Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e382e302f32342d3234203d3e203232333633.roa
File: 33312e362e382e302f32342d3234203d3e203232333633.roa (raw, json)
Hash identifier: UtzufOgs45YI7b1eoLNvjeU0cdm7Xl3BlGZshgFd964=
Subject key identifier: 38:FA:B1:E9:35:F9:54:40:8A:5D:94:E2:8D:F2:5D:78:8C:C8:91:B3
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 604411B566EC6DC0231BDF797A8CAB2BD4D8383C
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e382e302f32342d3234203d3e203232333633.roa
Signing time: Mon 02 Oct 2023 05:23:00 +0000
ROA not before: Mon 02 Oct 2023 05:18:00 +0000
ROA not after: Mon 30 Sep 2024 05:23:00 +0000
asID: 22363
IP address blocks: 31.6.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:44:11:b5:66:ec:6d:c0:23:1b:df:79:7a:8c:ab:2b:d4:d8:38:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Oct 2 05:18:00 2023 GMT
Not After : Sep 30 05:23:00 2024 GMT
Subject: CN=38FAB1E935F954408A5D94E28DF25D788CC891B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:da:e9:a4:0f:d4:de:bd:f2:3b:9e:5a:5a:da:
20:4d:ca:7d:ca:ad:78:52:8c:a0:c7:e5:cb:a7:aa:
18:f1:9f:c8:7f:d3:82:82:de:e0:04:b0:7d:ef:6c:
de:75:44:d0:00:87:44:c7:69:f0:28:17:7e:4b:85:
da:a1:4d:61:fe:88:de:9d:3b:af:c9:ec:fc:ed:8d:
7d:e9:ca:df:d5:2e:72:3a:c3:71:5d:fd:5e:f6:95:
36:5b:67:f4:6b:67:7e:a9:a1:14:58:f1:3b:c7:a6:
e3:46:7d:e3:5d:b1:42:ba:62:89:dc:4d:34:72:f4:
95:56:7f:5a:5f:a0:9d:e1:32:ec:47:08:c3:0e:96:
04:02:08:72:69:ef:4e:78:27:7d:24:2e:cc:64:ff:
85:5e:e3:c1:a0:c4:dd:62:76:94:8c:11:6e:72:6a:
d4:16:1a:86:71:93:6a:b1:73:a2:22:b8:5c:df:bf:
80:ae:3d:95:c8:4a:a4:88:b3:99:84:81:d7:cc:62:
bd:49:22:71:0e:9d:c3:eb:0a:4c:25:07:12:ff:61:
65:7b:78:0f:34:1d:8f:f3:a3:2e:75:d2:98:83:92:
6d:72:db:40:4a:46:2b:22:f4:a4:08:11:d1:03:c4:
af:fc:45:43:56:d4:1a:36:8d:45:c5:c6:0d:60:70:
7c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FA:B1:E9:35:F9:54:40:8A:5D:94:E2:8D:F2:5D:78:8C:C8:91:B3
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e382e302f32342d3234203d3e203232333633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.8.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:bc:6d:da:3e:53:31:34:79:a2:fd:30:b2:6b:c4:60:a3:f7:
27:5e:7e:a4:1b:ce:d6:f9:8b:46:c7:e7:50:3c:63:dc:2f:06:
93:7f:eb:11:74:d8:2c:00:f3:74:d8:fb:f5:f1:ae:28:75:05:
07:c8:81:32:b7:99:1a:b0:4f:7a:ea:6c:08:c7:05:56:47:a6:
b0:c6:fc:a8:e6:6d:bd:4f:02:ad:b7:1c:e1:9e:07:e1:20:0f:
a2:77:78:b8:b1:5b:0f:72:0f:02:a6:0b:be:98:51:ab:9c:ec:
64:4e:a6:b4:2e:40:4f:6d:cd:96:56:21:9a:7d:47:ae:1f:c4:
c1:48:c1:e3:69:10:a7:ff:bd:aa:1d:d6:4d:57:d9:0d:9e:a0:
a0:f0:52:68:5b:6f:9f:10:30:e6:89:80:02:0c:7b:49:27:b5:
21:82:85:ba:70:ad:40:43:ae:e0:cc:52:8d:d4:42:45:6c:d2:
d5:f7:cb:4e:81:22:08:17:25:8b:4b:f0:4d:c4:b3:5b:47:53:
bf:e2:db:bf:ae:3e:a4:6a:e6:63:13:b7:d0:10:ff:c8:f1:b8:
6e:0a:ed:5d:d1:b2:de:3e:eb:45:92:98:0f:3a:52:99:fe:10:
37:49:5b:9c:82:47:b1:e6:10:2d:f5:a1:9f:95:87:a1:6e:6d:
2c:af:cc:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 22:02:33 2024 by rpki-client on console-ams.rpki-client.org