Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS39753.roa
File: AS39753.roa (raw, json)
Hash identifier: 7SMZyYZqVIp+30WxiuTdkNcLbv2ExjjZKklP1gdlxAU=
Subject key identifier: 51:06:F5:10:8A:B6:2E:D4:62:33:B2:AE:E2:06:A5:66:4D:DB:8B:AE
Certificate issuer: /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial: 4E69B70CDE2F541E068C7FB6BF7E58DE2C21FD3E
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS39753.roa
Signing time: Thu 23 May 2024 16:49:11 +0000
ROA not before: Thu 23 May 2024 16:44:11 +0000
ROA not after: Thu 22 May 2025 16:49:11 +0000
asID: 39753
IP address blocks: 2a0f:85c1:100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.mft
rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:69:b7:0c:de:2f:54:1e:06:8c:7f:b6:bf:7e:58:de:2c:21:fd:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
Validity
Not Before: May 23 16:44:11 2024 GMT
Not After : May 22 16:49:11 2025 GMT
Subject: CN=5106F5108AB62ED46233B2AEE206A5664DDB8BAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:65:56:73:dd:27:86:5b:43:fb:b7:57:64:61:
0e:ad:15:d6:db:8a:88:09:4c:e1:f4:8c:f9:b7:32:
3b:03:aa:8a:c9:80:8a:f0:d9:cf:49:49:c3:cf:e5:
2e:a5:9a:15:4d:6a:32:ac:bb:d3:a6:5d:b2:2e:a6:
88:f2:88:6a:b1:3f:83:e6:75:60:b5:32:f4:49:fb:
f2:77:2b:31:0a:ab:1f:72:f0:ee:f0:81:36:ab:19:
03:3f:54:59:de:0b:52:c6:af:e8:25:0e:64:ec:1e:
5d:55:d3:39:4f:a7:d3:4d:57:dd:e6:08:27:2d:c1:
ad:d8:fc:2d:c8:72:c7:22:53:71:91:d9:1f:2e:40:
c5:c1:d8:53:b8:a4:04:60:c4:4b:4e:89:56:14:3a:
74:54:e1:5f:b8:5f:b5:1a:d1:0b:b5:fe:11:36:fe:
e7:ad:03:7b:25:64:6a:18:06:be:c6:83:5c:b2:f3:
6c:55:8b:fc:9f:8c:94:27:cd:ca:31:65:7a:f1:b0:
c9:bd:63:3b:96:6a:ae:86:12:a8:e4:36:07:a6:79:
30:e8:40:ae:ce:95:44:50:12:08:3b:46:7f:92:b1:
9a:18:66:4c:e8:a2:f4:c9:97:a1:ce:cc:b9:1b:5f:
a2:6a:7d:ca:1e:0b:d5:50:66:d1:01:25:81:20:f6:
3c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:06:F5:10:8A:B6:2E:D4:62:33:B2:AE:E2:06:A5:66:4D:DB:8B:AE
X509v3 Authority Key Identifier:
keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS39753.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:100::/40
Signature Algorithm: sha256WithRSAEncryption
7d:7f:9b:e2:5e:e6:70:3c:b3:40:14:16:8f:a1:f7:f2:ea:85:
6d:d6:9e:43:e1:ea:6f:87:ff:68:36:7c:95:56:e9:fa:30:f7:
9e:f4:a3:4b:3d:c6:42:75:c4:11:d0:c6:3f:ff:99:c9:10:37:
8f:52:c7:d0:f6:ef:a4:32:02:a6:03:d9:d5:24:29:e8:2e:85:
83:81:96:50:3e:63:40:8c:74:29:12:1d:49:83:7f:4b:ea:2d:
c1:22:5a:c5:37:ae:af:f5:d0:7e:cf:0b:2d:20:d1:e5:f9:f0:
d3:63:74:c0:5d:a7:e5:5a:ce:48:8b:64:d8:be:73:4c:39:83:
54:df:3e:bb:da:8c:48:bd:0f:c3:25:d6:20:ab:26:55:8a:a3:
95:8e:25:63:ab:15:2e:40:02:55:4b:d7:79:77:b4:77:88:1d:
78:e2:87:81:31:cf:a9:2e:d3:e9:46:63:39:ae:b0:97:20:82:
54:76:2c:2c:46:77:f8:e4:25:fb:62:1c:b7:08:91:b8:73:64:
ee:ff:40:0f:ce:00:ce:8b:17:59:d5:34:09:34:0e:67:3c:7b:
b0:5f:30:7e:37:97:f2:2b:2c:ec:9b:83:d5:cc:1e:89:f7:25:
ce:d7:c7:3a:85:9b:9c:0d:83:fe:79:82:d1:47:91:03:7a:28:
10:d5:95:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 05:17:46 2024 by rpki-client on console-fra.rpki-client.org