Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139342e3234322e34382e302f32332d3233203d3e2030.roa
File: 3139342e3234322e34382e302f32332d3233203d3e2030.roa (raw, json)
Hash identifier: 2BbXkKF51NAwgDrOzBVu/d1ccZeXS2RaA5jPoSnR0Bc=
Subject key identifier: 76:20:07:97:3B:C7:1C:F5:D9:79:00:1E:BB:D4:B5:5D:FE:6F:07:85
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 5D080F9E9C8A960AE3223C89A4B5DCB69D50BC9B
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139342e3234322e34382e302f32332d3233203d3e2030.roa
Signing time: Fri 12 Apr 2024 08:49:23 +0000
ROA not before: Fri 12 Apr 2024 08:44:23 +0000
ROA not after: Fri 11 Apr 2025 08:49:23 +0000
asID: 0
IP address blocks: 194.242.48.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:08:0f:9e:9c:8a:96:0a:e3:22:3c:89:a4:b5:dc:b6:9d:50:bc:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Apr 12 08:44:23 2024 GMT
Not After : Apr 11 08:49:23 2025 GMT
Subject: CN=762007973BC71CF5D979001EBBD4B55DFE6F0785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:37:ad:07:6c:69:69:fa:2a:fb:f0:91:c0:09:
a4:3f:0e:89:07:dc:99:0d:91:0c:41:24:69:c5:1f:
64:f6:66:5a:a3:28:cf:d0:74:6d:62:75:c6:8b:3c:
fe:18:dc:d0:d8:01:c7:b8:2a:d5:ae:d1:cd:05:ae:
06:54:f5:c9:d8:7e:ad:f5:db:cb:eb:d9:64:87:a3:
18:5b:61:88:fc:91:79:f5:ef:7b:ec:38:39:1f:f5:
f9:58:66:d9:91:b1:c4:2f:36:53:d6:b9:74:b4:42:
10:80:08:9c:e6:e7:c5:9b:77:c6:ff:1b:a5:0e:90:
45:bf:16:c6:9b:75:b5:75:64:ca:c0:21:c5:ce:16:
2f:97:5d:9d:c6:55:1a:5f:37:f4:47:00:59:57:e5:
6c:08:ed:9b:ea:0e:a7:36:06:8a:43:d1:02:07:21:
06:20:b0:d0:0a:77:1f:78:d4:4f:82:e9:1b:a5:4f:
c8:62:27:51:2f:b4:96:aa:1a:88:2f:c9:1c:b2:70:
60:41:ba:39:51:ea:cb:eb:dd:77:da:70:f5:3f:4d:
dc:b1:a1:6a:fa:35:e3:0e:8c:72:38:9b:06:fc:a3:
0c:8d:64:ff:69:eb:e2:50:85:75:5d:bb:54:f5:20:
07:69:c4:04:a8:c3:cb:1e:22:ff:e8:39:cb:ed:43:
1f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:20:07:97:3B:C7:1C:F5:D9:79:00:1E:BB:D4:B5:5D:FE:6F:07:85
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139342e3234322e34382e302f32332d3233203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.242.48.0/23
Signature Algorithm: sha256WithRSAEncryption
71:6e:c2:33:ee:d7:7f:2f:b6:a3:a7:00:8a:bb:ed:c0:e4:cb:
13:3b:78:d3:a9:08:3c:70:41:48:d5:82:4e:6a:cb:01:43:3f:
09:5c:89:53:56:85:69:cd:f4:b6:e5:0b:cc:ff:78:18:24:7e:
95:5f:64:a5:2a:f5:78:ee:0f:5a:c9:a3:ba:5a:15:a8:ef:9b:
ae:0e:48:0d:61:c3:1e:d0:30:62:ad:52:01:1e:3b:ad:06:e0:
de:2a:0d:d4:65:a3:b1:6c:9a:ea:4f:53:54:11:2c:01:34:18:
8a:bf:18:87:cf:30:5f:3d:a9:6a:ae:2f:cf:eb:5c:1f:ff:13:
35:5a:64:85:d4:c7:78:ba:75:df:20:a6:7d:ce:a8:87:a0:64:
8c:a8:76:5e:8d:e5:0a:a4:77:0c:0d:2e:ea:81:7b:da:25:0d:
69:10:c9:3e:95:1a:b3:3a:87:6c:eb:01:92:0b:f8:dc:16:56:
dd:73:92:68:e5:4f:f6:62:e6:59:2b:7d:1d:f7:66:02:76:6a:
80:97:4b:91:b3:bb:f0:59:83:ed:e6:27:62:da:ae:24:19:d8:
48:44:2f:89:c8:61:2d:51:a4:15:05:c5:92:32:60:56:68:e9:
a5:36:9d:86:e0:db:09:e5:1a:04:4f:d5:b8:1e:e8:e3:78:43:
76:1c:48:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 09:50:13 2024 by rpki-client on console-fra.rpki-client.org