Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134312e302f32342d3234203d3e203530363733.roa
File: 34352e3134382e3134312e302f32342d3234203d3e203530363733.roa (raw, json)
Hash identifier: 9qufaMayJuonideoT9rTdXE0XmizyBIgjqw/9E71hoI=
Subject key identifier: AC:B0:67:AB:17:59:FE:AD:7A:96:77:1A:75:B3:A2:D6:4A:8A:D5:FA
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 7F41A39ADD60C36AF2784C77F376E1DC242033FD
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134312e302f32342d3234203d3e203530363733.roa
Signing time: Mon 23 Sep 2024 09:43:19 +0000
ROA not before: Mon 23 Sep 2024 09:38:19 +0000
ROA not after: Mon 22 Sep 2025 09:43:19 +0000
asID: 50673
IP address blocks: 45.148.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:41:a3:9a:dd:60:c3:6a:f2:78:4c:77:f3:76:e1:dc:24:20:33:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Sep 23 09:38:19 2024 GMT
Not After : Sep 22 09:43:19 2025 GMT
Subject: CN=ACB067AB1759FEAD7A96771A75B3A2D64A8AD5FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9b:44:a2:43:91:55:91:dd:7d:4e:af:83:2f:
db:75:eb:fb:9d:c2:74:a3:20:60:36:0b:0b:ae:a9:
b0:77:ba:0c:22:e1:95:28:9e:2b:14:71:fe:f1:8a:
1c:72:cb:58:38:57:ee:29:5c:2e:01:6a:e9:b9:f6:
28:d1:1d:1a:1b:df:4c:cd:b1:bf:37:25:fa:b5:31:
e1:be:cc:fe:00:b5:33:9c:e1:8b:0b:5d:bc:86:2c:
f9:d9:70:cc:fa:14:bf:b0:ae:cf:76:cd:4c:5a:36:
e0:94:29:60:b7:03:4c:6b:13:b4:37:f0:c5:ae:3f:
eb:f6:a6:71:01:8d:be:6f:14:d1:cd:11:f8:06:18:
86:45:3f:80:ff:5e:4d:62:0d:96:a2:66:1b:70:95:
c8:56:5d:91:73:e5:34:ed:92:1b:a0:6c:77:72:fd:
49:fd:a2:08:93:93:d6:a9:d8:f9:96:71:d0:28:8e:
d7:05:f7:22:bb:64:33:8d:6f:28:e0:d5:c5:7a:d0:
32:88:6f:b6:84:d4:eb:9d:ff:06:43:05:c3:a5:74:
3e:0a:95:e6:bb:28:56:3f:7c:f2:2a:d5:4a:5d:18:
13:47:c2:cb:66:2f:1a:9e:16:f5:50:e1:5e:bb:24:
05:4f:d6:0d:15:72:3a:09:50:94:d5:19:ba:59:58:
8b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B0:67:AB:17:59:FE:AD:7A:96:77:1A:75:B3:A2:D6:4A:8A:D5:FA
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134312e302f32342d3234203d3e203530363733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.141.0/24
Signature Algorithm: sha256WithRSAEncryption
90:74:58:19:32:84:ba:c0:2b:8d:ba:8e:1b:e4:0a:6c:4f:8a:
ad:77:1a:cc:45:68:27:d9:a9:45:e8:25:dd:cb:ce:2a:58:87:
3a:c5:b3:90:bf:c1:4d:0f:47:13:98:4d:84:e0:ec:7b:b6:f7:
52:a5:b7:93:5a:08:d0:69:f7:aa:e5:6a:c8:79:c5:29:bd:89:
88:62:7f:49:07:ab:b3:9c:6f:88:c4:d0:ca:86:3b:36:b3:5e:
b8:6a:89:37:ba:2b:ee:5f:63:70:ef:d4:ff:69:41:f2:0a:d9:
3c:c1:90:ff:68:49:23:a3:6b:b3:c6:d2:78:0f:4e:fc:22:ce:
39:2e:25:a3:59:c9:06:fa:97:e1:bf:5a:2c:64:28:5d:1b:ee:
89:35:a6:0d:1e:0c:c0:1a:56:ca:00:fd:79:9a:39:eb:78:ea:
36:a4:b6:93:79:33:2b:6c:a2:5e:72:17:8e:a0:01:fb:32:9e:
a8:82:a8:12:df:8a:ef:9c:9b:52:29:4e:5f:3a:e4:4f:68:e7:
ee:c4:54:b5:ed:79:a9:23:c1:af:b3:d5:ac:69:d2:fb:b4:c1:
3f:11:69:f3:4c:d6:8d:57:c7:17:dd:17:47:1e:10:93:5b:9d:
e5:e8:be:43:ab:20:75:25:f2:32:01:f6:99:ef:0f:d3:90:17:
d0:96:84:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:39:44 2024 by rpki-client on console-ams.rpki-client.org