Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36352e302f32342d3234203d3e20323135373130.roa
File: 34352e39352e36352e302f32342d3234203d3e20323135373130.roa (raw, json)
Hash identifier: lIzZnRB0QHSO6SR7XDIQcDdlS3YuPMmd3q2Eek+YXP8=
Subject key identifier: F2:58:CA:6C:86:7D:42:B5:B7:22:7A:57:FD:83:0E:2D:A1:6B:F8:7F
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 594FBB3BBD019C409754375A446A3CE98E85FCAF
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36352e302f32342d3234203d3e20323135373130.roa
Signing time: Mon 12 Feb 2024 12:34:42 +0000
ROA not before: Mon 12 Feb 2024 12:29:42 +0000
ROA not after: Mon 10 Feb 2025 12:34:42 +0000
asID: 215710
IP address blocks: 45.95.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 16:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:4f:bb:3b:bd:01:9c:40:97:54:37:5a:44:6a:3c:e9:8e:85:fc:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Feb 12 12:29:42 2024 GMT
Not After : Feb 10 12:34:42 2025 GMT
Subject: CN=F258CA6C867D42B5B7227A57FD830E2DA16BF87F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:48:96:73:95:df:f8:ea:7d:ab:fd:44:6d:d8:
1e:a2:54:77:36:a5:ce:1f:95:1f:ac:50:8b:a8:ac:
ac:54:bf:de:41:0d:63:f6:fd:f9:9e:5d:d0:e9:44:
4d:33:e9:19:15:30:27:2f:1b:f1:c5:d1:2d:97:60:
72:27:84:9c:f8:4c:6c:da:5b:64:ca:16:24:13:2a:
e8:0b:0b:2f:1e:ee:b0:8f:e2:51:91:5c:2b:0c:75:
3d:2c:1c:8a:80:ca:5a:81:da:23:47:6f:a3:40:10:
64:dc:b6:a6:88:63:a9:4f:ad:5a:7c:94:b1:29:14:
84:f7:92:e0:f5:12:e9:d5:fd:9b:b0:e9:83:a0:ee:
33:c7:9c:d6:93:f8:3b:a9:d5:be:fe:86:13:94:58:
c5:67:be:8a:76:e4:6c:28:9a:7e:03:0d:61:f0:ea:
5b:c1:43:47:9c:dc:ce:7f:4e:91:82:47:85:1d:0e:
23:b9:29:0b:50:c7:9a:7c:05:78:29:ca:f7:18:e8:
e9:1e:d4:da:a8:51:9a:25:99:e4:6e:0f:78:5e:07:
d2:cd:9a:20:cb:70:bd:36:60:f9:06:4b:ac:a0:22:
92:35:37:96:6d:f6:89:3e:ee:ff:e3:19:2f:79:c0:
55:98:8d:fb:0a:ba:2a:1f:1b:f2:57:9f:5b:a9:ab:
c1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:58:CA:6C:86:7D:42:B5:B7:22:7A:57:FD:83:0E:2D:A1:6B:F8:7F
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36352e302f32342d3234203d3e20323135373130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.65.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:7b:29:27:cc:82:42:74:a0:a0:61:ac:66:74:45:90:ff:1c:
ca:fc:00:4e:a1:55:9c:d4:57:6c:e6:91:ff:09:5e:a6:9b:31:
54:9b:b9:43:7f:fc:28:11:e1:e1:dd:c1:e6:8e:dd:91:50:95:
0a:af:5b:19:e5:01:02:d6:35:a3:2c:14:f2:86:d0:03:d5:5b:
1d:df:ee:2e:ef:e6:6a:ca:43:47:bf:b1:da:6b:b6:36:51:dc:
c7:ea:66:0b:2e:0d:5d:52:87:98:38:33:2f:29:81:b3:a0:1e:
78:24:9c:5b:fc:a2:93:5f:c9:e9:00:d9:15:a6:28:09:ca:de:
d3:2f:2a:e6:a6:35:9c:44:02:f2:ed:a9:d6:a5:ef:88:aa:dc:
e8:2b:c6:39:db:4a:a8:e0:fa:bd:d9:db:eb:29:f9:b2:11:36:
39:57:88:de:e9:47:c0:da:46:b7:9b:e9:01:89:e6:95:71:e2:
48:83:94:1d:be:6b:f4:1d:62:c6:2d:eb:55:c4:10:f6:74:20:
43:ae:d7:8f:ae:08:66:9b:b8:23:a7:63:e0:42:14:aa:c9:4b:
d1:30:14:04:82:bc:c0:c3:a7:f1:da:23:04:69:52:71:d1:96:
1f:e6:8c:59:8f:ae:08:91:98:f7:be:26:9c:56:44:6d:fe:c8:
0a:a9:bf:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 20:09:36 2024 by rpki-client on console-fra.rpki-client.org