Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32382e302f32342d3234203d3e203631333137.roa
File: 34362e3138332e32382e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: aSZAIwoF07kPLrJji/69rIWgvlwTyb+yCaUxBLal5qI=
Subject key identifier: 95:4A:B8:97:5F:8C:19:A1:24:34:75:B6:56:FC:A7:F5:9C:2F:08:60
Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Certificate serial: 3ED3340B033710A2F33FACA014EFC475581DBB58
Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32382e302f32342d3234203d3e203631333137.roa
Signing time: Tue 01 Aug 2023 14:00:29 +0000
ROA not before: Tue 01 Aug 2023 13:55:29 +0000
ROA not after: Tue 30 Jul 2024 14:00:29 +0000
asID: 61317
IP address blocks: 46.183.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:d3:34:0b:03:37:10:a2:f3:3f:ac:a0:14:ef:c4:75:58:1d:bb:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00
Validity
Not Before: Aug 1 13:55:29 2023 GMT
Not After : Jul 30 14:00:29 2024 GMT
Subject: CN=954AB8975F8C19A1243475B656FCA7F59C2F0860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:32:43:c0:24:49:31:56:59:50:19:2e:a7:e7:
95:cd:98:6d:92:53:e5:c5:91:7e:88:24:a5:09:2b:
d5:af:2e:5c:a7:1e:95:8d:b7:1e:9e:8a:93:01:e0:
e8:28:7f:16:20:99:f9:d0:20:42:4f:77:a3:eb:9e:
18:89:6c:ce:dc:e9:d4:d7:f9:09:2d:34:b3:59:3b:
35:88:f9:ee:2f:fb:5b:8f:c2:5b:58:03:12:1f:dc:
04:28:0a:9c:46:de:65:38:d7:b1:0d:76:21:d3:1b:
8c:c6:d6:fa:67:14:a1:6b:a4:a4:d7:f4:d1:03:4c:
fe:50:91:24:67:70:00:cd:f0:3d:6b:6d:e0:d9:8a:
75:56:48:73:20:1d:d3:c0:7c:0c:eb:c1:9d:e5:6a:
31:fd:2f:66:c3:98:60:09:72:46:59:73:47:e3:d7:
3f:4b:59:b9:bb:93:dd:12:c0:b2:9a:e7:f9:6b:20:
d4:11:e6:ec:bb:fb:d9:16:f4:6b:66:26:4c:c5:d3:
72:d7:28:21:ba:c9:4b:b8:95:3b:75:ce:b9:69:96:
2b:9e:1a:a3:3d:06:ff:2c:00:6d:4c:84:d3:02:df:
84:69:07:0c:57:fd:2b:95:8a:e0:65:f8:83:d3:08:
65:b0:c1:53:6e:9a:62:26:e9:ad:db:1f:a9:c6:72:
a9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4A:B8:97:5F:8C:19:A1:24:34:75:B6:56:FC:A7:F5:9C:2F:08:60
X509v3 Authority Key Identifier:
keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32382e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.28.0/24
Signature Algorithm: sha256WithRSAEncryption
02:41:a7:50:09:fe:d7:ff:84:8b:42:86:49:c7:e2:59:3c:3a:
ef:9b:62:b2:6a:a7:f8:f1:6f:c0:e6:5a:f0:43:ab:64:c5:e4:
bd:71:76:42:66:2f:35:3d:dc:56:2e:b0:64:e2:83:03:41:f3:
3e:ad:99:d2:53:26:d2:65:89:c3:84:ff:30:55:df:54:db:f0:
69:ea:17:79:c3:97:48:24:99:7b:8e:15:98:1b:76:62:65:3a:
67:c1:fe:5c:cd:21:ed:f7:d9:01:ac:13:c5:0e:76:0a:e6:28:
b0:38:41:d5:ce:7f:b2:9d:8a:05:74:0a:4d:62:5f:93:c7:64:
98:5d:ee:0f:ef:03:86:9c:5e:f8:04:27:6d:42:e5:2e:d3:de:
8f:97:56:4d:d9:09:36:34:f7:ba:7b:e0:f2:41:fb:1f:96:6b:
97:12:83:1c:48:29:59:56:5f:7a:ed:81:83:8f:b7:25:46:a4:
df:fe:ba:35:ff:dc:5f:65:72:7d:5d:45:0e:67:2d:4e:06:24:
6d:6c:9d:87:81:bc:3e:d0:2f:5d:9f:07:5d:96:5d:9d:b7:41:
e7:e5:dd:ef:19:ae:86:86:33:64:a9:96:82:68:80:9d:01:aa:
3c:06:13:df:e9:12:49:95:f2:3e:5d:8b:7f:1e:6d:c4:cd:ca:
37:65:b9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:06:08 2024 by rpki-client on console-ams.rpki-client.org