Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/3130392e3137352e3235302e302f32332d3233203d3e203432363839.roa
File: 3130392e3137352e3235302e302f32332d3233203d3e203432363839.roa (raw, json)
Hash identifier: xphtZtlkxLutVdWDXAKnkYAu0mEDR4HRgblwAgmysAc=
Subject key identifier: 7D:3E:E1:1D:16:FC:19:4E:33:A1:4D:C2:BE:DB:D8:87:94:98:E8:C7
Certificate issuer: /CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Certificate serial: 1CE3BFB2A7B884076AFAAB74565551551F322760
Authority key identifier: 73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/3130392e3137352e3235302e302f32332d3233203d3e203432363839.roa
Signing time: Thu 07 Nov 2024 11:16:10 +0000
ROA not before: Thu 07 Nov 2024 11:11:10 +0000
ROA not after: Thu 06 Nov 2025 11:16:10 +0000
asID: 42689
IP address blocks: 109.175.250.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft
rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:e3:bf:b2:a7:b8:84:07:6a:fa:ab:74:56:55:51:55:1f:32:27:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Validity
Not Before: Nov 7 11:11:10 2024 GMT
Not After : Nov 6 11:16:10 2025 GMT
Subject: CN=7D3EE11D16FC194E33A14DC2BEDBD8879498E8C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:77:d5:9b:d9:d1:5a:1c:92:b7:8c:a4:a3:7f:
15:b3:8e:00:d9:dd:27:33:96:83:17:8b:3c:e6:eb:
ab:e7:73:11:37:76:66:a8:c6:07:32:17:b4:2e:42:
c7:e7:49:42:f0:21:eb:eb:46:24:b8:15:aa:c6:04:
50:da:23:b3:2c:e4:5b:e5:5f:f8:f3:7d:fb:4e:d1:
15:de:54:d8:1f:71:05:92:ec:22:f1:e2:e2:9e:2e:
62:6a:46:b4:b3:9e:6e:46:96:57:54:28:3d:90:73:
e2:7a:12:39:09:26:c4:da:cf:d4:83:c4:5a:a4:31:
46:28:4a:ff:b6:2c:fe:1c:e9:37:c9:32:f7:2f:1c:
3d:f4:5b:82:39:c3:60:02:88:33:9a:89:31:64:0d:
81:d4:66:79:8f:48:f0:15:92:c8:87:c8:81:4f:5f:
c6:a8:a8:96:5e:42:a4:91:ab:11:bf:c6:92:27:50:
27:1a:f5:88:42:b8:6d:85:97:9b:7c:e4:26:36:fc:
3f:ea:08:34:52:4b:a8:68:75:89:dc:10:70:cf:7e:
a8:e3:44:97:d1:60:02:f4:e7:a5:1b:d3:57:f5:9e:
05:53:28:0a:6e:e2:44:30:75:d5:ff:66:91:2b:c1:
e8:40:61:12:09:94:d2:f4:f6:28:fd:fa:fb:3f:86:
2d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3E:E1:1D:16:FC:19:4E:33:A1:4D:C2:BE:DB:D8:87:94:98:E8:C7
X509v3 Authority Key Identifier:
keyid:73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/3130392e3137352e3235302e302f32332d3233203d3e203432363839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.175.250.0/23
Signature Algorithm: sha256WithRSAEncryption
96:e8:6d:87:d2:f4:98:c5:d9:3b:61:2a:73:d1:ac:71:04:1d:
ec:c9:c3:e9:6c:97:73:7a:ac:88:1d:ad:ce:11:df:4b:f7:d4:
2f:2a:1b:1e:a6:ec:04:c5:a6:ae:60:a9:50:11:07:71:e6:ee:
2e:2b:7c:a4:ef:64:8b:eb:03:e5:d8:df:12:e3:f0:b6:ee:79:
3b:92:3f:ea:2e:df:a3:f1:19:ad:be:31:42:a7:54:74:23:c0:
31:07:bf:77:3c:26:a8:19:c2:3f:db:2a:97:2f:71:fd:1d:2f:
64:1b:54:30:57:c1:e9:42:a9:48:af:ce:cc:a9:b9:14:17:a8:
69:ff:60:87:20:96:8d:96:78:b6:60:1a:d1:0a:01:13:b4:b0:
ae:87:10:ac:29:b4:6f:60:5a:81:7d:02:02:1e:83:2f:4d:6a:
86:41:57:57:00:8e:f5:03:2c:dd:80:f1:47:88:de:06:79:31:
fd:83:b7:2e:f9:3c:f4:7e:bb:68:61:33:85:ad:aa:d0:42:5e:
b4:b8:4b:0b:02:06:4d:e1:7c:1c:fa:0c:c5:28:eb:81:5e:14:
7b:5a:ba:1d:bf:0e:1b:66:a4:06:76:fe:14:a0:00:76:40:ba:
02:64:8f:c5:07:cd:6c:c0:5b:c9:53:b4:85:6d:e2:fb:b0:27:
61:c1:a2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:58:16 2024 by rpki-client on console-ams.rpki-client.org