Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/3130392e3137352e3136382e302f32322d3232203d3e203432363839.roa
File: 3130392e3137352e3136382e302f32322d3232203d3e203432363839.roa (raw, json)
Hash identifier: ZkXKtlQFaLoAoL86yD0Q1nF076c/LIdOTjX/dln5MQ4=
Subject key identifier: 3C:F0:DD:70:15:FE:97:13:FD:80:87:E2:BB:E3:30:4C:F2:41:D8:45
Certificate issuer: /CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Certificate serial: 577125F2E13FBFCADD2D1A02952AC232C2EE9575
Authority key identifier: 73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/3130392e3137352e3136382e302f32322d3232203d3e203432363839.roa
Signing time: Thu 07 Nov 2024 11:08:39 +0000
ROA not before: Thu 07 Nov 2024 11:03:39 +0000
ROA not after: Thu 06 Nov 2025 11:08:39 +0000
asID: 42689
IP address blocks: 109.175.168.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft
rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:71:25:f2:e1:3f:bf:ca:dd:2d:1a:02:95:2a:c2:32:c2:ee:95:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Validity
Not Before: Nov 7 11:03:39 2024 GMT
Not After : Nov 6 11:08:39 2025 GMT
Subject: CN=3CF0DD7015FE9713FD8087E2BBE3304CF241D845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:34:2d:bf:45:86:68:7b:55:9b:a1:b8:ac:29:
92:0f:91:09:d8:70:3f:c3:f2:9b:6d:12:49:ca:cc:
7e:b5:43:d4:db:5f:21:d8:40:55:9c:97:bb:f2:0a:
e0:eb:d6:76:b6:1d:c4:63:6b:f0:63:59:d4:23:41:
a9:6a:56:5c:dc:7a:0e:f8:15:42:d8:a2:c5:c0:54:
a1:53:f6:e7:31:6e:e0:5e:07:97:29:c4:25:91:da:
77:fe:b9:5a:53:e6:6a:bf:38:2d:34:06:94:1a:75:
71:b8:e8:e9:b5:4d:fe:3c:6d:7f:1a:a4:97:c3:3b:
00:97:55:1a:a2:93:55:29:ae:8c:f0:65:8f:03:a5:
37:63:f3:1d:9c:74:a2:af:06:8d:cf:a0:09:96:85:
cc:13:d6:5f:16:f1:a0:40:0f:00:fe:fc:a8:65:98:
7f:72:42:4a:14:54:4c:a4:f4:48:7b:28:69:6c:c8:
91:a1:0d:c4:a4:85:81:fd:5c:81:10:9f:e5:d7:ce:
50:d0:44:60:ba:fc:81:f1:80:a1:d9:f0:71:63:47:
65:6b:c6:8f:d5:71:8f:88:ed:88:44:d7:d7:98:09:
27:ca:0a:32:55:50:87:62:8a:cb:b2:81:3e:03:ae:
a5:ad:b8:2f:f2:2b:48:e2:a7:d2:54:e8:1f:1b:74:
f0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F0:DD:70:15:FE:97:13:FD:80:87:E2:BB:E3:30:4C:F2:41:D8:45
X509v3 Authority Key Identifier:
keyid:73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/3130392e3137352e3136382e302f32322d3232203d3e203432363839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.175.168.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:29:d6:f1:a3:8c:07:9c:d4:50:c4:61:b5:a0:2d:a4:66:d5:
89:e4:cb:de:89:33:3a:65:95:96:91:3a:a0:86:31:2d:6f:6d:
f4:81:d5:39:e1:c9:3a:58:b2:8c:88:65:55:a3:58:be:77:53:
4e:a3:3c:26:ee:90:cd:f1:6b:fa:df:3e:c8:ce:d7:c3:d2:8c:
54:eb:16:f3:d8:18:ad:ea:8b:21:73:f3:80:b1:d1:b9:b3:43:
b5:b0:a7:d4:25:b6:fa:c9:3a:37:12:a5:64:c6:e7:57:fe:66:
d8:f6:1a:ba:b3:16:0c:6f:91:98:2e:de:69:0b:82:bb:87:8c:
ce:18:7d:7d:a3:1f:b4:7d:62:cf:18:57:f8:e6:68:69:1b:0e:
8b:1b:f3:f5:63:61:99:0f:36:45:9b:44:80:e0:5a:8c:ff:a4:
44:f4:35:a1:ca:f3:da:03:00:83:ec:90:8c:d0:08:c6:1c:84:
8c:b4:7c:af:86:9b:5f:07:30:69:b5:99:06:d6:0f:81:2e:72:
b0:d7:a7:ae:02:bf:43:e7:9e:5e:e7:26:e0:43:86:f3:72:f3:
ec:58:02:ee:85:56:73:93:f2:ac:e3:fd:9a:98:f7:e9:8c:bc:
7a:55:6e:da:e0:ad:db:9e:fa:0b:5a:e4:94:e4:0e:31:ee:97:
da:54:40:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:58:16 2024 by rpki-client on console-ams.rpki-client.org