Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/3130392e3137352e3232362e302f32332d3233203d3e203432363839.roa
File: 3130392e3137352e3232362e302f32332d3233203d3e203432363839.roa (raw, json)
Hash identifier: FT2pQM7lqbfb63DvjpIKxFsHlxYhd0tm/h57wdaDT/8=
Subject key identifier: D9:C0:30:9C:0F:6D:68:D6:FD:36:D1:6A:D8:D3:C3:69:8A:7A:28:C6
Certificate issuer: /CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Certificate serial: 706046CE7EFEC97C0A46017887AB082919E69198
Authority key identifier: 73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/3130392e3137352e3232362e302f32332d3233203d3e203432363839.roa
Signing time: Thu 07 Nov 2024 11:14:52 +0000
ROA not before: Thu 07 Nov 2024 11:09:52 +0000
ROA not after: Thu 06 Nov 2025 11:14:52 +0000
asID: 42689
IP address blocks: 109.175.226.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft
rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 12:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:60:46:ce:7e:fe:c9:7c:0a:46:01:78:87:ab:08:29:19:e6:91:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Validity
Not Before: Nov 7 11:09:52 2024 GMT
Not After : Nov 6 11:14:52 2025 GMT
Subject: CN=D9C0309C0F6D68D6FD36D16AD8D3C3698A7A28C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:be:d9:1e:46:96:6e:d8:ad:cf:a1:24:05:2f:
2d:4b:00:c2:56:60:0b:0b:f0:66:5e:5e:b8:e2:85:
6c:40:96:70:85:14:e7:08:65:06:6d:cf:f6:57:ac:
ae:4a:4c:92:a5:77:29:ff:ec:73:d3:73:84:06:01:
76:8c:e3:f7:da:8f:c6:10:fa:be:f8:dc:71:c5:89:
8e:ed:c5:86:c5:5e:4d:b3:24:92:fc:c7:4a:f3:06:
58:8d:a0:1b:30:4c:f2:8a:ca:96:8e:8c:94:91:20:
43:1b:7b:6a:af:06:12:43:3a:d4:17:46:67:c3:e7:
90:ee:06:84:47:c3:d1:19:bd:8a:03:a6:01:1e:33:
a4:b7:6a:47:88:9b:cd:01:5f:30:a1:d1:7c:f2:4e:
ce:9b:67:a1:f1:7f:23:fc:71:d0:0a:76:68:c1:a0:
06:55:cc:a9:26:01:b7:94:fb:df:a5:f8:6e:10:0e:
4f:d1:04:de:82:42:57:06:8f:54:fd:1d:a2:99:3b:
22:17:ba:cb:17:fd:e2:b1:e7:2e:e3:a4:4f:cc:03:
c9:eb:04:f5:70:97:d2:2a:9a:6f:19:3d:d5:14:7f:
c9:3c:a4:de:c9:5f:03:28:80:8a:a9:31:60:49:da:
55:9e:46:1b:4f:b6:90:4c:93:ec:89:74:5a:70:0c:
23:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C0:30:9C:0F:6D:68:D6:FD:36:D1:6A:D8:D3:C3:69:8A:7A:28:C6
X509v3 Authority Key Identifier:
keyid:73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/3130392e3137352e3232362e302f32332d3233203d3e203432363839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.175.226.0/23
Signature Algorithm: sha256WithRSAEncryption
44:c5:e9:69:a1:76:56:82:1f:6e:9f:c9:0e:10:f0:b8:bd:0b:
ca:ef:8b:7a:8d:52:f8:91:31:40:87:29:7b:f8:c6:b6:1a:8a:
50:86:83:cd:e1:ee:46:f6:17:84:a9:10:16:53:1a:91:d4:98:
d2:26:76:bb:6f:93:40:d0:ac:7f:c8:4a:76:9b:d5:40:5d:cc:
a2:fd:3c:1f:01:47:2b:23:b9:16:45:7a:e0:3f:b7:36:cd:bd:
1d:f1:cb:81:20:cf:ca:a7:f7:9e:52:e4:9d:e9:0d:a5:3b:97:
98:51:0a:2c:a9:1d:f5:3f:24:26:3e:e9:b4:9d:af:24:96:d6:
d1:40:db:28:99:c5:10:13:66:be:12:48:1d:94:b0:ec:ab:28:
61:ed:eb:4b:29:58:f9:ae:11:76:5b:fe:1c:bd:d1:a8:29:46:
78:72:3f:44:0d:66:79:76:05:fd:c2:9d:02:4b:92:a2:9a:6e:
1e:3f:97:14:15:3d:b5:37:0e:0b:ef:10:43:49:60:f1:f5:45:
7d:74:bb:ff:a1:f0:95:4d:b5:8b:78:1c:50:99:19:91:24:7c:
b0:ec:dd:99:14:7b:32:ba:2d:e2:b1:6e:5c:fe:39:1d:04:b4:
39:15:2b:40:8c:60:5a:84:b3:65:6b:36:74:b2:61:ed:bf:31:
20:20:18:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:18:34 2024 by rpki-client on console-ams.rpki-client.org