Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137322e302f32342d3234203d3e203631333137.roa
File: 34352e38372e3137322e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: UBsrkmdCE4RFWwAjM2TgbeYh551P118/yXqO6ZM4xxU=
Subject key identifier: C5:9F:9A:4E:B3:12:94:95:96:DA:D7:06:97:E4:32:D1:50:01:7A:A6
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 1232777DD986D85E28CADBF9ACE7B48584FAC3A4
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137322e302f32342d3234203d3e203631333137.roa
Signing time: Sat 12 Aug 2023 05:01:37 +0000
ROA not before: Sat 12 Aug 2023 04:56:37 +0000
ROA not after: Sat 10 Aug 2024 05:01:37 +0000
asID: 61317
IP address blocks: 45.87.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 14:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:32:77:7d:d9:86:d8:5e:28:ca:db:f9:ac:e7:b4:85:84:fa:c3:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Aug 12 04:56:37 2023 GMT
Not After : Aug 10 05:01:37 2024 GMT
Subject: CN=C59F9A4EB312949596DAD70697E432D150017AA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9e:b1:02:ba:8d:50:f1:06:95:93:29:13:0a:
14:8f:80:29:84:1e:f7:bd:18:9b:25:06:c3:be:3a:
99:36:1f:f5:ac:de:1a:e4:e8:a5:c3:c0:ac:6a:1f:
60:4d:d5:74:18:c4:12:ed:d1:6a:55:73:65:e6:50:
0e:2f:ad:55:03:d9:4d:c4:50:9c:34:4d:c7:c6:b4:
75:7e:8d:c1:a5:4d:79:12:a2:48:10:fa:2e:4d:cf:
a7:c9:b8:78:a7:ee:05:64:65:9e:d7:ee:37:cf:08:
f0:3c:69:1d:04:98:5d:6f:09:9c:06:82:05:e3:f0:
8e:07:3a:24:ca:bc:c5:32:04:04:44:e2:8e:f9:38:
d0:8e:bc:2c:06:87:ce:8a:91:20:06:7f:78:f5:d5:
81:38:76:c6:e8:75:6a:c3:ee:ba:50:a7:d5:42:c1:
a8:0f:80:a9:e1:d2:fd:c9:fd:12:2a:c1:55:d8:7f:
72:00:c1:f9:10:3c:93:7f:a3:09:c1:87:d1:38:28:
da:f3:0e:a3:69:b4:04:91:a6:f3:6c:e4:24:fc:f7:
f5:ad:b3:84:ec:ed:c6:ab:27:fd:47:1b:80:79:fa:
f5:40:00:1a:e9:6a:51:26:da:75:e0:9a:9e:0a:87:
a1:95:b2:58:aa:29:07:06:fe:10:e0:a7:4d:b7:93:
99:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9F:9A:4E:B3:12:94:95:96:DA:D7:06:97:E4:32:D1:50:01:7A:A6
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137322e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.172.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:7f:70:a0:08:a6:12:c7:1c:69:fd:f8:da:52:0a:1e:bb:45:
f0:c8:b2:c5:06:e5:63:c7:14:51:50:29:ab:42:11:81:98:f3:
29:2d:c3:fb:7d:00:fb:06:46:75:7f:0c:24:b7:98:92:57:5f:
2a:c0:8f:a6:9a:13:b4:38:1c:84:7a:e1:a5:1d:9f:70:eb:d8:
72:5a:99:e5:11:7e:c9:c4:b2:4d:23:b9:68:dc:50:eb:ab:23:
ff:f5:c1:bb:7b:5c:a7:42:ee:58:19:33:db:79:4f:fc:d6:0b:
7e:41:93:a3:64:0b:68:26:b8:f6:e7:55:cc:3f:7c:ec:0c:d6:
10:5d:85:f7:1f:5d:03:8b:85:66:7d:7b:b4:ff:8c:c4:6b:25:
54:57:27:84:74:25:c5:01:77:5c:ff:20:b0:11:18:80:0d:93:
d6:d4:75:b9:56:02:02:13:f3:7c:29:2a:e6:75:a9:25:af:15:
56:36:ab:18:6f:db:bb:16:c4:72:0f:ea:a1:1e:4e:73:22:b7:
ee:52:55:0f:b8:6b:29:fa:20:fa:c2:bd:70:c3:be:c3:dc:c0:
57:42:da:96:55:3c:3f:60:3e:fa:b7:96:21:b5:36:58:44:44:
bd:6c:e9:f5:76:88:dd:50:72:56:5e:1f:f6:44:59:fb:c5:cf:
42:64:65:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 22:27:46 2024 by rpki-client on console-ams.rpki-client.org