Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e3135302e3231302e302f32342d3234203d3e203239383032.roa
File: 3139342e3135302e3231302e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier: H+uuovQ+3nizSsfRoDQN7PkfaVWNXaRUyIcfmnbsmds=
Subject key identifier: 1D:E6:75:D0:B4:30:06:E9:7F:89:82:5E:A0:1B:B6:4F:A9:61:73:9A
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 0C184368BF06C10705964B16D593A0D71E5F97F8
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e3135302e3231302e302f32342d3234203d3e203239383032.roa
Signing time: Fri 17 Nov 2023 11:34:28 +0000
ROA not before: Fri 17 Nov 2023 11:29:28 +0000
ROA not after: Fri 15 Nov 2024 11:34:28 +0000
asID: 29802
IP address blocks: 194.150.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Apr 2024 14:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:18:43:68:bf:06:c1:07:05:96:4b:16:d5:93:a0:d7:1e:5f:97:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Nov 17 11:29:28 2023 GMT
Not After : Nov 15 11:34:28 2024 GMT
Subject: CN=1DE675D0B43006E97F89825EA01BB64FA961739A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f3:2b:f5:53:47:95:cb:16:21:77:31:ee:ae:
75:49:f7:ed:7b:16:05:91:ae:39:b0:8d:b7:0f:5d:
c9:0c:02:c5:9a:05:16:1f:ef:07:14:e3:d9:54:ca:
af:07:bb:45:30:16:b4:32:9a:3a:1b:d4:0f:f3:b5:
48:52:a6:52:fe:58:c8:40:d4:40:58:8c:61:b7:e2:
ab:b8:35:6d:92:74:04:1d:c9:72:25:8a:56:f1:ce:
de:49:24:86:13:6b:ee:d5:dc:4a:5e:0d:ef:9a:9a:
1b:20:2c:69:89:a6:ef:8a:78:60:fb:b6:c9:1a:b5:
98:3f:4b:a0:54:50:d1:13:8c:3d:c5:82:88:3f:2b:
1f:b9:25:bd:f1:28:65:35:df:c9:69:4e:fd:5d:87:
69:96:b7:87:40:ca:11:14:da:7b:74:22:51:26:7b:
c5:7b:f5:05:27:e9:e8:26:6d:8b:38:b0:e7:03:26:
d5:bb:d1:de:c9:79:91:70:a4:e6:43:50:62:83:91:
d5:da:de:b6:1f:5b:28:8d:e3:be:28:66:6b:3e:b2:
a4:9e:f5:ac:bb:25:49:2e:ea:21:e6:b9:96:a0:a9:
21:78:d5:64:ac:17:5b:78:16:b4:1e:5e:34:d3:f9:
f1:bf:63:08:23:7f:94:42:f9:3b:a2:5e:18:91:06:
bb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E6:75:D0:B4:30:06:E9:7F:89:82:5E:A0:1B:B6:4F:A9:61:73:9A
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e3135302e3231302e302f32342d3234203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.210.0/24
Signature Algorithm: sha256WithRSAEncryption
08:04:c7:3e:d0:84:1a:bc:d4:a9:84:25:b0:7b:ab:8d:a8:ef:
6f:03:93:7d:8a:0d:55:3a:12:b7:6d:87:b5:ea:5d:a8:05:ad:
25:4a:66:fe:c1:79:39:74:dc:a4:24:22:97:76:05:97:a1:d7:
1a:ab:4a:84:42:f8:b7:01:a7:0a:d8:c5:86:05:a6:c8:62:2d:
3b:92:67:d4:1f:48:14:0b:38:b2:ed:d9:a0:2b:18:aa:76:13:
e2:5d:8c:52:53:62:d8:b7:10:10:14:3d:59:44:f8:3c:33:97:
c8:c8:4e:82:25:ff:3b:24:f8:be:91:93:4f:f7:21:cf:c2:a8:
c6:15:2f:6f:fd:50:86:65:33:f5:b8:b2:ac:fe:7b:f4:7a:60:
d3:8e:9c:a0:6f:74:01:97:9b:88:60:f1:5d:ca:cc:80:8f:c8:
76:ff:ec:74:88:34:43:17:af:1a:23:7d:d0:49:81:a7:5a:62:
d6:06:97:d8:6f:fa:34:00:19:b1:f6:8f:7c:26:46:06:41:33:
47:a7:08:22:50:80:a0:81:44:d7:cd:47:74:8d:92:ad:ae:e0:
c9:3a:b1:b5:08:98:bb:3b:01:d2:4a:5c:8f:9e:35:88:1e:9d:
40:60:e8:b3:6f:70:ef:20:28:8d:22:96:fd:93:90:39:5e:35:
76:77:3f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 23:44:42 2024 by rpki-client on console-fra.rpki-client.org