Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/3138352e332e38342e302f32322d3232203d3e203432363839.roa
File: 3138352e332e38342e302f32322d3232203d3e203432363839.roa (raw, json)
Hash identifier: LIDSSYEMepJUiWqMhce3ll70aKIj2WVu8QJs/xWHzVs=
Subject key identifier: BE:35:E3:38:C8:19:39:43:AF:51:8A:93:A3:30:42:22:92:88:7C:1D
Certificate issuer: /CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Certificate serial: 68F41A167EF6ACFDFA6CD69438A44435F3AFF8FC
Authority key identifier: 73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/3138352e332e38342e302f32322d3232203d3e203432363839.roa
Signing time: Tue 19 Mar 2024 10:26:23 +0000
ROA not before: Tue 19 Mar 2024 10:21:23 +0000
ROA not after: Tue 18 Mar 2025 10:26:23 +0000
asID: 42689
IP address blocks: 185.3.84.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft
rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 17:05:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:f4:1a:16:7e:f6:ac:fd:fa:6c:d6:94:38:a4:44:35:f3:af:f8:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Validity
Not Before: Mar 19 10:21:23 2024 GMT
Not After : Mar 18 10:26:23 2025 GMT
Subject: CN=BE35E338C8193943AF518A93A330422292887C1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:98:1b:b1:b9:a8:6e:2c:62:23:6a:0d:be:4c:
19:4e:42:f4:f1:b9:a6:bf:42:a2:1a:ad:cb:39:9b:
1b:99:4d:9d:a2:08:da:72:fc:76:3b:4d:ed:98:70:
01:37:73:75:66:b9:81:d7:c5:e9:37:b0:96:4f:1b:
e5:d2:6d:55:7b:1e:80:03:29:76:22:96:fa:68:0b:
6b:95:80:b5:12:09:c8:0f:83:d3:7c:1a:70:78:bd:
64:87:bf:e7:4a:09:a0:5d:d2:00:dc:85:16:e8:4f:
6a:fd:9d:f4:89:5f:5f:6b:86:7c:c1:7f:b9:88:a6:
18:80:59:83:16:e3:10:56:33:45:12:af:89:83:ad:
55:25:18:7d:87:0e:b5:34:23:d8:9d:15:84:a3:68:
9d:db:8f:5f:6e:29:62:c8:c5:3d:43:3f:99:c4:3f:
e2:3c:fb:fe:54:fd:ef:ec:86:fe:44:de:04:d4:3f:
cf:6d:a3:ac:f0:c9:8f:b0:e4:c3:6c:bc:1e:6d:1f:
fc:e9:2f:c2:71:d6:b5:c7:65:9f:15:7f:d5:c6:c1:
2a:07:9b:e8:ed:5d:31:b5:d1:d8:03:2f:7a:7e:cc:
c0:16:62:6c:9f:18:cf:f4:d2:64:51:e6:9c:11:19:
9b:40:7f:d1:89:59:34:18:25:49:c6:25:a0:71:02:
60:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:35:E3:38:C8:19:39:43:AF:51:8A:93:A3:30:42:22:92:88:7C:1D
X509v3 Authority Key Identifier:
keyid:73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/3138352e332e38342e302f32322d3232203d3e203432363839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.84.0/22
Signature Algorithm: sha256WithRSAEncryption
47:11:65:f6:8f:14:ae:a5:8c:51:a3:09:84:01:7b:eb:af:64:
fe:ee:e3:fa:96:b4:ce:fd:7b:0c:96:7f:43:b8:aa:d6:7c:6f:
76:6e:49:6a:f2:94:da:de:28:77:ea:56:9e:5b:de:6f:f1:22:
e5:07:93:39:c1:f8:ce:77:a4:2a:a9:63:e6:1b:0f:b7:40:ca:
e0:32:a7:93:bf:c5:bb:47:ad:3f:be:42:ad:b2:c2:3b:4b:98:
e3:76:9f:2d:ec:f3:6c:39:bb:8d:40:ab:8f:3b:20:0b:40:d7:
95:7f:31:cb:d2:44:31:43:54:73:4f:db:d5:f0:14:86:95:81:
7d:bf:d1:4a:e4:03:4a:37:e0:7c:f0:34:0f:64:6b:f5:84:c8:
39:db:ac:0b:94:07:20:24:53:79:a6:19:97:71:50:10:4c:b8:
55:41:7a:7b:fd:6a:ed:de:1f:85:44:2c:55:6b:98:77:0d:27:
4a:96:d0:aa:8c:da:fd:0a:a3:0e:c9:95:fe:ff:27:33:5a:74:
32:cc:92:06:e6:62:08:db:bc:33:b0:12:7f:a8:b5:2b:01:c0:
cd:ea:8a:fc:98:68:61:b1:b9:36:40:cb:78:08:18:d9:b7:7d:
76:87:cf:e1:7e:23:a7:6d:01:c0:0a:5a:dc:7c:79:97:87:9e:
3a:2e:fd:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 02:23:28 2024 by rpki-client on console-ams.rpki-client.org