Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/39322e3131382e35362e302f32322d3332203d3e203430303231.roa
File: 39322e3131382e35362e302f32322d3332203d3e203430303231.roa (raw, json)
Hash identifier: c6FrCrX8xW2FJ9y6/H7b2DQB20ADyyzhZXGVkzZG80M=
Subject key identifier: DC:51:C0:78:4A:BC:2E:F1:5F:CA:A6:54:32:9A:AC:A6:83:F9:E2:BA
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 4C1574B539CC79C7417D36C19BADFFB594969F96
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/39322e3131382e35362e302f32322d3332203d3e203430303231.roa
Signing time: Sat 04 May 2024 09:28:57 +0000
ROA not before: Sat 04 May 2024 09:23:57 +0000
ROA not after: Sat 03 May 2025 09:28:57 +0000
asID: 40021
IP address blocks: 92.118.56.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:15:74:b5:39:cc:79:c7:41:7d:36:c1:9b:ad:ff:b5:94:96:9f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: May 4 09:23:57 2024 GMT
Not After : May 3 09:28:57 2025 GMT
Subject: CN=DC51C0784ABC2EF15FCAA654329AACA683F9E2BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:68:5d:e9:03:e9:03:08:56:af:7f:e5:63:7a:
e3:3c:a7:56:1f:51:7a:ab:68:2d:c5:e8:46:aa:1c:
a5:49:b1:16:f8:10:13:31:6e:17:72:e2:d0:ca:53:
95:46:92:a1:54:60:72:28:df:de:a9:57:d3:30:70:
34:c9:6a:f8:a8:6b:2e:af:8f:3e:af:28:ff:87:9e:
7e:27:7d:5a:13:e3:5a:2f:7e:58:7a:e9:2f:c7:0b:
85:ac:3f:d3:8b:d7:d0:9f:29:ad:d1:4f:d2:7f:70:
5e:c2:bb:59:c8:46:31:10:05:97:a2:4c:1e:fc:b4:
8a:b2:2e:79:26:ad:e6:c1:90:f6:86:8e:4c:f6:7a:
77:02:ab:b3:f3:ad:30:7a:92:c8:a9:37:90:fe:28:
d4:b7:d6:b3:b8:02:03:8e:9a:df:7f:57:77:b0:d2:
ad:c3:20:30:de:34:09:df:33:f3:01:79:0c:00:92:
62:43:43:5d:95:3b:bb:03:5e:cf:67:df:e8:1a:92:
19:f6:89:d7:32:98:ea:99:83:4f:fb:2e:df:fc:0b:
d4:ad:c3:83:d1:84:f7:04:66:da:e9:9a:42:d8:8a:
cc:d3:a3:5b:1c:27:cf:fe:f5:23:97:89:79:90:d0:
31:81:c5:86:a2:b6:e9:b0:27:b9:50:a8:26:70:70:
89:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:51:C0:78:4A:BC:2E:F1:5F:CA:A6:54:32:9A:AC:A6:83:F9:E2:BA
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/39322e3131382e35362e302f32322d3332203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.56.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:81:1b:43:dc:1d:d9:6c:0b:4d:8a:11:3b:97:20:34:f7:06:
4f:f7:c5:fc:c8:77:9a:20:46:ed:28:c7:c4:4c:0a:55:ca:86:
2a:c4:c3:a7:b3:a7:fd:ef:4d:38:31:5a:37:6c:ca:c1:41:64:
b3:93:04:b8:31:7c:b3:da:61:a6:8c:a1:fc:08:8b:aa:b8:6b:
84:5e:2c:b4:38:64:5d:65:07:66:bd:73:cf:c5:ec:81:15:7d:
87:b9:4a:09:00:87:c8:9c:50:7f:68:5b:14:c4:76:71:d6:08:
8f:fe:9e:d0:c0:67:a3:fe:9f:85:7b:a2:3a:a0:df:5e:8c:e0:
5b:f5:ba:67:cc:65:c1:1a:45:3f:0b:c2:75:b9:ee:94:d8:e4:
10:92:24:10:2e:7d:9f:53:86:d1:bf:43:3d:5c:a5:be:24:f3:
01:70:95:0d:8f:d6:37:2e:74:6f:97:ec:c9:38:ec:20:a2:4b:
bb:c3:91:55:26:6c:58:02:4b:ef:d9:ae:64:37:6b:dd:e1:eb:
92:f7:57:61:7e:ff:ff:73:fb:ce:e4:85:70:21:73:a7:2b:57:
a0:cf:0e:68:1b:62:8d:0b:a7:f2:69:30:bb:de:e5:7a:d4:3b:
bb:80:1d:6f:9f:3d:a6:bc:b2:63:eb:ca:97:3b:31:85:44:dc:
c3:7a:7e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 07:23:17 2024 by rpki-client on console-ams.rpki-client.org