Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/3130392e3230322e3232382e302f32322d3232203d3e203432363839.roa
File: 3130392e3230322e3232382e302f32322d3232203d3e203432363839.roa (raw, json)
Hash identifier: 5MHnbAyv8YOyMkGgQSr8RgVAvzlQP4h9bvTK9Y9dC6o=
Subject key identifier: 5B:F1:53:C5:B2:07:A2:60:8A:05:6D:01:03:FC:5D:FB:FB:D8:04:76
Certificate issuer: /CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Certificate serial: 4BA51C051E04C37E2C13595FA0251B3CB8738061
Authority key identifier: 73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/3130392e3230322e3232382e302f32322d3232203d3e203432363839.roa
Signing time: Thu 07 Nov 2024 11:19:58 +0000
ROA not before: Thu 07 Nov 2024 11:14:58 +0000
ROA not after: Thu 06 Nov 2025 11:19:58 +0000
asID: 42689
IP address blocks: 109.202.228.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft
rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:a5:1c:05:1e:04:c3:7e:2c:13:59:5f:a0:25:1b:3c:b8:73:80:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Validity
Not Before: Nov 7 11:14:58 2024 GMT
Not After : Nov 6 11:19:58 2025 GMT
Subject: CN=5BF153C5B207A2608A056D0103FC5DFBFBD80476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4d:d0:64:f7:5f:7d:39:1a:26:d9:c1:5f:db:
c6:72:1f:82:81:71:e3:30:99:69:73:a7:ef:71:0d:
43:7b:29:d4:6d:15:e6:c7:57:8d:51:5d:d3:b2:3d:
e1:9b:5d:be:ee:a2:9e:d4:03:4d:66:e6:2b:93:56:
33:61:42:74:73:b4:00:b2:75:1f:76:50:1a:f0:bd:
9c:06:b4:22:7d:7e:62:1d:ca:93:84:81:09:b9:ce:
b5:c6:38:11:2b:1e:f1:e6:b0:da:3c:15:0e:8f:11:
c9:9f:52:1d:88:3e:76:b6:5d:88:1b:eb:c9:d6:a0:
37:5c:f9:e7:4f:ef:c3:c7:5e:45:44:12:d8:5a:21:
29:77:5c:50:38:93:e3:44:17:97:f2:f5:19:36:e7:
df:32:2e:f4:e9:6d:be:de:69:65:e1:6e:f6:44:c8:
a2:4e:3f:8e:3a:ca:b5:6a:e9:8d:12:4d:b8:0a:31:
31:97:3b:6a:bf:f2:bb:12:83:f6:88:1c:64:c6:09:
50:1a:73:a8:33:b4:8a:7e:d9:d6:db:fd:08:23:b7:
ae:8b:38:bb:bf:a5:98:f5:4d:00:3a:87:b2:8d:c4:
29:30:4f:f0:16:df:7b:49:e3:e7:f9:9f:35:2a:92:
d1:0c:4d:38:e6:11:76:7f:b7:46:90:2c:aa:dd:1e:
b7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F1:53:C5:B2:07:A2:60:8A:05:6D:01:03:FC:5D:FB:FB:D8:04:76
X509v3 Authority Key Identifier:
keyid:73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/3130392e3230322e3232382e302f32322d3232203d3e203432363839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.202.228.0/22
Signature Algorithm: sha256WithRSAEncryption
21:7d:01:52:ff:11:6f:18:2d:4a:cc:b2:dd:29:99:84:74:51:
9d:24:ef:84:2e:30:27:ab:cf:a5:8d:60:c2:e2:bb:44:4b:23:
fe:b4:4b:8d:86:a4:0a:e7:39:4a:be:e7:ab:c3:27:90:04:9d:
48:11:a1:47:55:4d:36:81:aa:04:b0:f8:8d:a5:83:e6:57:ff:
8d:69:d3:6d:88:6d:c9:4a:81:db:1b:ee:4c:09:64:ea:c9:ec:
42:f9:4a:3c:69:1d:93:47:6c:75:b1:7e:d9:22:c4:04:bc:77:
41:d7:f4:29:88:9f:45:25:85:4c:95:b3:e4:af:84:53:d3:47:
35:b5:74:25:be:af:a0:1e:9b:f1:c2:48:e2:3d:01:4a:ea:47:
2e:43:83:4b:f2:86:99:6d:03:93:59:72:08:a1:15:85:35:da:
37:b8:49:03:73:12:cd:94:f2:9c:ec:09:65:d4:28:77:9f:9b:
c4:10:9f:f8:a5:c2:fb:f6:9f:b4:8e:c2:f5:d0:82:35:16:d2:
fe:0b:e6:48:b9:6d:64:c7:1f:64:a3:6b:ca:f0:c7:d8:59:ea:
f6:16:32:e1:cb:3a:52:b8:6f:bc:24:3c:bc:1d:c3:80:07:0a:
83:89:f5:d8:ae:47:55:2d:76:5e:9c:fb:b3:2a:c8:bf:e7:34:
cf:79:17:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:14:51 2024 by rpki-client on console-fra.rpki-client.org