Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/3134362e3234372e35312e302f32342d3234203d3e203234383531.roa
File: 3134362e3234372e35312e302f32342d3234203d3e203234383531.roa (raw, json)
Hash identifier: rDaGUw0Popa9qa2o5QlR9ngDX48Qz9ALnW+Nclcvn6o=
Subject key identifier: 1D:42:4D:5B:43:3A:CC:FD:16:90:B1:F6:39:51:94:31:9C:29:14:73
Certificate issuer: /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Certificate serial: 7BA488B3D02CFA226F3F42F501DD08A04E88500D
Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/3134362e3234372e35312e302f32342d3234203d3e203234383531.roa
Signing time: Mon 25 Dec 2023 12:05:08 +0000
ROA not before: Mon 25 Dec 2023 12:00:08 +0000
ROA not after: Mon 23 Dec 2024 12:05:08 +0000
asID: 24851
IP address blocks: 146.247.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:a4:88:b3:d0:2c:fa:22:6f:3f:42:f5:01:dd:08:a0:4e:88:50:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Validity
Not Before: Dec 25 12:00:08 2023 GMT
Not After : Dec 23 12:05:08 2024 GMT
Subject: CN=1D424D5B433ACCFD1690B1F6395194319C291473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:75:3b:81:d0:3c:a0:b7:8b:33:fe:ea:05:2e:
23:5a:7c:ca:16:b0:07:a8:05:d4:25:1b:88:f9:7d:
ce:51:16:69:01:24:f1:bf:23:96:b4:e0:21:38:58:
3c:9c:30:08:01:7e:4b:1a:e1:93:42:71:a9:89:a1:
92:0b:1d:a1:25:38:a7:61:34:a4:52:4c:f7:49:b5:
b9:31:16:18:8d:14:ef:29:36:e4:1c:2e:5c:d2:b9:
bc:6f:12:17:b2:33:ce:a0:a4:62:ad:08:df:5e:e4:
d0:5a:28:9a:5f:71:4d:f1:16:29:29:09:17:c6:d0:
ae:f8:36:d3:79:21:a4:00:aa:9b:1a:b3:91:bf:23:
c5:66:2f:17:b4:6b:4f:b8:7c:64:da:26:2a:38:84:
94:53:71:19:5a:9f:35:4f:81:6d:ad:f6:fb:81:ae:
38:bc:4e:ea:ce:cc:2c:9a:15:99:f3:0a:40:dc:8b:
29:b4:a2:2b:dc:4f:64:1a:61:d1:0e:1c:13:82:63:
c9:67:33:c8:32:ab:7f:ad:0f:9b:27:c0:dd:b3:68:
fe:df:b0:66:1c:51:e2:cc:bd:fe:02:85:b6:ac:2a:
42:66:12:a3:37:93:0b:ad:67:69:bf:d5:75:73:cb:
48:05:0f:32:83:89:c6:fa:74:61:84:37:5c:1b:73:
f0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:42:4D:5B:43:3A:CC:FD:16:90:B1:F6:39:51:94:31:9C:29:14:73
X509v3 Authority Key Identifier:
keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/3134362e3234372e35312e302f32342d3234203d3e203234383531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.51.0/24
Signature Algorithm: sha256WithRSAEncryption
71:d6:10:1e:5a:14:33:d8:7d:e8:2b:8e:5e:32:15:a0:6d:00:
29:1f:61:63:1f:57:85:4f:00:53:ab:f5:62:85:5c:b6:57:cb:
53:57:86:d9:02:92:cc:d2:dd:87:0b:1d:68:8f:1f:f4:85:92:
68:24:fd:24:3e:d9:b4:75:42:30:9b:44:b0:1e:c6:e9:5c:0b:
0c:28:35:27:e5:e9:c5:28:0b:ca:f7:71:ad:2a:58:ab:fd:30:
c5:52:f9:17:33:47:1e:c0:78:81:36:a8:e5:e7:0d:1d:c0:ec:
fe:ce:d3:f8:b4:7b:16:1f:15:cb:fe:26:09:85:7e:8b:9a:c2:
10:01:d8:22:43:3c:b9:7c:b4:e1:88:a5:c1:a1:39:7c:25:a2:
b5:1e:c3:bb:96:2a:4d:c5:6f:33:79:7b:f4:1e:32:5d:4e:cf:
a8:26:1c:b8:69:35:a6:5a:43:0a:22:3d:6d:ed:4c:f4:3e:d2:
0b:db:ed:88:6a:5e:af:24:eb:1f:1f:88:4e:24:bb:05:b9:d9:
71:10:50:5b:f9:bf:c7:d3:03:aa:c7:f3:bb:5c:a2:2a:af:38:
60:0c:76:ad:5a:c3:b9:0b:ec:00:2a:1b:28:44:bb:d5:25:af:
24:8c:69:48:3c:ff:d3:8c:4f:2c:29:42:6f:8b:42:05:a4:3f:
1e:c6:a3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:14:19 2024 by rpki-client on console-ams.rpki-client.org