Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36372e302f32342d3234203d3e203537303433.roa
File: 34352e39352e36372e302f32342d3234203d3e203537303433.roa (raw, json)
Hash identifier: jcrCpWKVZU/igOV7VNCKWQdOlyPZb3DuxYsOGp60Dr0=
Subject key identifier: 39:E3:F6:7B:49:FE:4D:67:E1:67:1A:8D:1D:18:DD:61:CB:57:D9:5A
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 54A84A26ABF3D8D8E97070F00EB276A8EC91A278
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36372e302f32342d3234203d3e203537303433.roa
Signing time: Mon 23 Oct 2023 09:41:41 +0000
ROA not before: Mon 23 Oct 2023 09:36:41 +0000
ROA not after: Mon 21 Oct 2024 09:41:41 +0000
asID: 57043
IP address blocks: 45.95.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 16:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:a8:4a:26:ab:f3:d8:d8:e9:70:70:f0:0e:b2:76:a8:ec:91:a2:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Oct 23 09:36:41 2023 GMT
Not After : Oct 21 09:41:41 2024 GMT
Subject: CN=39E3F67B49FE4D67E1671A8D1D18DD61CB57D95A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:99:bd:d5:e8:62:9a:af:4f:a3:94:48:6a:ac:
e1:cd:be:b3:91:36:2f:d6:28:a8:0f:56:c5:8f:54:
db:91:b1:26:60:08:05:8e:b9:f7:46:0e:f6:2b:a6:
a3:2b:f2:aa:7e:9f:e8:b9:7e:22:af:ad:25:74:f3:
12:84:93:8f:90:00:fa:3c:bc:b3:6d:22:9b:f4:ed:
dd:1d:86:0e:75:db:10:f8:2a:ae:97:cb:50:ce:dc:
c2:65:f5:34:00:0d:ce:56:4f:d0:59:ab:9b:04:21:
2d:05:0f:fd:b6:d4:56:07:4e:83:6e:72:16:21:de:
6d:1b:47:17:28:8f:f9:eb:4c:5b:85:1c:bd:01:f3:
24:00:4d:b2:05:9d:c0:20:49:ad:be:3f:c2:47:c3:
e6:fd:59:d9:4e:03:01:6a:eb:21:da:80:ff:25:a6:
ce:72:04:d9:a9:99:e6:4c:12:22:a5:71:75:94:02:
51:ce:90:03:5d:cf:d7:15:07:ef:fa:40:9c:4a:e8:
e6:6d:9f:87:59:43:e7:43:f6:e1:87:44:77:be:47:
b5:cb:4a:a9:55:b2:1f:71:e8:00:30:d2:af:da:92:
77:69:f7:67:4b:9f:67:bb:e4:2b:56:e3:66:e0:a9:
a5:eb:f1:f8:00:ec:f7:3e:96:7d:b6:90:77:21:e2:
16:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E3:F6:7B:49:FE:4D:67:E1:67:1A:8D:1D:18:DD:61:CB:57:D9:5A
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36372e302f32342d3234203d3e203537303433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.67.0/24
Signature Algorithm: sha256WithRSAEncryption
11:5b:c6:ec:14:64:b6:49:fb:14:f4:dc:a5:58:ec:c8:d6:f5:
a6:5b:b5:04:17:9a:3b:48:dc:5a:e2:0a:54:4f:79:6f:fb:3f:
9c:d6:b3:91:05:3e:72:9f:4b:13:8a:ae:da:d9:bc:8a:5f:c9:
ae:ea:fb:f6:5f:e8:b9:72:08:70:4b:94:32:a2:2d:4a:b0:16:
07:82:ed:09:52:f6:e9:5b:22:e4:7e:3c:fe:6c:e6:12:ca:0f:
ba:a1:c9:84:70:5f:cb:20:e1:a4:40:10:fb:1b:6a:61:e3:9a:
df:43:18:c2:04:ee:5c:4f:42:89:72:ea:12:fc:70:cf:ae:17:
a6:3f:81:1b:7a:5d:99:43:9f:7c:0d:af:ba:10:cc:7e:a0:fb:
41:c3:91:67:40:28:29:36:ef:5e:7b:73:72:a6:33:52:66:62:
e3:94:29:bd:72:c6:b0:6d:a8:9b:7a:fb:ee:77:33:ed:a8:83:
8b:fd:88:75:ee:87:88:72:14:89:bf:a1:e3:d5:11:b5:ad:c5:
88:5a:70:4f:39:1c:41:d6:eb:b7:1b:31:3a:c2:32:ff:f7:20:
7d:5f:4e:f8:65:f0:d0:a4:b8:b9:17:73:f9:54:1f:2d:16:41:
00:85:9b:7f:54:08:1b:fe:2c:be:38:a1:d5:4b:2a:b4:f0:87:
c4:9e:bb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 20:18:04 2024 by rpki-client on console-ams.rpki-client.org