Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31342e302f32342d3234203d3e20313431393638.roa
File: 33312e362e31342e302f32342d3234203d3e20313431393638.roa (raw, json)
Hash identifier: qOOC/RlB2kmWvQ+PrSObLlLxKoG7pCGjL8gvdwZugJw=
Subject key identifier: 7E:70:4A:4A:58:46:CD:1B:73:3B:4D:EF:3F:8B:29:9D:F0:A3:D2:D9
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 6D44D68472BD27791DA6D5D8D498F4AB7B49503B
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31342e302f32342d3234203d3e20313431393638.roa
Signing time: Thu 30 May 2024 12:45:20 +0000
ROA not before: Thu 30 May 2024 12:40:20 +0000
ROA not after: Thu 29 May 2025 12:45:20 +0000
asID: 141968
IP address blocks: 31.6.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:44:d6:84:72:bd:27:79:1d:a6:d5:d8:d4:98:f4:ab:7b:49:50:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: May 30 12:40:20 2024 GMT
Not After : May 29 12:45:20 2025 GMT
Subject: CN=7E704A4A5846CD1B733B4DEF3F8B299DF0A3D2D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ca:34:24:e6:90:29:73:6e:ef:c3:6d:21:5b:
14:18:6a:9c:2a:89:ec:59:c0:d7:62:dd:cf:30:b3:
7a:44:3c:36:13:6e:84:8a:81:55:e5:de:f0:eb:53:
bd:50:6e:82:e2:94:9e:0c:8b:d2:da:0e:fd:69:67:
56:89:9b:5d:7c:f2:7c:e4:65:ad:27:5f:8c:03:51:
cd:cb:40:57:e7:6e:60:ac:46:6f:22:db:a4:08:6d:
3a:97:de:98:f3:5e:3e:95:d4:f8:9b:99:16:6f:c5:
f1:9f:09:12:b3:3e:f5:99:3f:de:40:dc:e6:d3:a8:
58:ec:eb:12:1d:96:67:96:fa:d9:3b:e5:0e:1f:ee:
96:53:54:cd:b8:43:92:38:34:7d:9a:a1:e5:85:cb:
7f:ac:7d:f8:be:94:51:2f:95:23:c6:3c:a9:0c:4d:
e2:ea:7a:c4:65:09:35:ea:c0:4f:3e:75:76:20:a2:
12:31:92:b1:fe:76:6a:c2:bd:43:24:49:d3:02:80:
b4:64:74:dd:b2:22:33:97:0c:30:c8:41:78:f5:e5:
11:7d:3a:5e:4d:96:62:a7:37:de:7b:ac:ff:f6:b4:
57:ba:bc:39:9a:a1:b5:f8:e7:16:11:38:e8:c3:2b:
18:54:a8:d3:3d:a3:80:a5:6f:b2:33:20:60:f0:20:
ee:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:70:4A:4A:58:46:CD:1B:73:3B:4D:EF:3F:8B:29:9D:F0:A3:D2:D9
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31342e302f32342d3234203d3e20313431393638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.14.0/24
Signature Algorithm: sha256WithRSAEncryption
85:8d:ab:c5:5b:56:a3:6f:f2:d3:49:86:7b:6a:a9:21:16:e6:
f0:8c:11:88:4c:31:e3:bd:fc:6d:40:6a:ce:02:61:58:01:29:
5e:b6:a9:0a:18:95:ad:5e:72:bd:d5:1c:77:19:e5:07:4c:c3:
e9:f7:8e:7b:18:7d:2d:dc:4d:f6:79:21:3e:20:6a:a1:52:8b:
b7:d2:83:f9:a3:99:b4:6a:fa:84:af:ed:ec:b6:9e:5c:97:4d:
76:4e:32:f9:8d:73:25:cb:df:ae:ee:4b:59:68:ad:81:91:71:
e2:76:fb:58:14:45:95:be:ba:a4:92:06:dc:e8:ae:3a:0c:33:
d3:4b:6f:88:26:0b:83:eb:ac:fe:25:02:78:fa:a2:a0:65:70:
23:66:ed:25:6f:a7:1d:57:f0:14:32:e6:96:ee:b8:06:dd:7a:
2b:c3:67:c7:b8:27:0d:db:63:d3:7b:1e:c8:29:32:2f:78:bf:
e9:a6:ed:27:57:03:f3:9f:62:a7:0c:9b:b9:3a:54:12:7d:0f:
e1:f1:41:54:81:fe:f2:ee:53:56:39:55:fd:12:f2:aa:ff:51:
ca:5b:0b:59:6b:10:b2:0e:19:6e:82:c4:2b:9a:2e:32:f3:28:
92:9a:d8:e5:da:cc:02:ef:58:6d:93:5b:c6:be:7b:32:92:c6:
77:bb:9b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:48:53 2024 by rpki-client on console-fra.rpki-client.org