Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/3130392e3230322e3234372e302f32342d3234203d3e203432363839.roa
File: 3130392e3230322e3234372e302f32342d3234203d3e203432363839.roa (raw, json)
Hash identifier: ns3DVWI9ShUnaqbCNk0KkZL5cDI/iE5NlmgoRYIiEbk=
Subject key identifier: 1B:C6:14:9A:27:6B:B8:9B:51:06:DD:98:20:BE:44:D0:42:F5:1C:1D
Certificate issuer: /CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Certificate serial: 68A702018A35A0465509E4F4EB4E7D6C400B14E9
Authority key identifier: 73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/3130392e3230322e3234372e302f32342d3234203d3e203432363839.roa
Signing time: Thu 07 Nov 2024 11:20:51 +0000
ROA not before: Thu 07 Nov 2024 11:15:51 +0000
ROA not after: Thu 06 Nov 2025 11:20:51 +0000
asID: 42689
IP address blocks: 109.202.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft
rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:a7:02:01:8a:35:a0:46:55:09:e4:f4:eb:4e:7d:6c:40:0b:14:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Validity
Not Before: Nov 7 11:15:51 2024 GMT
Not After : Nov 6 11:20:51 2025 GMT
Subject: CN=1BC6149A276BB89B5106DD9820BE44D042F51C1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d5:ec:e5:63:7e:7a:5a:df:af:5f:05:47:8c:
14:28:4d:b7:25:c4:b8:ab:d4:f2:1e:b2:6d:a7:92:
6e:35:fc:37:34:fa:d4:1d:72:12:04:1d:81:e5:8b:
84:3b:0b:e7:c2:21:7a:93:47:2a:c8:ce:9e:1e:e1:
70:8e:83:2a:68:f5:0d:5e:b0:dc:10:72:eb:64:5a:
ef:54:ae:bc:65:52:a1:62:c1:08:6f:d2:52:c2:46:
c3:3d:b4:d5:4d:c7:38:53:1d:08:1f:13:da:a7:23:
f8:bb:fd:e9:67:8d:56:08:47:6d:44:bd:d3:96:81:
52:c3:05:87:98:29:c0:d4:e6:ab:56:5b:a5:27:7c:
9f:cc:1c:ba:cb:83:33:4b:2f:c4:4a:2c:9e:da:ae:
52:8a:cb:b9:78:85:4a:eb:f8:ad:e7:31:7d:a9:11:
ee:bb:ba:ec:c4:a2:2c:27:b7:ca:77:14:bf:b6:37:
bc:59:5d:4c:d6:7f:0b:12:15:8d:09:9d:06:d5:50:
cd:1b:bf:ab:73:d6:92:b3:04:4c:04:4e:2f:44:45:
1d:56:1a:e4:63:ac:38:e2:31:74:0f:17:68:19:59:
08:5a:07:d8:e2:05:75:70:e6:da:5a:73:0b:c2:1d:
00:16:82:dc:a7:9f:3b:fc:68:38:77:3f:30:a4:5a:
cc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C6:14:9A:27:6B:B8:9B:51:06:DD:98:20:BE:44:D0:42:F5:1C:1D
X509v3 Authority Key Identifier:
keyid:73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/3130392e3230322e3234372e302f32342d3234203d3e203432363839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.202.247.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:3c:af:54:a2:ff:27:56:67:49:ae:0b:99:21:11:3c:22:ae:
52:3c:66:e5:87:d0:3a:27:aa:c7:18:b7:82:d4:17:ae:cb:5f:
a6:e0:7b:b4:fa:37:53:17:40:36:28:c0:2d:97:02:ae:87:3a:
38:1a:23:bd:47:18:cf:ab:ab:cf:ec:14:8f:cb:48:52:8a:df:
09:53:4c:05:de:9d:0e:aa:83:fb:70:ac:a9:6a:e5:5b:54:0e:
cf:00:d2:fd:4b:1a:69:1a:2c:0b:ee:ca:7d:33:52:9e:75:2e:
5f:6e:44:e0:5e:28:60:e6:e5:b7:ef:32:fa:d2:fe:84:96:fd:
69:0b:5d:09:8a:41:d2:ba:6a:14:cf:71:43:0b:03:85:ef:be:
22:e3:1f:9b:1e:6d:5f:f4:ab:a3:d3:ae:8f:14:06:5a:65:be:
a5:e2:03:9e:54:23:45:cf:16:07:5e:24:56:0e:4c:1a:d3:52:
ac:4e:15:9a:02:69:bd:e2:88:ad:40:02:c1:76:b4:24:89:d2:
0e:80:f8:52:37:1e:d7:c7:b8:67:59:ff:92:9d:72:31:8d:bc:
3f:03:a9:3d:83:90:35:de:ee:54:9a:80:c5:0b:33:d3:1d:76:
d2:5b:8f:a2:f0:c3:f4:7b:45:b8:b2:4f:a1:15:54:20:cf:eb:
7d:96:94:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:58:16 2024 by rpki-client on console-ams.rpki-client.org