Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35322e302f32322d3234203d3e20383334.roa
File: 33312e362e35322e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: +/Fwyrrq+lR+5nOryI7tDwTYPQdpomYhCSz21d8UOJE=
Subject key identifier: C1:BF:08:2F:E4:8B:BA:8A:80:13:48:14:5F:7D:15:22:36:1A:AE:7D
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 0792D0297AA9492909B6CAFB7A7051601917F3DF
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35322e302f32322d3234203d3e20383334.roa
Signing time: Mon 02 Oct 2023 05:20:33 +0000
ROA not before: Mon 02 Oct 2023 05:15:33 +0000
ROA not after: Mon 30 Sep 2024 05:20:33 +0000
asID: 834
IP address blocks: 31.6.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:92:d0:29:7a:a9:49:29:09:b6:ca:fb:7a:70:51:60:19:17:f3:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Oct 2 05:15:33 2023 GMT
Not After : Sep 30 05:20:33 2024 GMT
Subject: CN=C1BF082FE48BBA8A801348145F7D1522361AAE7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:34:c6:84:be:84:ff:d9:94:48:e8:ca:f3:a0:
e7:95:c7:01:3d:b5:d7:7f:2f:e3:97:25:b1:25:e6:
fc:2d:84:e2:85:0b:54:b7:ea:ec:5b:e4:79:14:8c:
d9:dc:6b:fe:26:3a:01:62:e7:fd:be:9f:e9:96:51:
5d:f8:cd:22:05:07:0b:0c:e8:bc:77:bd:c1:3a:9a:
c4:16:b0:00:29:43:69:af:c5:ac:3a:4b:f2:f5:7c:
dd:d6:8e:76:03:23:b9:89:97:67:9f:c5:b4:e5:c0:
98:29:89:e2:fa:ec:dc:26:46:1d:47:16:08:2a:5d:
8d:66:32:d4:5b:e6:15:47:fc:34:eb:c7:d1:10:d2:
8c:62:7c:85:7c:c1:5e:02:38:0b:de:dc:be:05:b2:
b6:41:16:2d:99:c0:03:22:69:5c:7d:25:e6:a5:f3:
11:a5:bd:3b:96:b6:6a:f9:1b:c6:ca:fb:83:a6:a4:
41:9e:13:cd:8e:ad:16:6b:0d:f2:a6:43:c4:c8:7a:
bf:aa:cb:f0:65:5c:b4:15:2b:48:de:03:95:b3:a7:
4b:31:f1:89:e5:c7:66:66:14:0f:82:b2:18:36:b5:
2d:ed:f6:51:a3:24:36:97:bf:1f:c7:b4:6b:89:ae:
47:37:d1:44:52:9d:13:10:0e:ea:f3:ce:18:76:12:
94:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BF:08:2F:E4:8B:BA:8A:80:13:48:14:5F:7D:15:22:36:1A:AE:7D
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35322e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.52.0/22
Signature Algorithm: sha256WithRSAEncryption
07:6e:44:70:14:aa:87:bd:8c:44:bb:f5:18:53:33:ef:a6:d7:
4c:c1:2f:03:d1:25:08:52:74:89:7a:b0:0b:06:65:2c:f2:c2:
03:e8:e7:7f:e5:c0:a7:da:3b:b1:4c:8a:5e:50:c7:ad:a7:d9:
af:47:88:74:ae:df:6f:35:ab:19:5a:83:1e:85:ee:91:ce:da:
42:0e:40:9e:5c:dd:35:d1:99:14:3b:e5:e5:ff:c7:41:32:b0:
04:67:7e:cc:94:a6:34:0d:6d:66:31:20:e6:f4:a2:86:4c:ab:
b3:26:8d:4b:1b:8b:1d:20:ee:eb:c7:d4:0b:92:0a:13:46:00:
1b:b6:6c:f0:a3:59:21:68:6c:1e:9a:ea:fa:4a:67:d0:73:80:
49:9a:d1:b3:52:04:b3:3b:bd:cb:59:e2:4a:1f:34:cb:58:9c:
69:da:8e:c4:78:fa:a6:4a:68:62:59:14:84:46:04:dd:34:31:
4d:dc:c5:28:9c:52:d2:fc:ba:b4:e7:cf:ea:00:2d:33:87:4a:
13:5f:c3:2a:ac:1c:e1:ac:83:7c:1e:61:d2:15:f2:65:7f:ca:
75:2a:a9:94:47:e3:0a:bd:eb:9e:5d:3b:f8:bb:bf:51:77:ac:
ea:2b:c4:52:85:67:f4:5f:34:74:b3:f6:00:25:57:34:e9:d4:
40:b6:41:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:24:49 2024 by rpki-client on console-ams.rpki-client.org