Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/33372e3230332e3136302e302f32302d3230203d3e203432363839.roa
File: 33372e3230332e3136302e302f32302d3230203d3e203432363839.roa (raw, json)
Hash identifier: 4LyLeX68FkWZMRhLLt+53mkBulz8GJpPxKho+m2RW2M=
Subject key identifier: 68:05:44:5D:81:18:ED:25:64:7F:69:8D:B5:8C:D6:7B:2E:34:0C:56
Certificate issuer: /CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Certificate serial: 53DCA7C19F93C78B6D2108472DCDA5488BD24602
Authority key identifier: 73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/33372e3230332e3136302e302f32302d3230203d3e203432363839.roa
Signing time: Thu 08 Aug 2024 10:18:02 +0000
ROA not before: Thu 08 Aug 2024 10:13:02 +0000
ROA not after: Thu 07 Aug 2025 10:18:02 +0000
asID: 42689
IP address blocks: 37.203.160.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.mft
rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 12:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:dc:a7:c1:9f:93:c7:8b:6d:21:08:47:2d:cd:a5:48:8b:d2:46:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=735d93706cbf4688ce7d60fc0ed693d4cc4a9326
Validity
Not Before: Aug 8 10:13:02 2024 GMT
Not After : Aug 7 10:18:02 2025 GMT
Subject: CN=6805445D8118ED25647F698DB58CD67B2E340C56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:14:24:c6:7c:50:16:a4:6f:4d:83:fb:18:cf:
44:e0:5a:e9:a6:1e:e7:ae:1c:f7:8e:10:8b:77:3a:
0f:bf:ac:8f:28:32:d8:20:8e:7a:b1:1d:72:29:7c:
84:d7:9e:53:7f:54:d6:37:76:40:93:b5:14:c6:5b:
28:30:24:ce:a0:63:aa:a7:42:5e:dd:15:ef:d8:b3:
72:b3:e0:e2:72:26:40:20:42:f7:d6:a9:a5:a4:79:
d1:d2:2e:1d:c8:e8:20:88:3e:e3:b0:3f:c1:5f:c4:
5c:33:54:81:c8:3f:05:a1:50:1b:d3:9c:b0:9d:db:
47:10:fb:b6:33:0d:31:37:fe:34:f6:0e:06:86:0b:
40:11:1c:75:52:40:fd:1a:dd:a3:7c:41:ee:53:ae:
26:d2:6d:8e:db:14:e2:ea:f0:73:4e:33:f0:d2:db:
e7:86:75:ce:96:06:3c:b3:55:7b:c0:ff:d5:dc:1b:
a3:fe:d0:42:fc:66:9b:99:8b:84:01:4f:ab:48:01:
59:70:91:da:58:70:de:2a:30:f7:c9:90:bc:4c:51:
bd:70:05:b6:19:f8:e5:22:06:be:86:05:1e:58:7b:
91:f4:40:45:fb:bc:dc:bb:64:ad:96:c1:43:f3:0b:
3d:42:72:11:d6:e3:fb:13:cb:ce:2f:c7:5c:36:ac:
9c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:05:44:5D:81:18:ED:25:64:7F:69:8D:B5:8C:D6:7B:2E:34:0C:56
X509v3 Authority Key Identifier:
keyid:73:5D:93:70:6C:BF:46:88:CE:7D:60:FC:0E:D6:93:D4:CC:4A:93:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/735D93706CBF4688CE7D60FC0ED693D4CC4A9326.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c12TcGy_RojOfWD8DtaT1MxKkyY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2e6da5c7-670a-41b1-96eb-3899388b292c/0/33372e3230332e3136302e302f32302d3230203d3e203432363839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.203.160.0/20
Signature Algorithm: sha256WithRSAEncryption
55:eb:7c:0c:75:75:6f:ce:de:a8:89:67:23:1a:61:75:f2:1a:
f5:74:a2:7a:28:7e:8c:07:e2:d9:68:6c:01:b2:3d:85:99:c0:
8c:f3:0e:82:01:03:ee:42:0e:bc:6b:5c:5c:2c:9a:80:15:70:
e4:53:41:fa:dd:29:8b:4b:70:ff:43:f8:b3:c4:11:b6:c2:c6:
67:10:d7:a9:c2:54:4b:48:d1:98:5f:99:d4:dd:64:1c:35:7a:
5b:53:b4:ec:c8:3e:3a:73:9c:89:b4:58:07:8f:74:78:ba:77:
3a:8b:40:0b:cd:e1:c5:f1:1e:d3:c0:14:3b:02:ec:57:d4:b1:
71:a1:d1:9e:a1:99:0c:74:72:8c:6b:1a:b8:f2:e7:25:2d:c0:
de:88:28:1a:4c:82:25:41:8c:e2:27:9c:d8:52:e6:1b:5a:1f:
4e:a4:b1:90:bc:be:86:9f:fa:4c:5b:84:40:ca:1d:90:a0:42:
fe:9d:65:54:9a:4d:0e:03:84:f7:c6:09:4d:cb:76:30:93:98:
79:ec:83:25:32:c1:f7:bd:85:0e:a9:00:c6:ce:ee:c0:00:b3:
98:0e:36:0c:c3:82:13:79:18:91:98:34:f1:99:99:aa:d0:4a:
a4:67:d2:91:3f:94:cb:41:a7:27:2b:50:18:72:54:17:98:cc:
c8:00:19:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:18:34 2024 by rpki-client on console-ams.rpki-client.org