Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33332e302f32342d3234203d3e203631333137.roa
File: 33312e362e33332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: z26Pk4nx651pjj88QGjh9bGQXmc6/mP2dQAO05NIY6U=
Subject key identifier: C6:A4:6F:61:F1:F3:F9:EA:D3:70:FD:FE:CE:C8:33:36:4E:3B:07:2F
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 5A56CDA6A4E4F44F76107D91E220F59736849DEC
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33332e302f32342d3234203d3e203631333137.roa
Signing time: Mon 02 Oct 2023 05:23:20 +0000
ROA not before: Mon 02 Oct 2023 05:18:20 +0000
ROA not after: Mon 30 Sep 2024 05:23:20 +0000
asID: 61317
IP address blocks: 31.6.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:56:cd:a6:a4:e4:f4:4f:76:10:7d:91:e2:20:f5:97:36:84:9d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Oct 2 05:18:20 2023 GMT
Not After : Sep 30 05:23:20 2024 GMT
Subject: CN=C6A46F61F1F3F9EAD370FDFECEC833364E3B072F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:99:6e:b9:34:37:01:d2:75:66:44:59:2e:c2:
e0:cb:1b:79:10:70:7e:94:52:99:e0:df:64:25:01:
5e:38:b2:dd:ee:a1:82:35:c9:4c:e2:4e:01:c6:a6:
27:3e:83:df:7d:89:24:41:11:78:05:52:15:b2:8d:
c2:86:6b:55:49:49:b6:c1:64:f0:e1:5c:e7:1b:19:
8e:b6:48:08:33:ee:31:bd:f8:2a:d5:bf:80:86:8c:
94:e6:74:05:64:9a:37:33:c8:73:27:1f:14:6d:74:
ed:0f:6c:7a:fc:3b:ac:f0:58:e4:0c:bb:1f:f3:d1:
28:cf:86:4b:9b:53:d2:e5:0a:02:d6:f7:21:5c:c4:
9e:fd:eb:56:bd:83:81:ed:30:db:2b:f3:00:56:53:
87:fb:64:8e:40:3a:88:bd:59:25:c6:12:46:c4:96:
34:ad:ac:7a:0e:a3:0b:25:b0:3c:0f:60:b6:1c:c9:
a4:5d:d3:4b:16:65:bd:da:13:f4:51:8a:b5:8e:ee:
c7:b5:a7:14:fc:75:a8:24:40:f7:c8:a1:49:40:61:
69:b5:ce:b8:cf:c6:11:98:92:d6:68:d6:22:09:de:
fb:38:8d:8b:00:17:7e:40:61:bf:9e:9a:84:a5:33:
89:17:b9:b4:4e:87:57:86:f6:2e:cf:50:8e:a6:51:
ea:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A4:6F:61:F1:F3:F9:EA:D3:70:FD:FE:CE:C8:33:36:4E:3B:07:2F
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33332e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.33.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:7c:33:a5:d9:4b:4e:b4:ac:68:e5:63:6c:cb:56:64:9a:9f:
47:a1:d2:e7:df:ba:60:f2:ea:57:c5:53:a9:3f:a5:e0:f6:55:
79:be:48:c9:4a:ad:b0:de:3f:b3:84:3f:a1:06:43:b9:f8:33:
2a:4b:36:42:57:1a:66:46:e1:9f:63:78:c6:37:18:e4:2a:c7:
53:4e:2b:56:60:50:48:e8:1b:5f:db:24:9b:32:eb:6a:aa:9b:
48:68:35:87:7d:4f:f4:31:cf:1e:c8:94:c2:b6:e1:6a:3f:30:
f9:6e:96:02:e9:3e:9b:ca:57:4b:0a:b6:85:54:d6:9e:53:c2:
48:73:79:21:9c:cb:4d:5f:52:c4:89:2a:82:fc:10:e0:2f:68:
ff:53:bd:b6:77:0f:03:5a:9f:59:60:0d:fb:65:7c:b5:f2:b4:
9d:fc:8f:0f:78:da:9b:f1:89:29:f2:b7:73:1c:cc:de:13:ed:
f4:74:27:f6:f5:d6:d6:9c:3d:98:6a:0a:8b:4c:40:e0:17:c2:
56:d4:8e:c0:ee:1f:d7:e7:04:0a:20:77:07:29:59:0f:c3:5b:
ba:e0:b2:19:0f:a9:f2:87:9a:af:d2:83:bf:70:90:53:0d:0e:
d7:3b:35:27:25:bc:fc:42:b7:a6:6f:c7:55:31:b7:cb:d2:c4:
c2:bb:d1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 19:53:55 2024 by rpki-client on console-fra.rpki-client.org