Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/3130392e3137352e3234362e302f32332d3233203d3e203432363839.roa
File: 3130392e3137352e3234362e302f32332d3233203d3e203432363839.roa (raw, json)
Hash identifier: HlLvk3y8pBoTLRQACeHNEJlpkYsCKQb5OUbf8AoWJ4M=
Subject key identifier: 0F:22:8C:25:78:2E:CE:D3:2D:77:E2:46:54:F5:88:51:72:BB:0D:39
Certificate issuer: /CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Certificate serial: 154A6B5A3DAE6239A74DAB93B412C28FC0A8F4EA
Authority key identifier: 73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/3130392e3137352e3234362e302f32332d3233203d3e203432363839.roa
Signing time: Thu 07 Nov 2024 15:47:59 +0000
ROA not before: Thu 07 Nov 2024 15:42:59 +0000
ROA not after: Thu 06 Nov 2025 15:47:59 +0000
asID: 42689
IP address blocks: 109.175.246.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft
rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:4a:6b:5a:3d:ae:62:39:a7:4d:ab:93:b4:12:c2:8f:c0:a8:f4:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Validity
Not Before: Nov 7 15:42:59 2024 GMT
Not After : Nov 6 15:47:59 2025 GMT
Subject: CN=0F228C25782ECED32D77E24654F5885172BB0D39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:48:30:14:94:b4:13:87:26:24:32:16:07:5f:
2d:b2:1a:1d:77:63:1a:f4:a5:3d:e4:44:76:e0:37:
31:25:88:db:ac:da:de:48:9b:46:81:a1:df:db:6e:
84:aa:2f:d7:f3:ff:f7:91:86:c9:45:dc:fa:83:a0:
ae:5f:6b:43:48:3a:9c:07:35:ba:e6:59:2f:3d:bc:
f9:b6:db:19:52:69:da:7d:76:a6:b2:37:cf:dd:47:
4f:34:da:11:1a:5a:75:89:da:2f:4b:06:a3:0d:88:
30:bd:82:01:66:7f:c6:6a:13:f8:ce:84:37:d2:23:
9d:0c:a9:86:bb:5e:be:00:2f:d2:a5:41:5d:85:7d:
2e:ec:b4:a4:a1:dd:fb:31:45:8d:a6:a5:ab:53:f6:
e9:97:72:7e:36:e3:ed:ba:ac:6d:b0:c9:57:4d:a0:
75:0a:25:ad:60:ec:70:91:7b:8c:7b:ae:6a:13:18:
a5:46:4d:9b:32:7a:4b:5d:45:c5:1a:4f:8a:03:f0:
55:47:13:f5:b2:3c:72:61:f0:3f:71:ff:18:32:b8:
b4:d6:49:9b:fa:da:60:67:c3:bf:7a:43:8f:be:24:
9b:f2:bd:6d:2d:5f:e4:d0:fb:72:06:29:05:03:de:
73:d5:50:ca:bd:31:a8:a7:ab:27:e6:06:bb:ca:75:
f3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:22:8C:25:78:2E:CE:D3:2D:77:E2:46:54:F5:88:51:72:BB:0D:39
X509v3 Authority Key Identifier:
keyid:73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/3130392e3137352e3234362e302f32332d3233203d3e203432363839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.175.246.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:c2:f7:0a:94:cf:28:33:49:cb:56:bf:85:97:c8:48:db:e5:
83:77:ee:e4:5e:ac:3f:6f:bc:54:79:43:95:65:08:27:f0:b9:
58:46:69:61:52:89:a4:bd:e7:67:2e:a8:01:ee:1a:48:4d:0d:
32:a4:c9:66:db:2d:f1:be:dd:47:b1:21:70:ea:a6:25:45:1c:
09:0b:b4:19:38:16:c4:15:6d:bb:46:af:b7:c9:33:45:e1:4e:
09:b2:17:57:f2:c3:5c:8f:a1:73:4e:83:68:bd:6a:ea:44:d7:
b4:84:4b:7e:88:d6:90:df:27:e1:f9:57:24:f3:84:04:4f:ad:
75:54:d3:fa:79:63:7f:56:d3:67:52:be:7c:31:07:fd:08:df:
1c:b3:f0:9a:1d:fc:61:19:cc:cf:df:b5:c9:30:8f:51:90:b0:
4f:80:d7:93:b0:fc:ac:f4:e3:51:ba:e1:b9:18:d4:f6:75:44:
9e:04:90:20:d7:de:3d:b2:ba:77:1b:e0:0b:bb:21:83:14:5e:
1e:00:b1:b8:63:20:9b:ef:db:c8:3d:bb:4a:b1:a0:1d:9a:a3:
80:51:a6:6b:57:78:32:14:b6:aa:49:da:36:2f:f4:dd:38:a5:
9f:85:9b:f3:a9:16:df:91:a6:59:31:2a:a3:54:69:e7:21:4a:
96:08:35:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:58:16 2024 by rpki-client on console-ams.rpki-client.org