Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/3130392e3137352e3234332e302f32342d3234203d3e203432363839.roa
File: 3130392e3137352e3234332e302f32342d3234203d3e203432363839.roa (raw, json)
Hash identifier: CZePYLzZ9rdKidMro83K5bUu/2qzJTnApDUZ5gMaDW4=
Subject key identifier: 9E:30:34:7F:6D:A5:18:3D:94:B6:F6:4A:66:46:E0:75:6D:F5:75:A7
Certificate issuer: /CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Certificate serial: 46ABE30E6B0286D0184B151392233B8D366AE5D1
Authority key identifier: 73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/3130392e3137352e3234332e302f32342d3234203d3e203432363839.roa
Signing time: Thu 07 Nov 2024 11:15:37 +0000
ROA not before: Thu 07 Nov 2024 11:10:37 +0000
ROA not after: Thu 06 Nov 2025 11:15:37 +0000
asID: 42689
IP address blocks: 109.175.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft
rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:ab:e3:0e:6b:02:86:d0:18:4b:15:13:92:23:3b:8d:36:6a:e5:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Validity
Not Before: Nov 7 11:10:37 2024 GMT
Not After : Nov 6 11:15:37 2025 GMT
Subject: CN=9E30347F6DA5183D94B6F64A6646E0756DF575A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:1b:56:58:80:c1:f5:42:98:a0:c8:fc:40:3d:
1a:bf:d6:91:8e:98:76:e8:dc:3e:a7:0b:94:12:3e:
15:5b:c0:f6:12:57:0f:7b:37:8a:e4:32:00:94:8d:
b5:15:47:aa:a5:b2:00:14:37:cc:1a:c2:15:82:a3:
3f:12:17:2a:82:38:2d:70:04:fe:a0:8d:bf:f5:75:
24:d0:1a:88:7f:96:23:b7:d9:9d:29:11:5e:e5:d8:
fc:e2:2d:70:49:03:ad:e2:37:88:87:ad:d6:0b:e7:
72:d9:a0:81:ba:0f:0e:a4:86:d8:32:77:9e:ac:d8:
48:9e:d8:0d:bc:75:a7:38:1e:93:58:24:87:66:12:
34:4d:d1:0b:97:77:d0:e6:bb:5e:87:0f:bc:4f:99:
f0:32:1e:fb:64:b1:49:65:dc:ab:f8:e9:b2:86:e1:
b4:c7:e7:c4:87:df:0a:2d:f3:05:9a:b4:10:82:7b:
de:71:c5:37:22:18:e5:9c:35:de:68:2b:ee:63:7a:
70:bd:4e:ff:b4:e7:ce:25:07:b8:26:f7:a7:55:90:
81:d6:71:8e:f2:7d:4a:d5:58:84:89:21:31:72:91:
a4:f5:50:a2:70:cc:9d:e4:98:0c:d6:18:7e:82:c1:
a3:35:81:74:bf:55:9c:c1:9f:aa:9d:e2:b0:90:13:
b3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:30:34:7F:6D:A5:18:3D:94:B6:F6:4A:66:46:E0:75:6D:F5:75:A7
X509v3 Authority Key Identifier:
keyid:73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/3130392e3137352e3234332e302f32342d3234203d3e203432363839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.175.243.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:81:6d:ac:6b:84:bd:cb:8d:61:70:20:c2:ff:f2:64:aa:6f:
da:59:4b:f3:5a:50:f7:3e:ed:70:f1:cd:dd:af:76:b4:03:60:
d8:53:78:bf:6f:70:d2:25:78:d4:97:55:20:6f:4b:fe:33:e1:
07:42:3e:a1:d1:72:b5:1f:a9:73:0e:1f:1a:20:07:8b:e0:49:
14:5b:2d:a4:60:48:0a:49:ae:94:c4:64:8c:d0:65:c6:a9:23:
17:b3:58:45:ec:07:d1:51:0c:d3:af:69:c1:2e:72:be:12:59:
16:f5:1f:88:f9:b4:e9:a3:db:4c:52:44:ac:07:3c:7f:58:fc:
f0:0f:01:c8:1c:ff:3c:33:5f:55:34:d1:f2:ff:a6:37:e3:e5:
96:54:67:d3:7d:e1:8d:f1:87:b0:22:98:5e:72:8d:d8:bf:1b:
82:e6:84:3c:c8:cf:d8:51:81:44:96:f8:6e:ec:0c:1a:66:40:
8c:72:22:7f:9d:bb:82:cb:38:d3:75:a4:9c:60:97:9e:c0:8d:
68:c7:f6:ca:53:9c:00:42:ec:20:76:6d:20:35:c6:40:4f:e1:
06:e4:f9:7f:f9:9f:1f:da:cf:f3:f9:e8:16:57:46:78:ea:7d:
cb:5a:93:72:82:c7:6f:3f:71:67:7d:df:a6:6f:4a:19:c1:47:
ef:a0:ac:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:14:51 2024 by rpki-client on console-fra.rpki-client.org