Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS3320.roa
File: AS3320.roa (raw, json)
Hash identifier: AJrm71LxBrlbKP2lOTNjrWpj/5ldop4TSgbdxEBcD4Q=
Subject key identifier: 1D:EB:BB:CF:6C:52:45:52:CE:15:6C:6B:41:D0:11:5D:B8:A1:03:70
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 43641ABA2EF07543AE80349C651F7FAA0C1E8133
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS3320.roa
Signing time: Sun 07 Apr 2024 14:04:57 +0000
ROA not before: Sun 07 Apr 2024 13:59:57 +0000
ROA not after: Sun 06 Apr 2025 14:04:57 +0000
asID: 3320
IP address blocks: 140.233.192.0/18 maxlen: 24
140.233.192.0/24 maxlen: 24
147.79.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 19:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:64:1a:ba:2e:f0:75:43:ae:80:34:9c:65:1f:7f:aa:0c:1e:81:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Apr 7 13:59:57 2024 GMT
Not After : Apr 6 14:04:57 2025 GMT
Subject: CN=1DEBBBCF6C524552CE156C6B41D0115DB8A10370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7f:9b:37:64:21:9a:cf:46:1d:c3:c4:0f:1b:
f6:cc:bc:02:6a:4c:35:f7:b2:a0:89:fe:94:82:e4:
a1:15:98:1b:57:bb:64:30:b2:4e:59:d2:77:cf:4f:
ca:a7:a1:b9:3e:0b:69:fe:c9:87:35:a2:f4:69:65:
35:40:bd:36:e5:cd:b7:7b:ac:3e:1d:26:24:df:fa:
7a:b2:61:ba:8d:81:12:69:ad:11:95:1a:bf:a0:34:
54:d7:75:f9:8b:36:ae:0e:c7:76:b4:94:44:d3:38:
64:5a:62:84:af:c1:2c:3f:2e:07:fa:52:ef:8e:07:
24:f0:e3:4a:d8:81:91:61:3d:e1:2c:95:68:84:c8:
01:45:c9:9b:f0:1c:af:b7:2c:f8:58:92:dc:64:d1:
bd:4f:e5:ca:f9:c6:68:ba:be:df:d4:88:3d:92:ac:
10:64:2b:ef:3f:47:39:8f:ce:68:a8:aa:1c:96:f6:
69:b4:86:64:24:f8:7b:1b:2d:32:d4:51:9f:4b:57:
aa:92:a7:92:b2:02:18:2f:00:fc:18:d3:b8:7c:1b:
0f:d3:e1:f8:cb:f2:e3:97:d2:76:df:b8:84:eb:4a:
a2:57:cc:83:4a:60:8c:37:ee:79:0c:f4:d3:28:88:
76:39:ce:cf:78:7c:f0:0d:aa:3a:0a:ee:af:a1:fa:
96:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EB:BB:CF:6C:52:45:52:CE:15:6C:6B:41:D0:11:5D:B8:A1:03:70
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS3320.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.192.0/18
147.79.8.0/21
Signature Algorithm: sha256WithRSAEncryption
0e:6a:e8:1f:ca:01:d8:cd:ac:3f:38:19:28:80:c3:07:01:fd:
9b:73:27:bf:2d:eb:30:6d:c0:c4:88:bb:e3:b0:8a:32:5b:7a:
90:25:ad:29:72:3d:c1:86:cb:a6:27:73:68:8d:47:e1:d2:f8:
bb:36:45:5c:f7:58:b0:d5:ae:28:05:7a:e4:57:d4:83:ed:07:
ce:d9:11:bc:4d:57:b7:c6:b8:4c:c3:f2:0c:9a:f8:ae:ab:c0:
b3:7b:5d:8a:f6:2f:9f:37:ef:75:b0:3f:50:0b:cd:d6:b1:0f:
95:7e:a5:45:7c:48:89:53:3e:0b:e3:a6:e2:b6:3b:1e:e6:c0:
81:a9:52:c8:47:43:e6:94:2d:3c:70:84:e2:7b:95:8a:e4:7c:
4a:6e:f6:15:e0:64:91:4d:23:1e:ab:de:40:4d:c2:df:97:11:
ff:bc:a3:11:87:4a:b2:25:4a:56:f2:e4:76:64:f8:d3:fb:71:
dd:bc:1f:6a:32:73:d7:59:e9:d3:c4:ab:72:a8:9c:46:55:a8:
a5:eb:74:30:0c:e1:f9:29:ef:02:f8:2b:2a:12:7c:a0:6e:d5:
1e:d0:8d:3e:10:15:e8:8c:45:ff:60:d3:a8:bc:3f:2c:10:29:
26:c6:8b:ff:2b:80:01:b2:c0:20:b7:1a:aa:8d:09:bc:93:28:
22:30:b1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 22:57:34 2024 by rpki-client on console-fra.rpki-client.org