Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3138322e33352e302f32342d3234203d3e20383334.roa
File: 352e3138322e33352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: OO1sfXpxQWzhpLoBAMy5YwLLu8x5CALZXBiNbBkt+sg=
Subject key identifier: E1:4E:F6:24:CC:BA:1E:F1:ED:2E:45:B2:64:E3:67:2B:18:F7:1B:30
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 1789C496D18C31D4279297335AC1B84D4B5A1838
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3138322e33352e302f32342d3234203d3e20383334.roa
Signing time: Wed 23 Aug 2023 15:23:13 +0000
ROA not before: Wed 23 Aug 2023 15:18:13 +0000
ROA not after: Wed 21 Aug 2024 15:23:13 +0000
asID: 834
IP address blocks: 5.182.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:89:c4:96:d1:8c:31:d4:27:92:97:33:5a:c1:b8:4d:4b:5a:18:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Aug 23 15:18:13 2023 GMT
Not After : Aug 21 15:23:13 2024 GMT
Subject: CN=E14EF624CCBA1EF1ED2E45B264E3672B18F71B30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cd:86:b3:b9:a5:d8:a2:3d:d5:0e:f4:c0:a9:
b2:32:c8:5b:e8:9e:3b:bc:26:d7:96:65:d7:b9:67:
59:67:d9:64:84:72:45:21:4e:bd:db:72:3e:56:05:
94:85:04:ab:9d:85:cb:6d:71:79:81:69:52:67:22:
56:a3:e9:b4:7b:f0:bf:5e:f7:71:b9:34:bd:a5:17:
60:b7:6d:a8:71:60:fd:39:dc:27:8b:ce:8c:45:8d:
c4:13:fa:2a:dd:2f:d8:e6:af:af:15:b8:2a:12:15:
3f:60:d4:39:2a:c8:28:57:52:eb:b0:3b:52:26:87:
d9:3b:f0:58:12:63:c1:95:66:55:6a:c8:fc:64:11:
e7:af:b3:a9:04:1d:04:42:c7:61:89:2e:5a:85:b1:
21:e7:4a:94:92:4a:17:a8:3b:8f:f6:95:5b:44:f8:
73:00:08:dc:7f:14:28:7e:82:2b:cd:ec:3f:a3:49:
96:93:cc:c1:0c:f7:3d:5c:b1:85:dd:b5:e2:bb:0a:
d1:a2:77:8c:1b:a2:c4:da:50:14:f1:2f:4d:a7:e3:
02:b8:f3:20:bd:3f:e0:8e:8e:ce:64:31:a4:b2:26:
7d:b1:bd:7d:ad:95:3a:35:7e:15:15:63:dd:0a:bb:
67:11:3f:f8:a8:ee:24:e1:8b:20:51:80:3c:b6:31:
00:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:4E:F6:24:CC:BA:1E:F1:ED:2E:45:B2:64:E3:67:2B:18:F7:1B:30
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3138322e33352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.35.0/24
Signature Algorithm: sha256WithRSAEncryption
51:55:3f:e2:15:cc:8e:5e:c1:d4:d0:13:74:fc:f0:16:4d:7c:
15:37:e1:05:aa:91:f5:77:fc:31:c9:ad:82:0e:5c:e5:9c:b9:
b4:f0:16:c4:84:b5:bf:e0:bb:7a:53:0f:d8:81:d7:15:e1:93:
e7:3a:b7:1e:26:78:9d:ec:58:ec:0d:ab:de:5b:0c:a1:60:9d:
0b:88:c7:5b:54:87:55:99:16:ce:d8:c1:f7:fe:e5:0b:cd:7d:
48:5d:40:02:c8:76:f9:f8:22:06:06:8d:9b:9a:ac:e3:6d:a1:
c8:a1:94:fd:d0:76:93:a5:6a:4f:c4:13:b0:77:82:d4:da:03:
21:98:a4:cb:5b:b6:d2:2a:5f:a1:cb:e6:2d:f0:cd:43:43:e2:
0f:f8:ac:59:de:c0:f5:3e:22:ad:fc:8e:17:5c:35:74:7d:f8:
60:89:b1:bd:02:72:2f:60:01:94:3c:d4:c9:b2:f4:a6:ec:ba:
f0:18:26:29:97:af:27:55:32:0b:2b:09:0b:7c:a0:31:e8:00:
0e:88:6d:e9:28:65:f0:7a:9c:2a:f1:f7:de:1b:0a:52:19:b7:
c3:9c:2d:94:92:e0:4d:ea:66:6f:31:f4:8d:21:e2:54:4d:a0:
26:6c:19:82:b9:e5:ff:e3:31:e9:c2:37:c3:25:0e:6e:48:94:
3e:ba:a9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 10:53:05 2024 by rpki-client on console-fra.rpki-client.org