Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31352e302f32342d3234203d3e20313938313730.roa
File: 33312e362e31352e302f32342d3234203d3e20313938313730.roa (raw, json)
Hash identifier: NatYh66u6B0iKSXxVaeOGAMkrOCdfMwvUx1QoO9MZVw=
Subject key identifier: 5D:22:4D:99:6C:8D:30:EF:5D:E4:09:48:93:C5:F9:33:33:49:45:6C
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 04486B9EA0136D832163B9DA82A5CC19AED7CFAD
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31352e302f32342d3234203d3e20313938313730.roa
Signing time: Sat 06 Apr 2024 13:00:01 +0000
ROA not before: Sat 06 Apr 2024 12:55:01 +0000
ROA not after: Sat 05 Apr 2025 13:00:01 +0000
asID: 198170
IP address blocks: 31.6.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Jun 2024 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:48:6b:9e:a0:13:6d:83:21:63:b9:da:82:a5:cc:19:ae:d7:cf:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Apr 6 12:55:01 2024 GMT
Not After : Apr 5 13:00:01 2025 GMT
Subject: CN=5D224D996C8D30EF5DE4094893C5F9333349456C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d1:a9:bd:e8:d6:75:ee:bc:15:aa:ca:4f:08:
a2:04:78:20:32:85:ad:a0:27:56:37:e7:6f:02:d8:
2c:49:6c:62:cb:78:09:a0:fc:30:4d:e9:ec:22:53:
42:20:c3:11:67:57:62:f6:93:7a:ae:9e:38:37:31:
94:8d:93:3b:96:a0:cd:4b:9e:90:ce:9a:79:ca:90:
78:38:e3:db:c9:46:cc:01:53:45:e8:09:2d:fc:f3:
af:c5:54:99:b7:01:f9:19:70:7b:38:fd:b3:06:0c:
ef:8e:32:0e:df:55:e1:e7:4a:e1:7b:c4:bc:d6:28:
b2:a5:5c:94:de:7b:40:8b:ab:7d:a5:13:3a:dc:f1:
80:65:6c:35:25:51:2b:bb:48:85:ee:89:03:f5:9e:
f7:9d:c2:64:11:a7:fe:eb:a4:f5:58:65:8d:7a:fe:
70:ca:4b:ed:20:f8:f4:fd:ca:70:2b:24:54:13:e4:
54:da:a7:f6:8d:78:fb:e1:eb:b4:8a:76:97:45:fa:
2f:8a:62:1a:59:0d:0b:d7:d0:ad:9e:be:fe:ed:4c:
b4:b9:6d:43:68:99:43:76:c7:cb:67:a5:cb:1d:4e:
01:e2:0f:20:cf:c5:46:47:e4:e4:c9:a8:5c:80:2a:
9d:52:30:3e:fe:ef:95:90:8d:89:52:08:c3:4f:05:
49:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:22:4D:99:6C:8D:30:EF:5D:E4:09:48:93:C5:F9:33:33:49:45:6C
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31352e302f32342d3234203d3e20313938313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.15.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:4b:6d:3b:e6:32:ff:71:84:ea:fd:b3:13:2c:4d:6e:0d:9f:
a3:22:c5:f3:27:87:38:a4:18:49:ae:5f:ac:7a:f0:83:c8:0c:
e5:f7:67:04:4f:ba:ab:1c:97:93:23:41:e2:5e:15:72:2c:c5:
52:dd:83:74:db:2e:d5:1d:27:ba:77:00:88:5e:63:70:c1:ee:
de:16:4f:cb:78:d4:d7:1e:c4:84:f8:dd:71:f1:d3:e4:a5:aa:
cf:f7:ed:d0:a1:7f:ef:18:0a:16:2b:fc:6c:31:b2:94:b9:7a:
b0:f8:43:df:4b:e0:dd:01:e2:10:6e:bd:25:82:38:95:b1:04:
e1:03:0b:c9:3b:57:31:b5:0c:73:a0:fc:d5:81:2f:ce:e3:38:
a4:db:58:09:af:ca:7e:f7:7d:d9:00:27:2a:b0:ad:6c:65:cf:
38:39:57:0b:cd:29:6e:34:01:78:43:79:34:a1:08:ce:b8:d0:
3f:fd:c2:87:da:5b:d1:87:c9:01:14:dc:6e:0d:51:22:bd:98:
12:8c:1a:c0:5f:c1:6f:32:98:f0:2a:91:1e:56:ab:24:cf:74:
3b:2d:44:a2:4a:6c:de:e8:4e:29:3b:17:39:c5:84:25:e1:86:
59:81:98:6f:79:35:ae:2d:9b:39:fe:74:69:40:09:30:a9:13:
59:2d:5d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 00:49:43 2024 by rpki-client on console-ams.rpki-client.org