Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3135382e36312e302f32342d3234203d3e203631333137.roa
File: 38352e3135382e36312e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: pEcLqRN2h4WaR+/pXGjlvy7yALaZkN8jdlklDSrruUw=
Subject key identifier: BA:73:15:C2:B8:1F:61:1F:A5:1A:F8:49:4B:F0:3D:D8:0C:76:CA:20
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 5EB5A1D217434C723311B6B733A63EDF233439FA
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3135382e36312e302f32342d3234203d3e203631333137.roa
Signing time: Wed 08 Nov 2023 09:21:41 +0000
ROA not before: Wed 08 Nov 2023 09:16:41 +0000
ROA not after: Wed 06 Nov 2024 09:21:41 +0000
asID: 61317
IP address blocks: 85.158.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:b5:a1:d2:17:43:4c:72:33:11:b6:b7:33:a6:3e:df:23:34:39:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Nov 8 09:16:41 2023 GMT
Not After : Nov 6 09:21:41 2024 GMT
Subject: CN=BA7315C2B81F611FA51AF8494BF03DD80C76CA20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:db:69:89:c4:c9:3a:9c:08:95:1a:7b:79:8d:
9e:79:e3:0f:3a:7e:b9:0c:75:55:90:8b:21:a3:90:
30:b2:83:74:1a:f0:a7:13:2c:6c:da:ca:4e:7c:7b:
df:59:4e:c1:33:cb:10:76:9c:9e:04:c0:e2:73:30:
4d:6e:d8:82:fd:46:da:6a:ab:68:0b:cf:84:f1:18:
41:8c:1b:5b:53:2a:76:8b:e8:bb:65:c8:ce:90:bf:
e7:e8:31:46:aa:4c:f4:96:af:34:ef:e5:83:b7:37:
76:dd:9d:40:a9:3c:ab:6b:8e:90:62:07:7d:31:d5:
49:60:6d:b4:40:ef:29:f9:fd:3c:22:a7:90:69:20:
7b:14:99:4f:09:51:ff:14:a1:4a:57:f3:34:00:29:
06:75:2a:b1:da:a3:6b:73:53:af:d0:9c:aa:b7:84:
9f:34:ac:6e:10:78:79:22:15:33:a1:8f:21:9d:64:
7b:7f:4e:c2:b0:37:b9:b9:ab:43:57:c7:68:e5:39:
4c:3d:16:b7:b5:66:73:80:a9:dc:3e:9d:21:3e:78:
71:0a:02:57:34:b2:c4:a5:33:db:15:5c:b5:b3:10:
d1:5d:e4:c8:04:32:6f:0b:87:d7:ef:01:a7:55:8f:
af:27:bc:da:88:24:38:8d:17:e9:70:95:90:0e:73:
93:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:73:15:C2:B8:1F:61:1F:A5:1A:F8:49:4B:F0:3D:D8:0C:76:CA:20
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3135382e36312e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.61.0/24
Signature Algorithm: sha256WithRSAEncryption
06:3a:87:84:8d:2c:59:84:32:c1:21:7d:34:d0:b9:77:5e:d5:
c9:45:0e:51:0b:41:fd:7a:60:00:db:83:8e:83:87:67:d2:de:
ce:eb:68:c5:b2:9e:1c:7b:13:7c:8c:cf:a7:b0:90:30:f3:ff:
d3:eb:c9:1d:d9:60:20:59:19:bf:ae:da:a3:f4:84:a4:01:5a:
fe:8f:4f:eb:2c:90:6b:c2:64:d7:41:9f:c1:dd:4b:38:bf:e6:
2c:b7:f0:2e:c8:46:6e:46:5c:d5:ee:7f:2b:bf:cb:73:99:b9:
4a:78:14:c6:2f:22:31:20:aa:f2:50:69:80:3a:ea:32:d6:f2:
3e:cf:89:22:72:92:e4:aa:96:00:b7:0f:0a:5b:44:e0:75:0e:
75:df:31:65:f4:78:95:26:7e:eb:96:6f:72:a3:fb:0a:14:20:
05:5f:fc:47:ad:b1:68:32:91:09:33:b6:2e:18:6d:6f:73:82:
4f:52:80:68:ef:8f:57:e2:d9:6c:41:73:c9:73:6d:ea:75:2a:
46:38:f8:a2:12:cb:02:32:94:15:f1:09:c2:3b:3d:da:72:e7:
ec:19:15:00:3e:e2:e9:d9:b4:b7:46:76:72:b6:b7:9a:59:ea:
bf:26:94:f4:ba:8b:38:04:92:07:c4:61:3b:cb:fe:15:ee:1c:
fb:9d:45:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:36:22 2024 by rpki-client on console-ams.rpki-client.org