Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e35302e3233332e302f32342d3234203d3e203336333532.roa
File: 3139342e35302e3233332e302f32342d3234203d3e203336333532.roa (raw, json)
Hash identifier: rR47fhsYe7mDQzVxXx1eHH5fGRFDZIrtgXhjr5nTe7g=
Subject key identifier: B2:48:BA:E3:9C:46:E5:B5:CE:4C:8A:D7:93:A3:91:90:7A:9A:43:E1
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 0C40C51BFFFA527DDC69E65E2AA0E0E07EE23AF2
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e35302e3233332e302f32342d3234203d3e203336333532.roa
Signing time: Wed 20 Dec 2023 07:05:08 +0000
ROA not before: Wed 20 Dec 2023 07:00:08 +0000
ROA not after: Wed 18 Dec 2024 07:05:08 +0000
asID: 36352
IP address blocks: 194.50.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:40:c5:1b:ff:fa:52:7d:dc:69:e6:5e:2a:a0:e0:e0:7e:e2:3a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Dec 20 07:00:08 2023 GMT
Not After : Dec 18 07:05:08 2024 GMT
Subject: CN=B248BAE39C46E5B5CE4C8AD793A391907A9A43E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7e:08:8c:f0:07:c0:dc:c4:88:1a:53:6e:6d:
2e:36:ef:2e:96:30:91:b9:36:65:ed:60:50:8c:22:
5f:e3:1a:32:28:35:d3:e7:ca:e4:82:c7:da:18:ff:
64:7f:1e:4a:f2:46:be:6c:bd:fd:6f:df:02:94:3c:
bb:fc:dc:aa:4f:4a:51:6f:f2:67:25:d9:6a:08:a2:
17:80:af:57:44:a4:d7:0f:ae:74:b3:a4:ea:5c:3e:
8c:a2:79:62:77:5a:ef:26:70:10:85:26:07:cf:66:
45:2b:9b:61:f6:5f:49:d1:ff:8e:fb:28:31:e2:13:
4b:af:17:18:41:28:90:74:72:0f:3c:70:f5:f3:da:
09:11:d0:ef:3d:df:6a:7e:9b:67:ef:bc:fb:47:65:
ed:7b:04:5a:03:d4:d1:39:49:31:a2:55:96:c7:b8:
3b:b8:95:94:7b:c4:b6:d3:1c:5d:a0:04:23:c0:ab:
94:66:eb:7d:ce:25:3f:d6:d2:22:f1:65:e6:dc:57:
9b:d9:de:21:9f:3f:c4:54:82:e9:45:39:3c:52:c1:
8c:76:27:59:12:3f:3d:14:f0:40:55:47:a3:de:42:
4c:44:f0:bf:a9:2a:4c:5d:82:a9:7c:19:9f:44:46:
7b:65:31:76:be:80:9a:de:76:c0:40:bc:4f:30:56:
bd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:48:BA:E3:9C:46:E5:B5:CE:4C:8A:D7:93:A3:91:90:7A:9A:43:E1
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/3139342e35302e3233332e302f32342d3234203d3e203336333532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.233.0/24
Signature Algorithm: sha256WithRSAEncryption
13:29:09:42:da:07:01:83:a8:56:d2:de:2b:4d:d4:1e:c6:0f:
ea:74:df:b9:31:6f:cd:29:ab:fb:d7:46:28:a3:8c:dd:d1:1a:
05:58:ea:c8:63:90:1b:25:80:b4:77:41:cc:1e:e1:77:ce:82:
ff:49:c2:96:56:c0:c2:72:5a:dc:31:5b:55:eb:00:38:0f:b3:
57:e2:a7:74:72:25:af:c3:36:1e:b8:c3:1a:4a:40:5e:cc:84:
20:ab:01:38:3b:58:1e:28:b3:1a:4b:09:29:3e:c1:d0:33:02:
b0:eb:55:5a:df:6a:6c:c3:d7:f9:38:88:a6:13:4b:82:8f:9e:
d2:99:7a:44:a2:cb:fe:ae:d7:1b:1b:24:dd:3e:e4:d8:7e:4a:
65:4c:b2:fe:34:6b:dc:02:1d:57:39:d3:32:ad:55:20:7a:56:
05:d7:ed:19:c1:00:9e:c6:e6:f6:24:e1:3b:f9:39:01:a0:f0:
aa:7a:02:a3:a4:20:cb:e0:cd:d1:ec:af:70:6a:5f:63:45:26:
0a:bc:b1:4e:5d:2d:55:0c:e2:c9:92:81:3c:d6:10:72:88:90:
cc:98:72:cf:39:57:d3:9a:56:c0:f0:70:4e:a5:f8:22:2c:01:
40:1c:e2:b2:51:56:85:19:b1:2f:d5:b6:09:f6:27:bf:56:64:
82:0a:e4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 19:36:46 2024 by rpki-client on console-fra.rpki-client.org