Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130342e302f32342d3234203d3e20323135303531.roa
File: 37372e38332e3130342e302f32342d3234203d3e20323135303531.roa (raw, json)
Hash identifier: 3YPPJREgPqSe2qas5z37g5lKhqT8PrbeDMi80sWzPmw=
Subject key identifier: C7:25:FF:BA:C2:50:B8:05:DF:69:4C:45:4B:97:2A:69:90:E3:BA:1D
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 0BB0F78C2BBA2C7BBA6D472103F8AE89FAB4FE27
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130342e302f32342d3234203d3e20323135303531.roa
Signing time: Sat 27 Apr 2024 15:19:20 +0000
ROA not before: Sat 27 Apr 2024 15:14:20 +0000
ROA not after: Sat 26 Apr 2025 15:19:20 +0000
asID: 215051
IP address blocks: 77.83.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 19:51:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:b0:f7:8c:2b:ba:2c:7b:ba:6d:47:21:03:f8:ae:89:fa:b4:fe:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Apr 27 15:14:20 2024 GMT
Not After : Apr 26 15:19:20 2025 GMT
Subject: CN=C725FFBAC250B805DF694C454B972A6990E3BA1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c5:c2:04:2c:e0:4f:5c:cb:5b:b6:df:0e:8e:
00:94:aa:3c:22:47:50:f6:ea:4b:87:bc:e1:db:5d:
00:68:36:8d:75:94:72:bb:c3:af:79:d7:5b:c9:a5:
13:85:f5:b7:57:81:70:33:2e:03:8e:a6:8d:08:ce:
b4:60:c0:65:5e:f4:a0:67:27:ae:f1:29:a0:3c:c0:
c5:fb:ad:20:0b:f8:25:3b:0b:ee:f8:9c:34:61:ba:
ba:77:db:1b:c9:8e:6f:de:48:69:6b:94:82:64:c3:
09:d1:87:f7:9e:ae:31:55:50:25:e7:bc:98:99:48:
ff:31:45:45:fe:ba:bf:0b:0f:ac:1e:56:50:ad:74:
14:0e:11:60:43:fe:30:91:42:62:59:78:64:85:54:
58:5d:61:48:6f:13:5c:5c:56:7f:8b:a0:ec:18:30:
94:67:73:75:49:8d:d5:1d:c7:5a:8b:a2:26:7c:ce:
e1:b7:91:14:4d:03:de:af:37:1a:89:e2:6f:9c:72:
ac:0a:d3:f5:32:06:e1:93:ea:78:04:3e:51:ba:f6:
5a:bf:28:f2:17:75:de:57:a5:ea:6e:ca:49:a7:e8:
92:5f:cd:e0:8d:02:97:cb:ce:43:d7:49:1b:7b:29:
7a:71:1a:fb:9f:d6:68:ce:21:4b:28:5a:63:2a:e1:
a1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:25:FF:BA:C2:50:B8:05:DF:69:4C:45:4B:97:2A:69:90:E3:BA:1D
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/37372e38332e3130342e302f32342d3234203d3e20323135303531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.104.0/24
Signature Algorithm: sha256WithRSAEncryption
26:37:79:9f:ba:e4:62:ed:53:77:a0:34:92:fe:34:95:85:ab:
cc:94:7e:36:59:41:72:2d:36:df:2e:fd:c7:fe:69:33:15:71:
9a:9c:45:19:d6:a8:62:96:ee:1e:f6:3f:4a:0c:1b:6c:aa:22:
f9:cb:5a:8e:7b:bc:b9:d7:ea:42:46:f5:1a:f3:c2:ff:48:9c:
f2:e7:23:32:7d:03:32:eb:24:87:e1:83:21:d5:a6:23:19:98:
48:d0:ad:09:61:dc:0e:4a:de:f4:ad:9f:80:ca:3d:f7:45:18:
04:3f:9a:1b:85:4a:f6:11:d7:39:e9:e6:21:53:e0:aa:cc:24:
9f:2e:65:e1:cd:2a:d9:99:c2:12:32:d1:15:84:b1:a0:c9:3f:
90:b3:d5:08:e7:d3:5e:90:6b:59:f1:e1:fc:08:71:38:c2:72:
b4:cf:73:60:45:f8:f1:ba:c2:2f:c6:8e:cb:2f:24:ed:1f:16:
03:0b:bb:25:78:dd:9d:80:fc:ad:08:56:23:b1:2d:43:69:d6:
40:4a:92:68:ea:78:2b:b4:2b:ec:0c:32:3e:c6:4c:8e:36:f9:
9b:10:dc:47:99:83:77:6b:bb:af:3d:52:68:b7:1d:d4:3f:1c:
b1:47:04:ea:ab:31:48:55:ef:75:32:3c:72:80:14:ad:25:9c:
38:4e:16:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 04:05:01 2024 by rpki-client on console-ams.rpki-client.org