Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32332e302f32342d3234203d3e203232333633.roa
File: 33312e362e32332e302f32342d3234203d3e203232333633.roa (raw, json)
Hash identifier: 06nL6LdpFwuU1fcjebaWSl/a0skgDQeJRfog1+ORcHo=
Subject key identifier: 07:08:E9:02:FD:FD:21:46:85:3C:0C:3A:02:80:5B:24:25:A2:1C:17
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 1E6F4B050F591176C9D873690F9677F43D694702
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32332e302f32342d3234203d3e203232333633.roa
Signing time: Mon 02 Oct 2023 05:23:04 +0000
ROA not before: Mon 02 Oct 2023 05:18:04 +0000
ROA not after: Mon 30 Sep 2024 05:23:04 +0000
asID: 22363
IP address blocks: 31.6.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:6f:4b:05:0f:59:11:76:c9:d8:73:69:0f:96:77:f4:3d:69:47:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Oct 2 05:18:04 2023 GMT
Not After : Sep 30 05:23:04 2024 GMT
Subject: CN=0708E902FDFD2146853C0C3A02805B2425A21C17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:10:f0:41:95:65:df:f1:b2:52:43:ec:6d:d3:
6a:49:92:55:8f:a1:1f:77:7a:4a:f3:2e:e1:b5:92:
c0:da:f8:7b:6d:17:96:cb:77:fb:9e:ff:a8:5e:a0:
f2:65:b9:4d:59:7b:28:ea:db:4b:5b:cb:04:d6:a2:
d6:b5:9e:d1:bf:71:eb:6d:44:36:43:f6:78:12:d0:
24:89:be:c2:3b:92:fe:06:57:c5:26:0b:c3:d3:7d:
50:d3:76:5e:58:b4:94:60:33:fc:66:f8:ca:75:ab:
02:66:04:7d:0e:40:a5:38:78:18:cd:8b:d4:02:ee:
1f:72:25:44:9d:21:21:06:f6:f7:ac:ee:4b:29:82:
0c:3a:d0:b4:82:25:1a:5b:c2:4a:35:d5:08:3b:59:
d6:7d:e7:74:9d:61:df:60:17:d9:6c:c9:99:03:29:
ec:99:93:06:b5:b1:62:c5:ab:0f:97:c5:4b:4e:90:
cc:aa:d6:b1:d3:f1:79:73:f0:8e:fc:dc:50:cd:00:
ec:3b:05:ea:00:9c:0f:8e:44:67:68:0e:28:5f:4e:
bc:2f:c3:23:2f:dc:f1:da:77:84:5f:44:9e:f6:1d:
8a:7f:c7:2d:61:e0:07:7c:14:9b:0a:e8:87:ed:8c:
9c:76:9f:5b:0f:2f:e9:0a:18:c1:e3:f9:32:ad:26:
76:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:08:E9:02:FD:FD:21:46:85:3C:0C:3A:02:80:5B:24:25:A2:1C:17
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32332e302f32342d3234203d3e203232333633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.23.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:6a:42:a5:b1:66:6e:bc:2e:10:2a:fb:87:dc:e9:18:c1:62:
15:1d:d5:9c:46:47:d3:f0:e1:07:a3:e6:0b:e9:4e:a4:4a:44:
e1:6f:87:ec:19:80:d5:b9:6d:7e:89:25:45:6a:58:f2:78:ed:
26:48:50:1b:34:8f:70:ca:dd:8b:75:e6:c8:9a:30:02:78:9d:
75:c5:f6:e5:44:da:5b:7e:ad:63:ec:7f:39:e0:28:80:ed:49:
1e:65:14:c1:6a:4c:23:62:9b:b3:46:99:53:94:1e:9d:65:97:
f5:98:88:e4:ef:72:1a:4c:f3:df:1e:78:ff:2e:8f:06:b6:58:
65:53:9b:cf:6c:ac:1e:31:60:09:dc:f0:cd:d1:0c:7c:83:6c:
93:32:f6:c4:a3:98:dd:30:9e:ae:b2:6e:0b:43:40:d9:e5:7f:
df:12:ab:c0:40:cf:f3:09:6a:98:42:38:24:e2:46:98:fb:6a:
a3:50:4c:fe:77:b1:62:e2:0a:03:a9:9c:18:d8:22:b3:ad:1a:
60:05:b3:de:f6:33:7c:76:a4:cd:0a:af:18:f2:84:93:67:ba:
9f:aa:86:04:f4:67:cf:34:f9:92:af:fa:8e:ea:b5:c6:a9:bb:
c2:60:46:e6:53:09:58:0d:86:66:2b:ad:cc:9e:f9:88:cb:80:
a6:c7:dc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:48:53 2024 by rpki-client on console-fra.rpki-client.org