Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138382e302f32342d3234203d3e203239383032.roa
File: 3130392e3131302e3138382e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier: eP8xud3vAXP19XvwgdkvqPaooeQ4WYaRJ7h7fVQ/Y9E=
Subject key identifier: C2:BC:25:6E:24:8A:41:D5:B0:19:08:80:DE:5E:BF:A1:DF:DE:B6:54
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 2C655EC8EBC1A5ED31439395C2C20CAB1DD80681
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138382e302f32342d3234203d3e203239383032.roa
Signing time: Wed 03 Apr 2024 17:16:14 +0000
ROA not before: Wed 03 Apr 2024 17:11:14 +0000
ROA not after: Wed 02 Apr 2025 17:16:14 +0000
asID: 29802
IP address blocks: 109.110.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Apr 2024 23:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:65:5e:c8:eb:c1:a5:ed:31:43:93:95:c2:c2:0c:ab:1d:d8:06:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Apr 3 17:11:14 2024 GMT
Not After : Apr 2 17:16:14 2025 GMT
Subject: CN=C2BC256E248A41D5B0190880DE5EBFA1DFDEB654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8f:7d:8d:b1:d9:c8:00:eb:aa:53:a9:dd:82:
1a:ef:74:ed:04:5c:8e:8a:59:cd:86:83:f6:35:58:
5b:1d:71:dc:b8:76:e9:1d:00:02:fa:c2:a2:7e:06:
63:f0:ed:db:f3:60:38:8e:57:05:b7:0c:2a:48:02:
d6:07:27:1a:52:6d:69:33:5a:d2:ef:5c:7b:2d:68:
c6:8d:a2:2b:35:0b:f6:a9:f3:38:3c:01:27:27:97:
d0:19:8b:17:b3:77:5b:24:4d:f1:f5:1e:cc:a4:dc:
47:70:c0:c2:ab:c4:78:7f:cc:11:47:f8:4e:d1:7d:
5b:d4:4e:99:29:a1:45:c7:c4:cb:a6:5e:ed:21:2d:
fe:c5:7e:82:7a:1d:2e:68:2d:13:8b:48:44:54:85:
78:90:a6:9b:cc:bc:64:d8:92:d7:08:c4:1f:fd:82:
15:f4:58:2f:f3:a4:d4:07:20:23:14:f0:30:d5:2c:
3a:68:30:34:16:3d:d9:53:4e:ee:de:29:bc:10:27:
56:7d:7a:91:c7:dc:03:d7:ea:b9:89:f5:9b:73:83:
09:9c:84:48:81:9b:26:f3:53:76:b3:d0:e8:3a:dc:
91:db:52:2a:45:84:e6:7e:0b:b1:65:56:12:0b:69:
76:f1:89:51:f3:bc:ad:fd:27:a7:d6:4b:7d:d7:81:
6b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BC:25:6E:24:8A:41:D5:B0:19:08:80:DE:5E:BF:A1:DF:DE:B6:54
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138382e302f32342d3234203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.188.0/24
Signature Algorithm: sha256WithRSAEncryption
02:b5:b3:99:b8:8c:6e:ec:be:75:a6:8d:0b:59:bf:c9:ba:3f:
41:70:b2:1c:ef:83:78:47:06:6d:2c:c0:64:fc:e0:6a:90:97:
2a:d1:a3:78:aa:e2:24:7e:fa:43:09:09:fc:d8:12:e7:37:43:
84:90:03:c5:e2:40:b6:bf:1f:e7:5b:b8:fc:18:57:88:eb:22:
5b:59:16:97:dc:6f:52:3a:77:63:01:89:35:24:15:d5:52:32:
be:b0:3b:70:c7:cb:24:b0:63:3c:eb:03:d7:29:af:de:f9:73:
e3:a6:4c:41:b4:f8:2a:f8:56:16:8a:cc:70:eb:d4:93:5c:90:
02:70:84:15:fa:d6:20:1b:b6:f3:ac:61:1d:b4:50:c4:54:2c:
d7:fc:43:ee:90:bd:88:66:ae:84:5a:77:b1:a2:55:45:bf:9a:
fd:94:95:63:3e:81:8a:e4:cc:f0:e0:bc:10:90:11:1d:6d:8c:
ff:94:46:7d:e1:20:98:bb:c7:85:87:3e:77:76:93:70:cb:1a:
e3:dc:09:e0:63:e9:ee:d4:db:a6:46:62:dc:0e:bc:8b:97:80:
35:a7:19:8e:cc:35:5e:e8:5b:e3:44:41:ee:32:16:c4:15:d6:
cb:f8:3f:76:00:7a:51:2c:08:d2:bb:6e:06:92:82:de:0f:8a:
a8:1c:1e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 06:55:50 2024 by rpki-client on console-fra.rpki-client.org