Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e39332e33352e302f32342d3234203d3e203631333137.roa
File: 3138352e39332e33352e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: 870QcJFMMWQZp7JJXR8spEx4IoHs6386a0F95Xnee1Y=
Subject key identifier: F6:9D:F8:9F:46:C0:D4:0F:2B:1B:85:0A:26:BB:27:03:B1:9D:7D:0C
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 5E4CE893B347C55AE429F661A1E7C4EB1724FBC4
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e39332e33352e302f32342d3234203d3e203631333137.roa
Signing time: Wed 08 Nov 2023 09:22:14 +0000
ROA not before: Wed 08 Nov 2023 09:17:14 +0000
ROA not after: Wed 06 Nov 2024 09:22:14 +0000
asID: 61317
IP address blocks: 185.93.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:4c:e8:93:b3:47:c5:5a:e4:29:f6:61:a1:e7:c4:eb:17:24:fb:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Nov 8 09:17:14 2023 GMT
Not After : Nov 6 09:22:14 2024 GMT
Subject: CN=F69DF89F46C0D40F2B1B850A26BB2703B19D7D0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:81:5a:f2:f1:e3:9d:a9:3d:54:c2:a7:30:2c:
d0:6f:c3:35:d0:46:11:c6:ba:a7:61:82:59:91:3b:
87:25:3a:2a:72:33:ae:59:2f:58:02:d2:db:65:6c:
ee:d1:8d:55:34:bf:cd:cb:27:d5:58:25:73:e7:57:
1f:6d:f6:b5:e5:9b:d2:88:f0:04:5f:ae:52:75:1e:
d5:70:3d:1d:2b:da:0a:ac:3a:e8:4a:3c:f0:d7:8d:
33:9f:ac:73:24:25:cd:ba:fb:be:31:e3:8f:dd:77:
16:03:4a:76:97:cd:3a:c6:31:ec:3a:65:83:c3:01:
37:81:5c:be:9c:0d:83:a7:60:37:98:ee:3f:7e:bf:
d4:24:1b:91:bf:8a:76:37:11:03:d3:b5:11:1f:6e:
2d:e2:cd:ea:b5:3a:ab:e0:4c:9e:84:4c:9e:fc:54:
ae:9a:94:04:9b:af:bb:72:bb:90:ea:a3:44:7a:1d:
00:71:7e:fd:1e:c0:ca:54:c1:c1:8d:fb:67:72:60:
52:05:f8:6e:1c:6f:78:84:45:db:cb:3f:94:91:e4:
b2:97:af:61:df:1d:2f:51:e7:a0:a9:05:d9:12:5c:
55:a7:f9:e6:4a:93:d4:bc:bf:82:c0:73:12:3e:8b:
2d:32:4e:89:53:68:bd:d4:df:b5:c5:88:7a:b9:5d:
0e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9D:F8:9F:46:C0:D4:0F:2B:1B:85:0A:26:BB:27:03:B1:9D:7D:0C
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3138352e39332e33352e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.35.0/24
Signature Algorithm: sha256WithRSAEncryption
22:70:26:74:eb:91:81:c4:ee:b7:da:dd:c6:40:d3:5d:c6:b5:
eb:07:22:fa:4a:be:4f:fe:6f:40:ae:ce:c7:15:d6:0c:10:e0:
72:33:9f:92:9a:7b:93:2c:7c:f4:d1:d5:31:93:6d:fd:35:41:
db:39:e5:ca:0d:ae:d1:ab:7b:c8:9d:a7:46:ba:18:cb:31:d8:
11:a9:a8:6a:67:4c:74:c9:8a:75:19:94:58:7f:1e:d1:ee:ee:
2e:42:21:03:c5:e6:6b:0e:71:6a:9a:92:f2:42:de:45:2e:50:
62:07:ab:23:f2:7f:5e:85:b4:6a:c4:d0:57:c2:87:7d:cd:4f:
50:9f:f0:84:86:4f:d8:d7:e3:da:62:37:7a:c0:5d:02:26:ed:
94:69:84:48:20:cd:67:b8:e3:ca:56:64:8f:91:ed:c5:db:2f:
c2:bc:a1:cc:48:c7:e4:28:19:ff:f1:cf:a8:a7:08:df:48:9b:
45:34:93:03:92:09:39:0d:90:85:0d:aa:d6:98:89:19:0c:a5:
2f:46:a6:b4:c0:c0:3a:c3:2d:d2:82:59:96:eb:8e:94:b1:49:
1e:3b:2b:81:f2:56:f3:fc:7c:0c:dd:23:90:ce:4b:08:76:d2:
01:07:8a:16:9a:3f:77:44:31:58:de:f7:58:f6:04:45:2a:4a:
94:77:a0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:29:11 2024 by rpki-client on console-ams.rpki-client.org