Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/3130392e3137352e3233352e302f32342d3234203d3e203432363839.roa
File: 3130392e3137352e3233352e302f32342d3234203d3e203432363839.roa (raw, json)
Hash identifier: gdgg+yUh2nmlmivck5BapYvFAeDQ8riujWrrKbtvlW0=
Subject key identifier: 8D:C3:BF:5A:14:8E:25:C6:02:66:13:FA:39:94:6C:62:DB:79:7F:EA
Certificate issuer: /CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Certificate serial: 6A458FD9BF8FA9EAC6A9CF6CB20A3BB9BE2DCDCD
Authority key identifier: 73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/3130392e3137352e3233352e302f32342d3234203d3e203432363839.roa
Signing time: Thu 07 Nov 2024 11:15:05 +0000
ROA not before: Thu 07 Nov 2024 11:10:05 +0000
ROA not after: Thu 06 Nov 2025 11:15:05 +0000
asID: 42689
IP address blocks: 109.175.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft
rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:45:8f:d9:bf:8f:a9:ea:c6:a9:cf:6c:b2:0a:3b:b9:be:2d:cd:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Validity
Not Before: Nov 7 11:10:05 2024 GMT
Not After : Nov 6 11:15:05 2025 GMT
Subject: CN=8DC3BF5A148E25C6026613FA39946C62DB797FEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ca:8a:31:bc:ce:f1:22:88:4c:2b:16:95:03:
ae:ac:43:66:b4:c3:70:27:dd:88:45:45:57:c4:34:
1f:9c:2a:88:37:d7:4e:b9:8a:eb:10:6c:fb:8c:7f:
20:f9:4f:8a:18:77:f9:ad:75:22:0a:ea:7a:c0:e4:
6b:16:16:16:7c:71:57:7b:78:76:d6:d6:87:51:83:
15:2e:72:91:aa:a5:58:54:28:7b:de:3a:06:d0:1f:
db:88:7a:3d:ef:84:6d:1c:3e:ea:c7:b1:2e:e1:c1:
d7:8c:2d:a7:33:29:ec:47:46:d4:b9:62:4d:b8:9e:
e9:e8:ca:2f:8c:17:d1:2d:9b:ff:73:0e:9f:47:0b:
80:a6:e1:e1:3f:40:ef:c3:0e:7f:05:b4:3f:98:1f:
c4:84:ca:21:71:ec:18:7e:01:af:76:99:76:2e:48:
cf:be:75:59:e3:1f:ff:13:e5:ce:6c:52:31:c9:42:
13:05:eb:e0:eb:e1:8d:ef:07:42:76:18:53:c8:51:
d7:6d:cb:fe:42:45:50:fb:98:eb:67:0a:15:9b:5c:
a8:9f:2f:de:cd:fa:a6:c7:94:1c:3e:62:66:b0:15:
f3:44:0b:f7:18:7b:13:39:e9:9b:d3:5d:5d:ac:fd:
2e:9f:c2:de:2a:35:4d:b8:b3:fb:d2:3a:1d:9f:e4:
53:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C3:BF:5A:14:8E:25:C6:02:66:13:FA:39:94:6C:62:DB:79:7F:EA
X509v3 Authority Key Identifier:
keyid:73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/3130392e3137352e3233352e302f32342d3234203d3e203432363839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.175.235.0/24
Signature Algorithm: sha256WithRSAEncryption
14:e8:02:32:b6:70:69:2b:08:d9:76:d3:15:07:34:5c:21:cc:
7f:a8:d1:2f:6a:fe:33:30:6a:f4:8d:58:f8:21:a0:c8:c3:d9:
68:b9:8a:20:86:ea:ed:0d:86:fd:41:d0:3e:3d:d3:7e:24:75:
1a:c2:fd:c6:3f:8f:d8:d9:64:0b:aa:80:1c:ec:58:3a:1a:2c:
5c:ed:e1:f5:bb:33:c9:db:72:c5:c3:c7:f2:54:b6:87:42:04:
8a:a2:ac:a1:aa:19:2a:d3:f0:ca:41:63:87:90:6f:ed:f7:8b:
12:d8:24:41:64:3b:9d:90:3a:aa:5d:e5:72:49:bc:60:ee:27:
45:dc:22:9b:73:7f:1c:1a:0b:5f:d3:7a:ed:a6:09:dc:5d:70:
27:41:48:60:3e:f8:ad:28:58:92:08:c7:70:ad:92:6e:b5:3d:
86:8c:98:7f:5e:d0:09:9a:f4:34:8d:e4:5b:9c:f7:83:08:b3:
4d:cb:9a:c4:8a:25:3a:06:b2:c2:4e:08:32:3c:86:8d:6d:0b:
e5:a0:a7:db:c7:61:ca:f8:26:c5:01:a2:47:06:e3:ce:66:5c:
16:60:f6:65:a6:55:87:5d:5c:d8:16:9a:97:c7:c2:e0:3b:e6:
35:07:86:59:8b:24:2d:8c:16:85:61:ec:3e:85:e6:ef:48:c3:
af:d3:38:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:14:51 2024 by rpki-client on console-fra.rpki-client.org