Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3135382e35382e302f32342d3234203d3e20313335333931.roa
File: 38352e3135382e35382e302f32342d3234203d3e20313335333931.roa (raw, json)
Hash identifier: v68RqnSfQyR25ucSedmfpQOAqasU3NlxAKSNbC+UJtQ=
Subject key identifier: C2:33:97:FA:FF:A7:E5:1F:6A:DE:26:BA:F3:3B:4E:AB:88:CD:E1:95
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 1805F0325A3B56258FBA12A4175C7F650E654837
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3135382e35382e302f32342d3234203d3e20313335333931.roa
Signing time: Wed 26 Jun 2024 06:53:13 +0000
ROA not before: Wed 26 Jun 2024 06:48:13 +0000
ROA not after: Wed 25 Jun 2025 06:53:13 +0000
asID: 135391
IP address blocks: 85.158.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:05:f0:32:5a:3b:56:25:8f:ba:12:a4:17:5c:7f:65:0e:65:48:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Jun 26 06:48:13 2024 GMT
Not After : Jun 25 06:53:13 2025 GMT
Subject: CN=C23397FAFFA7E51F6ADE26BAF33B4EAB88CDE195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:76:b5:3a:00:f3:1a:4d:7c:80:41:c7:80:ca:
5c:bc:54:61:46:c2:4c:04:a2:c1:58:28:4d:bf:ff:
73:d7:b5:d6:90:fc:d9:87:b9:a5:54:34:da:16:c2:
a5:b5:96:4b:90:69:90:be:cd:56:93:cd:01:04:33:
b8:57:67:7b:04:7a:36:c1:c9:65:61:d2:c3:fb:6d:
fb:ad:8b:74:1a:33:69:b5:27:4e:e0:24:ab:03:cc:
7d:8d:db:97:90:dd:93:ba:fe:7d:37:28:a5:ce:c4:
f7:0d:d2:71:2b:4a:73:d1:8a:1d:19:55:33:bf:8b:
9b:4a:6f:bd:ba:1b:1c:19:ec:f1:75:54:7e:2b:7a:
a3:c0:e7:65:94:38:79:8e:14:c3:24:4a:a3:a8:66:
16:2c:ab:32:59:41:59:95:db:26:76:ad:37:ef:dd:
68:29:c3:8b:4b:5f:39:56:20:85:91:fe:d6:7d:26:
4e:37:da:f3:a5:c0:03:38:29:56:64:4e:ed:42:93:
08:67:15:10:40:3b:81:00:6f:33:f5:64:e5:0c:77:
b6:a8:61:8e:4a:c3:4a:a3:0c:92:c7:18:da:62:a7:
c9:cc:66:dc:9b:f0:60:42:5b:d9:7b:83:7b:8f:95:
5e:69:68:79:af:53:a8:7e:a6:56:64:cf:fc:d9:4e:
47:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:33:97:FA:FF:A7:E5:1F:6A:DE:26:BA:F3:3B:4E:AB:88:CD:E1:95
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3135382e35382e302f32342d3234203d3e20313335333931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.58.0/24
Signature Algorithm: sha256WithRSAEncryption
13:9f:a5:24:f4:f2:72:31:f9:21:2b:71:0f:31:f1:52:12:3f:
14:cb:a8:ca:fb:ea:d2:f6:5a:5a:de:3c:0c:fe:f9:4d:cc:5b:
6d:e9:57:eb:d6:3e:73:c2:d6:a4:16:96:59:67:f5:e4:2f:ef:
73:3b:dd:66:9c:6f:75:22:7e:c6:e9:41:68:95:57:f4:9c:ec:
68:ff:92:62:48:95:34:e7:8f:f0:32:7e:74:8e:77:34:fb:f1:
69:95:54:cd:37:89:dd:c6:d5:9e:c8:4c:d6:af:b8:b9:3d:ff:
41:33:08:9e:94:2a:9c:21:44:71:c3:ec:3e:05:52:96:40:48:
77:e9:4b:bf:cd:d4:80:74:83:ad:2c:28:b2:cb:66:51:4b:68:
5b:35:5e:b4:2b:be:f5:f7:c5:cc:85:99:31:65:dd:78:a9:77:
e5:bc:53:a5:fd:b0:a4:d0:4f:e8:e0:d5:56:2a:a6:65:19:5b:
86:17:aa:19:2a:84:0b:8d:13:31:94:a0:cc:68:bc:bf:06:94:
b6:2f:bd:18:60:e1:6f:eb:d0:8b:bf:d8:4d:f3:51:de:ee:b8:
2d:ae:82:a8:ec:97:c5:fe:1f:9f:0c:6d:ec:94:d2:a6:94:69:
e3:dc:1d:c5:b1:dc:4e:13:fe:a0:ac:5d:f7:52:35:18:15:25:
26:1f:7d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:54:59 2024 by rpki-client on console-ams.rpki-client.org