Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e39302e302f32342d3234203d3e203239383032.roa
File: 3231332e3133392e39302e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier: rIo1LK1LtYvOql2Exp10N3xZkVHS5zBLjZ0ylu5lh6A=
Subject key identifier: 87:18:79:89:22:96:72:C2:B1:29:F8:82:A6:F6:61:17:8F:C6:22:8A
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 6CF822366F088A7C23C6AE09FC58BFD3777203E6
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e39302e302f32342d3234203d3e203239383032.roa
Signing time: Tue 19 Mar 2024 15:05:14 +0000
ROA not before: Tue 19 Mar 2024 15:00:14 +0000
ROA not after: Tue 18 Mar 2025 15:05:14 +0000
asID: 29802
IP address blocks: 213.139.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Apr 2024 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:f8:22:36:6f:08:8a:7c:23:c6:ae:09:fc:58:bf:d3:77:72:03:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Mar 19 15:00:14 2024 GMT
Not After : Mar 18 15:05:14 2025 GMT
Subject: CN=87187989229672C2B129F882A6F661178FC6228A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9c:8b:94:ac:3d:ba:85:d7:bb:23:74:e7:d4:
08:12:60:2c:85:6d:4e:52:aa:b9:4b:09:e1:d4:79:
60:f0:c1:f2:bf:f0:fd:c8:99:8d:ce:dc:15:09:99:
c4:40:e3:90:08:22:0b:37:b3:1e:91:ab:e9:b6:ae:
81:7d:42:1f:f4:c4:61:bf:1d:a7:50:bf:09:33:98:
20:8b:1d:35:b5:49:68:30:a1:77:25:97:ba:fd:74:
b8:71:f5:78:31:f8:fa:5a:40:6c:98:3f:91:db:fa:
2e:5c:36:f8:f0:ca:7a:44:99:05:3d:12:d1:82:22:
5d:3d:64:bb:ec:67:eb:76:f3:af:23:06:7a:4b:1b:
65:0d:71:ee:82:08:1e:b1:30:6a:f5:c4:4d:7e:4b:
10:a3:69:a6:5c:b2:29:72:2e:5a:b8:b7:82:6c:d7:
8f:91:63:87:6e:07:87:a5:6a:7d:ff:59:65:0e:0c:
13:d2:ba:6e:11:cb:42:8b:aa:75:56:9f:09:9b:2a:
3f:7c:d6:3a:fe:c1:2d:39:f0:3f:8a:de:1c:2c:d7:
39:86:69:b1:35:79:76:09:f7:fd:30:f4:30:9f:31:
49:31:45:94:50:2b:75:be:22:e6:51:09:fa:4e:53:
45:74:e3:3e:66:ad:46:fb:7c:62:34:29:38:69:ca:
d1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:18:79:89:22:96:72:C2:B1:29:F8:82:A6:F6:61:17:8F:C6:22:8A
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e39302e302f32342d3234203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.90.0/24
Signature Algorithm: sha256WithRSAEncryption
26:ee:9f:9a:34:90:55:f7:34:76:09:c7:a3:43:71:f4:c1:a9:
90:c1:39:88:ae:be:73:e8:f1:d1:4a:f4:fe:f6:16:b6:ca:d2:
46:c7:2e:93:c6:cd:5d:6e:f1:3f:10:18:6c:f5:4f:bc:8a:44:
42:de:64:44:a3:03:23:c5:6d:55:e3:1f:76:63:51:75:68:34:
36:3a:99:60:29:df:9a:b2:1e:7b:6f:53:d6:a4:56:28:14:96:
7e:0a:ba:ed:39:ab:36:7b:63:00:61:ea:73:68:c3:f1:a8:fa:
74:b6:c3:6f:7c:34:77:95:50:d1:58:e9:9c:07:46:2e:37:0d:
28:63:ee:df:24:29:cc:f4:b9:88:84:d5:db:9d:fe:86:b1:b2:
ea:81:e6:e9:62:e1:8f:94:b4:3e:06:dd:62:e2:c7:c0:97:d9:
13:2e:6a:d4:d7:8c:95:c7:15:51:47:ff:69:7e:ae:c7:52:f7:
ef:44:fe:ba:52:9b:04:e1:6a:c9:7e:53:d9:a1:ba:35:07:b5:
30:7f:06:93:7d:3e:6a:c7:15:e6:0b:95:a6:aa:b8:d5:c6:3e:
41:09:59:71:ec:9f:d8:96:00:d2:18:11:85:3c:c9:89:ad:30:
cb:9c:01:4f:5c:da:20:ef:76:f7:5a:63:32:49:23:40:a7:5c:
f1:87:a1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 14:29:32 2024 by rpki-client on console-ams.rpki-client.org