Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32312e302f32342d3234203d3e203232333633.roa
File: 33312e362e32312e302f32342d3234203d3e203232333633.roa (raw, json)
Hash identifier: lSy1ZgCxy5NipazSU/oZqfgI1lZLBduAOiMu4a/CagA=
Subject key identifier: 38:A5:E4:DD:09:0F:6B:90:6F:BD:76:19:B5:7F:62:38:61:63:78:BA
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 4E2E965EE23378E17B6A7570B10691F1B012DA22
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32312e302f32342d3234203d3e203232333633.roa
Signing time: Mon 02 Oct 2023 05:22:46 +0000
ROA not before: Mon 02 Oct 2023 05:17:46 +0000
ROA not after: Mon 30 Sep 2024 05:22:46 +0000
asID: 22363
IP address blocks: 31.6.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:2e:96:5e:e2:33:78:e1:7b:6a:75:70:b1:06:91:f1:b0:12:da:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Oct 2 05:17:46 2023 GMT
Not After : Sep 30 05:22:46 2024 GMT
Subject: CN=38A5E4DD090F6B906FBD7619B57F6238616378BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:20:49:0b:3b:19:6d:01:9d:a5:d4:ae:1b:fb:
d5:95:4d:b5:e7:21:ac:dd:ce:d8:90:21:90:41:b4:
e5:3c:1a:f7:56:f8:fe:9c:6c:d1:5c:42:9f:4f:06:
bf:2d:57:79:77:6c:fe:7a:cc:89:78:7d:19:56:21:
23:a6:0c:e5:d2:e7:73:03:99:32:7c:aa:44:b0:2e:
87:fb:68:ad:e3:e9:46:89:de:c5:71:67:89:2b:4c:
2a:e5:99:ab:58:f8:85:7b:ab:c0:5f:f1:0a:c1:cf:
a6:e1:9b:3a:07:5d:ea:c2:26:fe:8f:3b:14:58:e9:
a6:95:5a:c5:36:d7:7b:4f:8c:11:58:88:70:4c:33:
b9:4e:1a:94:2a:bc:2e:47:b3:37:75:8e:3f:6b:11:
e0:d9:1c:95:2b:25:a0:75:f5:02:3b:32:75:1f:d1:
24:2d:66:cd:84:fd:55:30:7c:93:ed:0b:8d:b7:c0:
dd:fc:6a:41:1c:b2:d0:40:aa:7b:8e:6c:a6:3e:43:
5c:eb:f8:1b:df:92:ef:52:d3:af:f5:d0:15:b8:3e:
d7:1c:56:c7:d1:2a:f1:54:1a:cf:4a:17:16:e6:2a:
25:48:d1:e9:2f:ad:d4:cd:cc:44:52:55:ff:29:e0:
21:6a:47:14:ad:ff:21:cb:9e:c5:60:bd:60:78:b3:
25:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A5:E4:DD:09:0F:6B:90:6F:BD:76:19:B5:7F:62:38:61:63:78:BA
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32312e302f32342d3234203d3e203232333633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.21.0/24
Signature Algorithm: sha256WithRSAEncryption
08:cf:36:e3:be:5b:18:d1:a0:8f:e1:62:52:bd:51:45:11:6c:
37:7f:68:89:70:57:a8:9b:b7:5d:65:19:7f:d7:ee:b6:47:b3:
4e:13:6a:7a:17:bf:a8:51:6f:a1:bf:32:25:2b:20:0c:f2:d8:
f5:37:36:eb:98:40:8e:60:2f:89:dc:5a:28:24:55:0a:bb:03:
16:67:1f:88:b5:6c:54:a5:33:de:8e:e3:5b:af:4d:c6:8f:35:
db:ad:0f:15:a2:bc:4b:8d:fc:b2:d0:71:75:2f:9c:32:4f:ff:
89:19:60:3a:fa:0a:e2:86:cb:3d:ce:58:ab:46:13:5e:b4:2d:
69:95:cb:f2:a0:3c:77:49:9d:7e:97:f7:12:fb:d0:42:00:3b:
e4:c2:37:16:65:02:77:a7:3e:21:d7:ec:54:dc:f8:6f:20:20:
d4:30:b1:77:1b:8f:02:aa:b6:2f:8b:72:09:db:84:3f:f9:66:
be:2c:b6:16:6b:8f:a5:e3:b0:6f:f5:34:a9:d7:af:3c:33:6e:
8c:1f:62:98:ba:70:47:45:4e:4a:fa:93:cb:8d:20:73:18:5c:
26:78:a8:e1:48:38:52:7d:53:8a:d7:68:cc:2c:49:02:5d:9e:
1c:a1:26:22:88:ac:da:b5:eb:fb:b9:4f:15:62:7a:67:2f:8a:
c4:6d:8a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 22:02:33 2024 by rpki-client on console-ams.rpki-client.org