Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/3134362e3234372e34382e302f32332d3233203d3e203234383531.roa
File: 3134362e3234372e34382e302f32332d3233203d3e203234383531.roa (raw, json)
Hash identifier: IWYt8AKAcW7AE40ptYfrfOYzrzsDvIsMxkpQ2qH53R4=
Subject key identifier: 3A:A6:C1:6A:E5:BC:E5:2D:51:E3:4E:7F:31:1F:F1:75:CD:6A:5B:07
Certificate issuer: /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Certificate serial: 6BE2A63E935904E6014D92A1572D5D1879F5C438
Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/3134362e3234372e34382e302f32332d3233203d3e203234383531.roa
Signing time: Mon 25 Dec 2023 12:05:08 +0000
ROA not before: Mon 25 Dec 2023 12:00:08 +0000
ROA not after: Mon 23 Dec 2024 12:05:08 +0000
asID: 24851
IP address blocks: 146.247.48.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:e2:a6:3e:93:59:04:e6:01:4d:92:a1:57:2d:5d:18:79:f5:c4:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Validity
Not Before: Dec 25 12:00:08 2023 GMT
Not After : Dec 23 12:05:08 2024 GMT
Subject: CN=3AA6C16AE5BCE52D51E34E7F311FF175CD6A5B07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:81:15:3d:f5:13:71:fc:be:3f:bb:8f:4e:9a:
9e:cb:b2:2f:0a:33:55:97:50:61:7c:a8:b5:51:f8:
ff:19:9e:a3:cd:de:45:16:90:52:df:eb:83:13:10:
81:d7:f1:64:bc:af:7b:8a:d3:15:05:10:fa:18:f8:
d5:03:e4:8a:91:75:01:56:d0:cb:cd:12:d9:2e:c7:
47:30:e1:d2:55:f5:9e:8a:e7:c5:34:73:b8:23:22:
4f:3c:d0:93:f9:ab:6c:da:3c:6f:f3:fa:06:0f:78:
f8:5b:ad:5b:ad:c5:98:59:87:e2:e4:b5:d4:a6:45:
d5:1b:b7:12:60:1e:13:fa:a1:17:47:e7:fb:6b:2d:
59:c1:2c:dd:dc:12:ef:cb:02:d9:67:28:b6:08:e5:
cd:78:da:88:d9:e5:2c:ff:f1:3d:15:94:21:08:8e:
71:d4:27:d5:06:a3:81:8b:ea:f8:2e:85:5c:69:e9:
6e:a1:f5:2e:c4:b9:29:fa:2f:e8:a0:e7:65:69:f3:
ec:47:55:17:b2:6d:06:39:9d:81:21:17:48:23:5b:
03:88:51:62:74:94:ab:d7:5f:ef:35:07:42:a2:56:
03:73:a1:1a:87:32:18:ac:be:5a:d2:c2:b2:89:c2:
0d:7c:d9:66:9c:3f:49:78:5f:a4:63:16:4a:68:95:
ce:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A6:C1:6A:E5:BC:E5:2D:51:E3:4E:7F:31:1F:F1:75:CD:6A:5B:07
X509v3 Authority Key Identifier:
keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/3134362e3234372e34382e302f32332d3233203d3e203234383531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.48.0/23
Signature Algorithm: sha256WithRSAEncryption
66:da:dc:50:11:6d:f9:72:fa:b5:9e:52:66:67:45:70:f1:17:
eb:92:16:37:25:a3:37:d7:94:23:cb:5a:0a:16:e1:75:3b:13:
36:53:87:af:39:f3:55:4b:fe:8a:d1:9d:66:1e:f0:93:30:64:
02:35:37:fb:e3:99:64:52:15:ec:e5:bf:6e:0a:18:82:f0:f9:
16:bf:95:f2:12:6d:65:da:8a:ba:01:ab:50:73:3b:c8:57:38:
d6:fc:2c:97:77:be:15:94:cd:0e:eb:d4:4d:e3:a9:10:22:8d:
9b:e7:67:5d:6f:0c:01:0b:9d:ec:bf:87:56:5c:fd:48:d9:0a:
13:c3:b5:31:99:d8:81:50:4d:36:ea:3d:08:83:7b:97:7d:86:
6b:9c:2c:f5:28:10:a6:ad:f2:74:d2:6c:24:d5:32:2d:66:e0:
88:ba:c0:1e:fe:a9:5d:34:44:80:7f:d4:37:bf:da:8d:9a:bf:
41:ae:a6:a6:59:20:d5:49:d3:03:fd:d9:79:ec:42:58:56:a7:
9c:3a:1a:a9:83:8e:07:56:cd:1a:79:d4:0b:70:f2:12:17:f4:
9b:61:67:16:fb:78:d4:4f:3f:ce:4c:82:21:15:94:dc:16:50:
d7:7c:3b:06:c5:95:e9:2d:24:de:73:e5:e6:3c:19:c9:54:5d:
8a:60:fb:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 00:06:58 2024 by rpki-client on console-fra.rpki-client.org