Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3134362e31392e33382e302f32342d3234203d3e20313939363534.roa
File: 3134362e31392e33382e302f32342d3234203d3e20313939363534.roa (raw, json)
Hash identifier: tMu2dDNgxRe+VDjoQWDh2D5B14b9X3sh+JRsGfPn8q4=
Subject key identifier: 9C:56:A3:33:D3:B8:90:A6:C8:70:B8:D1:25:9D:AF:99:6A:8F:8B:43
Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Certificate serial: 5897C1A7CBAB0C4B9F954307AF96BB426BC1A54A
Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3134362e31392e33382e302f32342d3234203d3e20313939363534.roa
Signing time: Sat 23 Nov 2024 18:31:22 +0000
ROA not before: Sat 23 Nov 2024 18:26:22 +0000
ROA not after: Sat 22 Nov 2025 18:31:22 +0000
asID: 199654
IP address blocks: 146.19.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:97:c1:a7:cb:ab:0c:4b:9f:95:43:07:af:96:bb:42:6b:c1:a5:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6
Validity
Not Before: Nov 23 18:26:22 2024 GMT
Not After : Nov 22 18:31:22 2025 GMT
Subject: CN=9C56A333D3B890A6C870B8D1259DAF996A8F8B43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a0:4c:39:66:07:6a:2c:6a:8d:69:e8:34:bd:
d1:a3:d6:de:d1:69:49:08:5a:80:e6:0f:87:4c:68:
9e:22:db:e7:24:49:f4:f7:16:70:33:e8:15:cf:04:
ef:ce:52:20:73:1d:71:70:1c:9e:58:74:11:88:4f:
3d:61:10:2b:d9:d7:ae:e4:0f:65:27:e9:a4:a2:c9:
64:76:d1:29:2c:b9:d1:b6:68:d3:a2:7c:88:c1:04:
00:a2:3f:53:e2:97:f2:50:6f:5f:8c:e7:4d:f4:6c:
9d:a2:45:79:48:97:5f:74:88:4a:9d:41:cf:34:44:
0a:7e:59:3c:68:fb:05:06:5b:0d:6e:34:63:79:15:
4a:92:d5:31:12:47:36:2e:28:08:88:51:e3:90:40:
24:3a:47:34:ac:df:f6:95:ee:4f:83:b1:5f:39:70:
8d:6b:d8:4f:1c:69:fe:e3:c8:d7:31:6d:e4:5a:e5:
f2:ba:f5:a7:53:e9:2a:9c:52:18:35:18:73:db:c9:
b1:97:95:89:b6:87:87:37:32:ca:69:b9:b1:07:87:
f5:78:ed:99:5d:36:fd:c7:49:7e:b5:ae:d5:47:e3:
3b:4a:5c:03:0f:87:92:fa:b3:87:c6:db:c8:bf:50:
08:23:ee:ef:12:be:d1:5e:99:27:5b:1b:6b:29:b5:
32:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:56:A3:33:D3:B8:90:A6:C8:70:B8:D1:25:9D:AF:99:6A:8F:8B:43
X509v3 Authority Key Identifier:
keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/3134362e31392e33382e302f32342d3234203d3e20313939363534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.38.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:a3:d5:a1:29:1b:42:ae:bd:08:b5:80:fa:eb:a3:c4:08:af:
59:f7:0c:f6:4e:e0:58:ec:62:74:34:91:58:39:ff:3b:75:e7:
fb:b7:d6:3e:44:da:1f:a5:b2:68:51:20:40:da:1f:1c:c5:60:
73:f6:d9:12:64:33:11:8f:80:21:ca:da:0c:85:3b:f4:14:e5:
8b:fa:04:3b:b1:39:86:28:7d:39:c4:05:63:97:44:eb:92:25:
30:19:45:6a:6f:97:6f:24:68:60:7f:c7:31:26:d6:6b:27:4b:
80:51:12:fd:80:16:68:d8:dd:a8:ea:2f:60:1e:53:07:33:ab:
9b:d3:a3:92:33:25:9b:c4:21:10:10:38:49:7d:21:5c:48:4d:
c1:14:95:7e:ff:78:c1:45:df:7c:b8:e9:bd:2e:05:27:d2:ea:
7b:c7:c6:5f:9b:28:64:a7:ba:7d:e0:4d:9a:e8:7e:36:6d:e3:
50:c7:1b:19:0a:21:30:16:49:c3:f7:7b:88:0f:8d:b9:a3:d0:
1c:49:af:b4:be:3e:fb:8d:fe:21:0c:4e:5c:a5:e9:6d:57:26:
78:fe:ec:4b:6b:d6:ad:86:04:a5:12:da:95:5b:53:c8:74:7b:
bf:59:84:d5:d5:ca:8c:e7:0c:6f:cb:d8:7b:3b:07:2b:74:ea:
69:39:12:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:10:20 2025 by rpki-client