:29:60:0d:7c:18:f8:3f:df:73:93:3a:85:
29:6a:e5:58:fb:28:d4:5c:f6:47:15:cb:15:80:ca:
df:45:09:cd:eb:71:9e:19:96:28:c4:32:7c:49:4e:
44:b6:4f:29:24:68:88:46:9a:27:1d:cc:50:c4:22:
a1:22:ec:98:54:f3:5b:28:a1:22:da:19:95:12:c4:
3b:35:f1:6d:5c:8c:6d:a3:5e:31:27:b0:d0:aa:ac:
09:32:ce:cc:e5:02:87:a4:2a:ff:ff:e9:51:17:f7:
7d:bd:02:79:24:d9:b0:b2:7d:26:8f:d5:17:af:a4:
8e:3f:2d:bf:b6:1c:f3:e1:9d:50:38:15:e5:71:71:
86:3f:ec:c0:08:98:a7:ea:3a:dd:92:7d:7b:d6:40:
99:84:c2:e2:86:68:26:7d:68:70:7e:26:f9:fd:80:
25:00:c8:6d:1a:5b:5c:9c:2c:e4:31:09:3f:6f:60:
a2:5e:a4:b9:d1:81:07:aa:01:9e:9a:fd:92:c5:6c:
2b:21:0d:2b:aa:e2:3a:89:93:ed:73:33:54:4a:3c:
12:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:63:96:12:6D:06:27:1B:25:50:CC:37:54:71:8D:1C:7D:38:38:BB
X509v3 Authority Key Identifier:
keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS31715.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.14.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:ee:dc:d1:ca:e4:30:7f:13:6d:29:cd:9d:2a:ea:f4:3a:06:
46:34:36:88:01:93:22:15:92:03:01:90:ba:c6:4d:c9:af:e1:
10:8c:6f:81:a6:71:72:71:49:0e:72:5d:74:8a:70:d2:5d:5b:
d2:cb:c2:e4:7c:5e:d0:dc:b2:5c:46:9e:65:60:29:11:9c:a3:
cd:3a:47:40:0a:e4:fb:6f:5f:d4:0c:3c:83:2f:89:f3:10:90:
08:56:a0:7e:0a:91:60:5d:e9:50:d0:0d:43:d1:40:62:56:6d:
cb:ae:98:c3:e2:4f:57:23:ed:e2:9d:cd:9a:c5:b1:ba:5e:9b:
15:47:8b:04:5e:34:b7:e5:6f:64:f9:ac:87:a1:02:0b:ea:39:
93:aa:33:83:e5:05:0c:03:ff:bd:58:f6:1e:be:3e:76:53:ba:
7a:65:f2:26:9c:3e:88:07:5c:f6:45:01:cd:4c:e8:03:73:4d:
02:b9:a0:ac:3c:fa:7d:9c:12:de:07:e6:7d:94:26:16:38:82:
86:4c:02:f4:8c:19:74:fc:53:ee:e4:e6:4a:a8:f5:b3:b8:3a:
82:78:1f:fb:f9:89:3d:f7:9c:cc:c1:56:47:19:80:ca:af:40:
70:b5:b6:a9:39:c9:9b:47:82:92:e9:e7:4c:18:86:72:24:9a:
bf:33:ec:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:28:41 2025 by rpki-client