Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3139332e3130392e3139372e302f32342d3234203d3e20313335333931.roa
File: 3139332e3130392e3139372e302f32342d3234203d3e20313335333931.roa (raw, json)
Hash identifier: C67DrlikmsQd7WK5Lgj5iyfwRm8sHSxDy7dtoyE+jWE=
Subject key identifier: 3F:A1:19:98:0B:91:0B:38:C1:15:BD:76:EB:8B:85:66:8C:68:B5:44
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 40DFF44BDC4EC59650734E398471862025A14A8E
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3139332e3130392e3139372e302f32342d3234203d3e20313335333931.roa
Signing time: Wed 26 Jun 2024 06:53:15 +0000
ROA not before: Wed 26 Jun 2024 06:48:15 +0000
ROA not after: Wed 25 Jun 2025 06:53:15 +0000
asID: 135391
IP address blocks: 193.109.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:df:f4:4b:dc:4e:c5:96:50:73:4e:39:84:71:86:20:25:a1:4a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Jun 26 06:48:15 2024 GMT
Not After : Jun 25 06:53:15 2025 GMT
Subject: CN=3FA119980B910B38C115BD76EB8B85668C68B544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:23:2c:74:9d:52:bd:12:4f:93:2d:ce:46:0e:
b7:e7:8b:d2:63:90:23:1d:40:4f:36:da:8f:1d:b4:
39:05:a0:77:a1:a4:34:42:c8:4f:40:b6:87:b8:b8:
62:b9:ce:38:f6:27:3d:90:20:96:60:7e:99:76:3e:
0c:02:dd:25:05:18:7f:7d:b1:11:ca:75:ca:85:86:
47:09:4d:71:5b:10:35:17:ca:53:96:bf:74:51:e5:
4e:91:90:a6:be:6d:4c:28:ac:6b:aa:37:4a:6f:c5:
0e:41:18:46:66:39:dd:5d:b3:22:6e:c1:27:8d:4a:
ba:28:12:a5:31:81:0b:d2:1a:1c:47:ba:1d:b3:54:
f4:af:4b:50:a6:38:19:7d:9b:35:6e:c3:b4:a6:9c:
18:92:90:30:64:2a:d0:5f:de:0c:18:1d:2f:8f:75:
c8:07:10:20:95:0c:e1:67:f5:69:ab:b1:c6:2e:67:
ad:10:f2:28:a6:a1:1e:5e:7e:b0:89:ba:50:de:fe:
e8:65:cf:7a:3b:67:f5:f3:59:d4:04:07:d9:f6:30:
6a:9e:c5:20:bd:68:5e:81:b0:59:aa:f8:ae:81:39:
2d:ff:ef:b7:40:d5:60:76:9c:54:fa:c6:06:95:17:
f9:71:91:a5:9c:9f:25:6d:2d:41:c8:f1:5b:ae:64:
4b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A1:19:98:0B:91:0B:38:C1:15:BD:76:EB:8B:85:66:8C:68:B5:44
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/3139332e3130392e3139372e302f32342d3234203d3e20313335333931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.197.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:ab:1a:7d:76:4e:71:c3:96:15:d7:68:a2:36:78:6d:11:71:
d9:07:df:d2:a7:ab:e3:c5:3b:c3:49:cb:26:29:88:40:67:cc:
76:8b:1e:fe:0b:4f:07:51:cc:81:fe:9a:db:50:19:44:65:70:
18:67:f0:e8:09:2f:c0:73:06:3e:f2:61:82:40:bb:1a:e9:dd:
5e:1b:26:87:e7:13:e7:0a:c8:53:b5:72:94:90:13:7d:c5:7f:
e5:87:0c:a5:75:16:4c:9c:00:4b:b7:c9:08:cf:bf:8a:bb:10:
8a:dd:af:6b:70:0b:b3:93:d9:95:57:04:75:35:05:ab:55:59:
1b:3b:52:64:27:7c:d0:4a:1e:d8:ff:6c:e9:f5:e9:9f:cc:a1:
af:40:97:7a:86:79:12:e9:a2:dc:73:30:8e:c8:10:cc:27:65:
5b:61:17:07:53:09:df:45:e9:b9:8e:27:c1:f8:0c:24:8a:82:
81:95:60:f4:b3:4e:0e:93:a1:70:f0:93:2b:f3:23:4b:94:f6:
59:b1:ba:d8:ef:69:64:96:ec:a6:1b:3b:d6:62:6b:fd:93:4e:
6e:f9:7d:8d:36:c8:0a:ad:d5:7c:3a:5e:4b:07:b9:83:aa:ac:
9d:81:16:4b:56:d0:43:25:5a:c5:02:60:ad:1e:ce:1d:4e:4c:
b4:21:cd:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:14:20 2024 by rpki-client on console-ams.rpki-client.org