Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134332e302f32342d3234203d3e20323135303731.roa
File: 34352e3134382e3134332e302f32342d3234203d3e20323135303731.roa (raw, json)
Hash identifier: 6VVOWn4txY8zzoDqxHmLSuVSG4oLS0G0RFxjjm4KeR4=
Subject key identifier: 91:0F:0A:4D:68:4D:D9:35:0E:B0:42:03:B9:A3:A4:6C:FB:44:91:80
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 3B14EE87D096E34F103C6511179207E452C91152
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134332e302f32342d3234203d3e20323135303731.roa
Signing time: Mon 14 Oct 2024 13:28:14 +0000
ROA not before: Mon 14 Oct 2024 13:23:14 +0000
ROA not after: Mon 13 Oct 2025 13:28:14 +0000
asID: 215071
IP address blocks: 45.148.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:14:ee:87:d0:96:e3:4f:10:3c:65:11:17:92:07:e4:52:c9:11:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Oct 14 13:23:14 2024 GMT
Not After : Oct 13 13:28:14 2025 GMT
Subject: CN=910F0A4D684DD9350EB04203B9A3A46CFB449180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c1:12:e7:37:69:37:c8:16:e7:1f:0d:24:05:
5e:b9:34:07:85:a9:f6:1b:4d:e5:07:cf:d3:78:dc:
e0:6f:94:18:60:10:ed:5a:93:f0:ea:32:36:e0:61:
47:00:df:0b:27:91:82:ef:2d:d8:64:01:22:a7:18:
ff:f5:5c:42:00:0e:c4:1d:8f:14:f7:f9:6b:a6:57:
dc:84:d4:5a:9d:39:25:b4:9f:a4:d5:a7:a5:2c:f1:
1b:7c:68:e0:df:35:b8:66:81:0c:b2:d9:38:c2:5c:
01:1e:71:da:41:9c:f6:2f:2f:45:47:59:dd:2f:3a:
db:4b:ce:1b:52:3d:b0:f5:b1:67:a6:31:d9:0c:54:
ae:5b:d8:f4:19:9e:98:69:39:34:24:36:8c:7b:f8:
eb:31:c9:52:97:78:39:f2:e5:65:df:86:2f:5b:58:
fb:72:1d:4f:8f:00:f0:fd:60:42:2b:57:94:5c:95:
e0:e6:c4:df:f1:70:d6:b9:61:0e:fa:31:cf:66:e3:
8f:fb:33:e4:e6:55:32:f3:0a:4f:12:e0:b9:d4:d0:
b8:cb:c8:3a:e7:72:82:66:a8:c6:96:fd:be:7a:05:
36:63:d3:be:fe:75:48:76:1f:3e:86:ff:62:66:92:
ea:62:60:0c:0e:4f:54:c5:5c:fe:48:7a:07:b4:dd:
29:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:0F:0A:4D:68:4D:D9:35:0E:B0:42:03:B9:A3:A4:6C:FB:44:91:80
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3134382e3134332e302f32342d3234203d3e20323135303731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.143.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:9f:ff:df:e0:58:c8:99:c4:1c:84:6e:3e:58:48:7e:70:0e:
09:22:43:9a:b3:90:52:11:61:ea:62:b3:b8:07:c8:f1:a8:29:
83:55:ae:61:db:4e:cc:09:e7:a2:1b:83:bc:c9:02:34:59:7a:
86:8f:fd:98:b6:2b:fc:c4:ee:49:0c:78:35:1c:ab:be:aa:39:
b7:e9:a8:9c:d3:7a:ae:79:de:7b:2f:e9:f0:ae:96:1c:db:36:
c2:5a:0e:18:f1:75:9e:0e:16:c5:13:ed:32:fc:9f:15:71:4d:
3a:d2:e0:fe:4e:0d:df:d2:c6:5d:1c:56:b1:82:c7:fa:6a:94:
51:63:83:0e:e3:b9:51:5e:a5:36:0e:0b:b9:87:cc:bb:81:e8:
35:3e:c6:76:64:10:ee:59:82:f7:77:30:62:7e:9f:f9:eb:ee:
f5:b2:f4:c3:0d:d5:ed:c5:ff:76:0c:bd:a1:a2:1d:1c:f7:8d:
68:f0:e1:6f:1c:9a:fc:4c:77:15:1c:f5:af:0b:c3:a1:92:8e:
47:6b:12:a0:70:09:fb:dc:df:8a:25:3c:ba:20:97:bc:8d:de:
51:6e:d8:71:4f:d1:2b:bd:62:57:e1:23:3c:a5:ac:f1:dc:2d:
6e:d7:7b:bc:bd:ae:c7:83:c9:68:b5:52:a8:40:5e:bb:0b:81:
e3:88:eb:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:58:16 2024 by rpki-client on console-ams.rpki-client.org