Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/3138352e332e38362e302f32332d3233203d3e203432363839.roa
File: 3138352e332e38362e302f32332d3233203d3e203432363839.roa (raw, json)
Hash identifier: dFRh0usXj5yZEMTnKFazFTpVfQrXJZHS+XLgIWTixOY=
Subject key identifier: 52:FB:87:60:91:70:94:F2:F9:D1:5B:A4:DE:ED:2F:8E:DF:83:6C:9E
Certificate issuer: /CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Certificate serial: 3477AC3E3AED2AB85E7326E7B4F58E07C0D727E7
Authority key identifier: 73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/3138352e332e38362e302f32332d3233203d3e203432363839.roa
Signing time: Thu 07 Nov 2024 11:21:37 +0000
ROA not before: Thu 07 Nov 2024 11:16:37 +0000
ROA not after: Thu 06 Nov 2025 11:21:37 +0000
asID: 42689
IP address blocks: 185.3.86.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft
rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:77:ac:3e:3a:ed:2a:b8:5e:73:26:e7:b4:f5:8e:07:c0:d7:27:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Validity
Not Before: Nov 7 11:16:37 2024 GMT
Not After : Nov 6 11:21:37 2025 GMT
Subject: CN=52FB8760917094F2F9D15BA4DEED2F8EDF836C9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:62:e9:94:14:1c:0d:07:6a:b2:6d:31:d9:97:
aa:61:73:3e:ce:a4:a8:96:55:c9:e7:aa:32:e7:6c:
d5:1f:87:39:11:81:5a:4d:99:ff:97:bb:bb:35:1b:
9b:ca:cb:99:5b:15:49:16:56:84:74:1e:68:f4:f8:
a9:8b:ca:0b:d7:28:24:c3:6c:a5:98:fa:6f:6f:0c:
5b:10:52:3a:ec:42:4f:42:e9:3a:08:01:23:18:dc:
93:3a:83:c5:26:05:32:1a:55:17:be:d8:97:e1:02:
ca:52:69:4a:75:5f:d2:77:98:e0:a8:82:de:33:83:
f7:ec:29:22:4e:25:d6:c5:05:00:e9:df:85:7e:29:
c1:ac:12:af:f1:2f:07:b6:7a:e2:41:ca:e7:4d:d2:
66:a1:16:23:4f:93:b1:b3:54:61:7e:19:54:5f:8e:
06:81:d0:61:e0:c9:d4:97:8c:e1:00:89:df:ac:9d:
74:91:7b:8e:12:96:b7:82:0f:e4:0d:76:0a:bc:27:
a1:a2:4e:ef:b3:c0:d6:25:01:68:43:0d:92:c9:5d:
30:2f:9e:7b:a3:45:43:d8:7d:2b:bf:9a:47:91:0d:
f0:e8:99:44:95:fc:84:49:1e:79:a8:3a:c1:69:57:
43:5c:ca:5f:64:b9:10:93:1d:5b:58:1b:44:3d:b7:
e3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FB:87:60:91:70:94:F2:F9:D1:5B:A4:DE:ED:2F:8E:DF:83:6C:9E
X509v3 Authority Key Identifier:
keyid:73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/3138352e332e38362e302f32332d3233203d3e203432363839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.3.86.0/23
Signature Algorithm: sha256WithRSAEncryption
33:40:06:c8:04:d0:93:76:aa:fb:08:e9:ed:fa:8b:db:98:fa:
69:9f:cd:c7:2c:30:3c:f4:8e:09:ef:fe:1b:7a:44:03:b6:12:
e5:2f:ec:2f:dd:8c:a8:3a:fe:18:e1:63:11:5f:16:7e:52:a8:
9d:9f:d1:a7:bb:b4:b9:5a:f1:06:ea:0d:c6:b3:c7:ff:3a:91:
b2:cd:70:a3:52:28:ac:96:f2:04:e5:cb:57:c7:d9:1b:b3:05:
59:8c:ed:04:c8:61:1d:75:ce:16:d2:52:d9:a8:d7:7f:f6:f4:
9f:bb:b1:28:05:aa:e9:80:ff:7b:04:f8:89:0b:ed:8b:1d:70:
a7:7b:12:91:dc:29:b3:35:fa:88:e8:00:72:5a:21:f0:59:e5:
95:c4:10:71:f1:1c:7a:c3:f9:9b:a0:48:f8:6d:f7:59:de:d3:
58:03:fa:97:3e:41:e3:8c:00:bb:32:7b:50:57:4b:85:31:40:
e6:c7:45:ae:52:a9:4f:13:a3:d9:3b:80:a9:e3:79:f3:e2:24:
85:7a:b8:86:a5:78:ac:5a:58:b3:68:bf:97:9b:fe:29:50:8f:
92:da:11:a0:fc:4f:be:5d:73:1e:84:64:07:bb:f4:57:89:13:
d4:a7:b0:43:ce:f0:0a:e2:1b:3d:97:b4:4e:96:48:95:43:eb:
04:aa:0a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:42:04 2024 by rpki-client on console-fra.rpki-client.org