Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e39302e302f32332d3234203d3e20383334.roa
File: 3231332e3133392e39302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: Eb6bV48KLehXFOvsG5u4jHlAt+ri3m27o5ABT3fMA44=
Subject key identifier: 2A:19:7D:05:2B:EF:DE:EF:C5:08:3A:C2:BB:BA:E6:42:C3:E7:87:14
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 51DA330DF5DAA0A452DDF24CA4F8BE0FF38FC316
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e39302e302f32332d3234203d3e20383334.roa
Signing time: Wed 27 Dec 2023 13:05:08 +0000
ROA not before: Wed 27 Dec 2023 13:00:08 +0000
ROA not after: Wed 25 Dec 2024 13:05:08 +0000
asID: 834
IP address blocks: 213.139.90.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:da:33:0d:f5:da:a0:a4:52:dd:f2:4c:a4:f8:be:0f:f3:8f:c3:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Dec 27 13:00:08 2023 GMT
Not After : Dec 25 13:05:08 2024 GMT
Subject: CN=2A197D052BEFDEEFC5083AC2BBBAE642C3E78714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f4:01:d7:cc:16:77:87:93:89:58:fa:82:e6:
57:6d:93:cb:be:d4:73:3d:37:a2:ff:fa:ea:ea:e8:
29:d1:e0:d7:de:7e:72:10:8e:af:a1:bc:f9:3a:49:
79:03:03:77:b7:d9:da:ec:42:1e:48:c1:1a:29:e1:
ca:76:ed:ef:a8:7c:3d:cc:36:3e:9c:95:21:55:b2:
0a:2d:86:2f:19:16:c9:77:88:87:2e:e6:c7:9f:42:
1a:de:a0:09:c1:6c:8f:52:04:67:71:d7:25:d2:24:
5a:c0:0b:83:80:9d:a0:f5:c2:5c:c9:0b:6a:89:ae:
d7:e1:d4:39:a8:39:27:1e:77:33:6b:b1:4c:5a:e4:
b1:91:21:20:48:f7:c6:c7:d1:07:78:75:46:06:3b:
9c:75:1d:5f:24:db:a7:97:3e:6f:ed:9e:d4:ae:6f:
e5:48:f6:00:8a:52:3f:2d:8e:94:76:e4:1f:ea:be:
d7:fb:72:5c:f4:fa:24:2f:a3:5b:53:75:be:70:7d:
30:d2:61:98:ac:42:e9:b1:13:78:6a:88:9b:f5:66:
ee:e6:55:66:30:35:55:11:9b:50:8e:fa:9c:3a:77:
d5:89:4d:6c:fa:49:15:3c:d9:ae:40:56:47:8b:69:
4d:1b:7a:3f:e4:83:aa:1a:50:df:8a:db:93:8e:8c:
ae:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:19:7D:05:2B:EF:DE:EF:C5:08:3A:C2:BB:BA:E6:42:C3:E7:87:14
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e39302e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.90.0/23
Signature Algorithm: sha256WithRSAEncryption
11:38:7c:8d:34:c5:4f:2f:76:fa:83:b5:f8:f2:8d:1f:2d:88:
22:d2:91:fa:c0:64:ac:2e:a5:a0:09:52:ed:b3:ce:58:6e:d5:
27:43:e7:71:fb:60:7f:3d:54:ac:96:52:58:f7:49:a7:d8:cd:
54:e6:20:b1:c9:b4:cd:8f:78:83:c0:7f:4d:82:75:49:4e:0d:
a9:71:e9:53:04:5c:f2:6b:61:b7:5b:05:af:00:cb:a9:67:84:
56:81:0b:1a:db:f4:04:88:d6:32:b9:6a:2e:c4:60:33:7c:c8:
2b:cc:bd:ad:90:5d:5b:19:0b:8c:77:67:ea:f9:d5:d7:dd:70:
9b:4f:0a:e4:8b:74:a4:0e:e7:ac:2f:15:4f:5e:d7:b4:8e:f0:
4e:ba:6d:89:33:09:74:5e:84:85:5a:65:81:f3:69:b3:46:59:
60:ef:12:25:02:b4:d9:01:e0:67:1c:b2:f7:4f:e9:45:53:57:
23:c2:c8:b9:9c:33:a7:8d:48:cf:5b:e3:9e:5a:16:51:ab:f2:
d6:0c:86:59:f2:65:a6:eb:b2:a2:3d:57:5d:ec:38:e9:f7:47:
37:7d:7e:00:87:ee:32:c9:33:44:ee:1f:df:f0:47:70:dd:f6:
67:60:a8:d9:c3:7d:a2:d8:7a:03:5e:8b:28:77:e9:f3:94:e1:
9b:ab:8c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 05:35:05 2024 by rpki-client on console-fra.rpki-client.org