Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36362e302f32342d3234203d3e20313532373030.roa
File: 34352e39352e36362e302f32342d3234203d3e20313532373030.roa (raw, json)
Hash identifier: uso1sD+tamT2C3AJlNJGvdhIFi9OiRIkIUGVfgcpmcA=
Subject key identifier: 84:C8:4D:D4:63:D6:34:42:93:0C:59:96:8B:C0:C9:4B:36:2E:A4:87
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 1350D254C5850C87ECB591A844281F4F6B68B41C
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36362e302f32342d3234203d3e20313532373030.roa
Signing time: Tue 27 Aug 2024 13:51:43 +0000
ROA not before: Tue 27 Aug 2024 13:46:43 +0000
ROA not after: Tue 26 Aug 2025 13:51:43 +0000
asID: 152700
IP address blocks: 45.95.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:50:d2:54:c5:85:0c:87:ec:b5:91:a8:44:28:1f:4f:6b:68:b4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Aug 27 13:46:43 2024 GMT
Not After : Aug 26 13:51:43 2025 GMT
Subject: CN=84C84DD463D63442930C59968BC0C94B362EA487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8b:80:f3:c3:c7:3c:6d:43:23:c4:0b:64:a5:
43:a9:98:d1:fb:68:73:48:7a:e1:10:3b:a6:ee:a7:
15:54:1d:e4:d4:c2:42:fb:1e:43:13:87:cf:a4:b6:
b1:0d:1b:44:bc:31:f1:23:b7:f0:47:f6:da:7c:cb:
91:4e:06:db:90:8f:c9:24:5a:84:6f:a7:81:a9:df:
63:b4:c6:97:83:18:b9:29:28:87:73:6b:7b:83:dc:
16:66:28:6c:63:c5:54:45:69:bc:77:7c:2a:83:fe:
ea:12:74:c6:83:2d:30:86:82:fa:51:5d:9a:51:a1:
eb:7a:67:06:68:76:5a:b3:45:f5:47:4c:3b:d6:87:
07:14:f7:73:34:d0:95:cc:cb:74:18:d2:54:62:e0:
f5:8c:bd:2e:d9:1b:d7:5c:12:e2:a8:33:2a:a6:c9:
88:bf:53:f2:d5:00:17:1e:26:38:04:1e:c4:58:c5:
b3:e9:25:9c:b4:94:2b:9e:1d:63:a3:a7:65:d1:41:
41:e7:91:e7:e0:d6:2c:87:ff:2b:ff:12:27:39:26:
1b:54:2c:d1:d9:60:1b:d6:28:7a:d8:2b:fd:b4:4d:
22:25:c9:a7:d3:54:ad:a3:d7:74:20:10:72:08:8c:
1d:c3:aa:8b:7d:7d:ae:14:ca:ff:85:c7:7c:f6:53:
ad:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C8:4D:D4:63:D6:34:42:93:0C:59:96:8B:C0:C9:4B:36:2E:A4:87
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36362e302f32342d3234203d3e20313532373030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.66.0/24
Signature Algorithm: sha256WithRSAEncryption
56:3a:62:c2:5a:52:3a:18:3b:08:6b:4c:7b:29:c8:59:98:8b:
ca:1f:da:ff:4c:1c:db:b3:3a:f1:9f:87:01:a8:e5:41:95:7b:
15:88:d7:24:c3:fb:76:19:ff:0a:b6:f6:2a:c9:83:e9:59:3c:
7c:30:cd:47:8b:af:80:0f:31:8c:f1:0f:45:35:e5:1d:a0:22:
c0:6b:fa:8e:3c:32:c6:50:95:f7:a6:06:df:9e:9a:e9:5d:7d:
0c:07:81:32:b4:b1:37:00:59:18:c3:40:a7:3f:71:0a:98:b0:
d3:46:94:7d:28:82:96:13:e9:2d:d0:eb:6e:70:db:34:3c:58:
2c:5e:80:c3:cf:83:fc:dc:00:3f:7c:80:f1:e7:a1:a5:41:0f:
45:6a:f6:06:08:24:48:88:30:41:65:29:77:92:f8:28:67:f2:
55:38:24:1d:a1:e2:6c:59:c4:f0:cb:30:b4:82:32:0e:37:82:
45:ed:f1:12:33:71:fc:ac:4a:87:65:93:5d:3d:9d:2c:f6:ea:
d5:c4:7d:c1:b1:51:80:c7:39:0b:d6:37:60:b3:bd:d0:e2:62:
30:be:e6:ab:7d:07:98:d0:c9:c3:c4:d9:5d:e1:90:e8:dc:0d:
33:ac:4b:3b:61:b0:19:67:8d:00:ce:5b:83:70:52:3b:06:7e:
ef:0b:3b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:50:40 2024 by rpki-client on console-fra.rpki-client.org