Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33322e302f32342d3234203d3e20323135363933.roa
File: 33312e362e33322e302f32342d3234203d3e20323135363933.roa (raw, json)
Hash identifier: FygcmmcCXw/meYmWAkSASpjEXywo745RtLQ1ZcECwI4=
Subject key identifier: 71:C7:DE:21:48:8F:77:FA:55:83:5B:01:83:47:60:B5:3D:03:85:80
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 45C7DFD5C1A95DC86FF5064D2040EAD3DAE22BD2
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33322e302f32342d3234203d3e20323135363933.roa
Signing time: Tue 05 Mar 2024 17:19:34 +0000
ROA not before: Tue 05 Mar 2024 17:14:34 +0000
ROA not after: Tue 04 Mar 2025 17:19:34 +0000
asID: 215693
IP address blocks: 31.6.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:c7:df:d5:c1:a9:5d:c8:6f:f5:06:4d:20:40:ea:d3:da:e2:2b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Mar 5 17:14:34 2024 GMT
Not After : Mar 4 17:19:34 2025 GMT
Subject: CN=71C7DE21488F77FA55835B01834760B53D038580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:db:c7:f4:e8:83:18:4a:f6:12:7c:35:d8:ba:
6b:e4:f4:07:b3:55:7e:2c:5e:1d:02:b3:a0:3b:e2:
7d:aa:ca:bb:db:f6:c8:f6:45:38:25:f8:7f:98:d1:
5a:ae:81:4b:3e:fc:56:64:f6:8f:c4:f0:e3:8f:e5:
42:11:61:fb:fd:0f:9d:5e:e8:f0:ec:e8:50:ab:18:
6d:73:e4:b5:20:4c:cd:0d:d3:49:e8:21:8c:d1:c8:
bf:49:e6:0d:16:cd:8f:fe:cb:b2:42:52:70:a0:ec:
f7:3e:1d:cb:71:36:37:17:df:5e:57:95:76:35:9e:
6a:d8:30:fe:d6:af:3b:b0:21:b5:14:f0:4b:46:54:
ef:8d:e7:d1:6e:c4:01:e0:7f:f9:49:03:b7:79:69:
a9:c6:f7:0d:da:bd:c7:40:d5:09:4c:a7:dd:73:f8:
ec:7a:b1:e3:d5:09:4c:bc:cf:f8:9c:2d:cf:7e:6b:
88:0d:03:95:37:1f:aa:7b:c5:7d:2d:23:7f:0a:ea:
71:a5:f7:53:4a:aa:ef:51:3c:eb:77:34:ad:4e:2c:
c4:05:8b:e7:1b:d8:77:dd:63:6f:7d:2a:94:57:de:
58:f4:01:b8:bf:68:d8:8a:47:6f:c8:24:64:6a:72:
c7:01:8f:d3:82:91:d6:6d:38:cb:2c:29:92:62:61:
43:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C7:DE:21:48:8F:77:FA:55:83:5B:01:83:47:60:B5:3D:03:85:80
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33322e302f32342d3234203d3e20323135363933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.32.0/24
Signature Algorithm: sha256WithRSAEncryption
98:d0:e0:3f:6d:0b:89:41:3f:37:59:cc:78:13:01:40:96:54:
a1:a3:28:37:14:71:29:39:8f:f3:b1:b3:92:6f:b1:80:a4:da:
4f:4c:b3:03:eb:c0:12:65:20:25:ea:f8:55:a5:32:2e:5b:12:
47:cc:dc:b5:1a:6c:18:19:68:7d:0e:38:b6:0c:c7:28:7a:a9:
d7:16:15:c8:2b:dd:c8:15:61:d1:b1:76:cf:0b:04:7d:b6:9a:
5a:df:2f:69:16:18:5a:1d:5b:58:68:45:3f:09:a8:36:09:90:
01:35:fa:4a:58:e2:6a:3f:b7:f1:2c:cd:1d:b8:07:b2:8f:05:
43:ab:82:7b:6d:bf:77:cd:21:0c:bd:cd:4b:12:06:5c:ee:91:
72:93:17:43:e6:9b:71:50:0d:30:79:b0:d1:aa:b2:fe:ab:63:
7d:38:d2:33:62:e7:a2:8c:e3:51:f9:4f:9f:67:4f:b1:b8:0f:
3a:c5:92:78:86:4e:f6:0c:51:00:3c:2e:65:56:c4:44:0b:5b:
31:06:82:18:c8:59:29:4d:39:44:ad:a6:44:32:b8:68:bb:64:
63:19:b0:03:5a:17:26:ba:19:5b:b2:96:1a:8f:fa:ce:7f:06:
23:8c:a1:5c:60:8a:6a:07:7c:7f:e3:80:cd:33:37:71:5e:d0:
26:b5:46:ae
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIURcff1cGpXchv9QZNIEDq09riK9IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNDAzMDUxNzE0MzRaFw0yNTAzMDQxNzE5MzRaMDMxMTAvBgNV
BAMTKDcxQzdERTIxNDg4Rjc3RkE1NTgzNUIwMTgzNDc2MEI1M0QwMzg1ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCI28f06IMYSvYSfDXYumvk9Aez
VX4sXh0Cs6A74n2qyrvb9sj2RTgl+H+Y0VqugUs+/FZk9o/E8OOP5UIRYfv9D51e
6PDs6FCrGG1z5LUgTM0N00noIYzRyL9J5g0WzY/+y7JCUnCg7Pc+HctxNjcX315X
lXY1nmrYMP7WrzuwIbUU8EtGVO+N59FuxAHgf/lJA7d5aanG9w3avcdA1QlMp91z
+Ox6sePVCUy8z/icLc9+a4gNA5U3H6p7xX0tI38K6nGl91NKqu9RPOt3NK1OLMQF
i+cb2HfdY299KpRX3lj0Abi/aNiKR2/IJGRqcscBj9OCkdZtOMssKZJiYUMnAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUccfeIUiPd/pVg1sBg0dgtT0DhYAwHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTMzMzIyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzUzNjM5MzMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAfBiAw
DQYJKoZIhvcNAQELBQADggEBAJjQ4D9tC4lBPzdZzHgTAUCWVKGjKDcUcSk5j/Ox
s5JvsYCk2k9MswPrwBJlICXq+FWlMi5bEkfM3LUabBgZaH0OOLYMxyh6qdcWFcgr
3cgVYdGxds8LBH22mlrfL2kWGFodW1hoRT8JqDYJkAE1+kpY4mo/t/EszR24B7KP
BUOrgnttv3fNIQy9zUsSBlzukXKTF0Pmm3FQDTB5sNGqsv6rY3040jNi56KM41H5
T59nT7G4DzrFkniGTvYMUQA8LmVWxEQLWzEGghjIWSlNOUStpkQyuGi7ZGMZsANa
Fya6GVuylhqP+s5/BiOMoVxgimoHfH/jgM0zN3Fe0Ca1Rq4=
-----END CERTIFICATE-----
Generated at Sat Jun 1 18:48:53 2024 by rpki-client on console-fra.rpki-client.org