Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/33312e3232302e3234362e302f32342d3234203d3e203432363839.roa
File: 33312e3232302e3234362e302f32342d3234203d3e203432363839.roa (raw, json)
Hash identifier: kWYP0/C1b/OL307mNeWBX4xtN7xVwlEhmP9IqStCDZc=
Subject key identifier: 93:34:E4:7F:26:17:90:F6:A3:DF:31:C6:B3:61:39:FA:AF:07:45:78
Certificate issuer: /CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Certificate serial: 4823BCD095044138F95A5A5AE4279113CFE8271C
Authority key identifier: 73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/33312e3232302e3234362e302f32342d3234203d3e203432363839.roa
Signing time: Wed 11 Sep 2024 10:49:44 +0000
ROA not before: Wed 11 Sep 2024 10:44:44 +0000
ROA not after: Wed 10 Sep 2025 10:49:44 +0000
asID: 42689
IP address blocks: 31.220.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft
rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:23:bc:d0:95:04:41:38:f9:5a:5a:5a:e4:27:91:13:cf:e8:27:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Validity
Not Before: Sep 11 10:44:44 2024 GMT
Not After : Sep 10 10:49:44 2025 GMT
Subject: CN=9334E47F261790F6A3DF31C6B36139FAAF074578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:67:7c:d8:f8:97:46:95:b1:5b:5d:4a:78:84:
1f:33:b0:f4:a0:39:1d:43:5a:70:e4:5e:8a:b1:a0:
9f:d3:e3:30:41:f4:68:00:44:93:6a:7a:86:9e:89:
97:23:d1:b3:64:a8:c8:c3:1e:0a:30:eb:4c:c9:43:
4b:68:32:c7:f3:8e:52:44:81:b8:7f:a5:1a:6a:ce:
61:93:5c:f2:ac:23:f0:16:8c:a7:f8:79:e6:27:62:
61:c9:57:ca:19:bd:8c:dc:65:1e:86:dc:fd:7c:48:
d3:ee:71:e1:d1:30:cb:8f:9e:f6:55:05:96:e8:1b:
50:f8:09:c2:f3:02:2d:36:5a:87:47:66:8e:1d:d4:
9d:89:e1:fe:44:d7:7c:99:fb:fc:52:2a:97:32:0a:
88:25:24:4c:b1:a0:0e:f0:7e:d4:13:ad:e7:db:62:
c7:d7:c9:a7:6e:75:b8:7b:82:70:d3:0a:23:53:1c:
67:ad:74:0f:38:f7:26:cb:c0:ea:4a:c5:63:e7:92:
f1:a3:fc:c3:da:fd:44:4f:24:77:2f:73:a0:c1:3c:
20:38:d3:ff:d8:1c:d3:2e:1e:be:0f:ef:44:73:0f:
6b:60:84:ee:9a:78:4f:cb:4a:2a:6d:b4:1d:2a:2c:
8b:f5:ec:da:3b:c1:9f:e2:df:ea:e3:24:c3:23:41:
1f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:34:E4:7F:26:17:90:F6:A3:DF:31:C6:B3:61:39:FA:AF:07:45:78
X509v3 Authority Key Identifier:
keyid:73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/33312e3232302e3234362e302f32342d3234203d3e203432363839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.246.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:82:5e:6c:d6:56:1c:f9:e9:0f:27:e2:72:1f:d5:b8:af:e5:
4f:53:e0:87:77:7a:c6:2e:a0:2a:6c:f4:2e:4c:92:81:31:d9:
97:0d:19:e4:48:3b:c5:d8:b3:39:6d:46:ad:e5:fc:3c:80:e7:
c5:ab:68:0d:16:e6:48:e6:1e:a9:aa:3a:e6:b2:d6:a3:cf:15:
4c:95:67:06:04:bf:1e:a2:a0:e6:4a:c4:93:25:4c:49:f9:8b:
de:04:b1:e1:aa:27:2b:15:8e:eb:88:12:2b:ad:77:7c:8f:69:
56:06:7d:0d:c0:c9:75:6a:7d:15:a3:18:47:a4:2b:ce:44:d8:
26:2f:de:fa:51:8a:51:d1:fc:2e:6f:7e:c8:76:f0:ee:b5:45:
71:a1:8f:84:ba:3b:a2:99:b3:7f:a6:6a:a1:a0:28:95:7a:d3:
c9:38:73:3c:82:7c:05:76:1f:d5:0b:3d:91:fa:57:4e:52:d5:
52:26:14:1f:e1:98:4e:65:32:60:68:a8:69:fa:70:3a:7b:ae:
9f:cd:0b:e3:c3:e7:76:98:0b:13:a1:1e:2a:76:6c:83:da:e1:
1f:92:2c:6a:1c:d5:a7:9a:77:1a:4b:30:d1:ea:7b:36:4a:bc:
3f:86:05:a4:3b:73:9c:c9:27:f1:df:0f:a5:8a:5b:93:e4:11:
8b:37:a5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:14:51 2024 by rpki-client on console-fra.rpki-client.org