Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/3231372e392e3234322e302f32342d3234203d3e203135343139.roa
File: 3231372e392e3234322e302f32342d3234203d3e203135343139.roa (raw, json)
Hash identifier: pDz08t6uDLX+UQCcv6T58rLaflML1JlRSGhc6ytA2t0=
Subject key identifier: 82:8F:DA:53:40:5C:BE:E7:F6:9E:60:D9:1A:FF:56:79:C7:74:7C:C2
Certificate issuer: /CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae
Certificate serial: 0397D06FA0932DB54491F3C35AD1769DC97DD506
Authority key identifier: 9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/3231372e392e3234322e302f32342d3234203d3e203135343139.roa
Signing time: Fri 07 Jul 2023 08:08:14 +0000
ROA not before: Fri 07 Jul 2023 08:03:14 +0000
ROA not after: Fri 05 Jul 2024 08:08:14 +0000
asID: 15419
IP address blocks: 217.9.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Jun 2024 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:97:d0:6f:a0:93:2d:b5:44:91:f3:c3:5a:d1:76:9d:c9:7d:d5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae
Validity
Not Before: Jul 7 08:03:14 2023 GMT
Not After : Jul 5 08:08:14 2024 GMT
Subject: CN=828FDA53405CBEE7F69E60D91AFF5679C7747CC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a8:f1:5e:19:93:65:d3:63:3b:27:35:1f:2f:
5e:f5:f9:b1:51:41:11:e4:7f:77:38:c9:fc:d8:a9:
9a:96:bc:fa:a5:45:bc:e8:dd:56:4b:5a:19:c7:9a:
64:16:f6:e6:bb:c1:02:ce:de:c0:fc:5b:5d:34:6f:
f5:89:18:c9:d5:99:ed:99:20:dd:b4:9a:5f:c3:6d:
a1:9d:22:87:4c:d7:b0:8d:c2:00:15:c0:8f:b3:46:
af:78:bd:eb:31:79:c8:6e:8a:4e:22:eb:5c:33:85:
23:52:6c:a5:a5:6c:f9:e4:ca:29:26:94:7e:f8:c3:
b0:42:2d:e1:7e:e1:61:56:fa:1d:fc:e3:05:3e:df:
b8:aa:e0:fe:64:ca:6a:ef:0a:77:f9:90:a0:59:3b:
a4:a7:61:eb:70:62:e8:3a:18:49:63:4d:21:73:4a:
aa:d8:cc:02:a3:e9:03:e7:d7:f1:05:f7:a6:4e:49:
e5:46:31:c4:9d:02:d3:e2:d8:1b:35:38:cc:c2:e8:
b7:e2:61:ca:1e:f6:45:4b:e9:6a:2a:9a:d6:2e:91:
04:ad:a4:a7:f7:de:6f:b9:f9:c7:70:38:30:f2:3e:
e5:92:08:1e:67:bc:1b:98:a4:9e:62:eb:6f:2b:12:
9d:4d:ea:13:7b:bd:bf:c4:1e:2a:44:56:ba:9f:7e:
1b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8F:DA:53:40:5C:BE:E7:F6:9E:60:D9:1A:FF:56:79:C7:74:7C:C2
X509v3 Authority Key Identifier:
keyid:9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/3231372e392e3234322e302f32342d3234203d3e203135343139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.9.242.0/24
Signature Algorithm: sha256WithRSAEncryption
58:48:18:68:66:43:bb:16:d9:9f:b7:c7:0f:8d:7d:f2:51:df:
84:e1:e1:f9:63:46:00:a9:6f:05:49:86:a2:84:98:56:80:96:
e8:94:fe:9f:e3:78:f8:75:92:54:aa:ac:4a:26:c2:bd:47:e2:
a8:cb:26:bc:ab:b1:5e:27:c4:e3:01:b0:71:b6:a8:6c:3d:80:
aa:a6:24:b3:27:27:43:03:21:0f:95:d2:7e:16:27:c2:12:83:
94:3b:b1:52:50:a4:a5:38:40:e0:46:93:35:a6:93:12:15:ff:
6a:fc:05:a2:01:85:d2:9d:11:cb:92:4e:76:03:dd:d7:6e:6a:
12:60:2c:ea:f3:2d:50:46:79:8f:a4:5a:c8:ef:0f:75:f0:dc:
85:06:63:98:d3:1f:bb:7c:f4:99:41:1c:60:33:9c:d6:99:99:
14:e1:2f:86:3a:7b:aa:f1:34:87:62:31:36:e2:42:fa:0d:f9:
59:93:71:ff:bb:52:e3:87:2b:f8:c9:b2:9e:5b:a2:3f:7b:f8:
08:09:99:32:5d:ba:a6:b4:c6:a3:ee:6a:f7:ad:f9:7e:c9:d7:
2a:3c:a9:2d:48:9e:1b:89:f3:86:f5:33:49:55:31:4e:fb:0e:
e3:51:15:c7:50:39:1d:9e:41:c4:64:2d:a4:75:66:0d:27:b7:
9b:ec:3b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 01:00:43 2024 by rpki-client on console-fra.rpki-client.org