Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3230312e302f32342d3234203d3e203134343435.roa
File: 38352e3233372e3230312e302f32342d3234203d3e203134343435.roa (raw, json)
Hash identifier: akHt5DszDypZ6QyPIIRkWJeAOQQB+lY8gVX56uHc3H4=
Subject key identifier: AC:6C:BC:68:A1:07:16:EB:31:E2:47:33:6A:8E:E9:9E:18:D1:9E:4B
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 1DDC1D46AC59E55C4DD9DE23D6E4A899C1A12F2F
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3230312e302f32342d3234203d3e203134343435.roa
Signing time: Wed 08 Nov 2023 09:21:04 +0000
ROA not before: Wed 08 Nov 2023 09:16:04 +0000
ROA not after: Wed 06 Nov 2024 09:21:04 +0000
asID: 14445
IP address blocks: 85.237.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 14:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:dc:1d:46:ac:59:e5:5c:4d:d9:de:23:d6:e4:a8:99:c1:a1:2f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Nov 8 09:16:04 2023 GMT
Not After : Nov 6 09:21:04 2024 GMT
Subject: CN=AC6CBC68A10716EB31E247336A8EE99E18D19E4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:49:87:a4:27:c0:ec:2d:2f:a6:e3:45:5f:ae:
45:77:82:7d:6f:64:74:61:27:66:dd:0c:cd:5e:b6:
8c:02:1c:ac:4b:e4:6a:a2:c9:ae:95:5f:08:18:86:
8a:3d:34:b0:46:78:a0:cb:21:b3:b0:ef:6e:f6:22:
93:17:f7:3e:ea:52:f9:aa:2f:5a:2d:49:d6:29:cb:
24:97:6d:70:eb:87:90:40:aa:3c:11:6f:12:c7:29:
dd:8c:22:9a:90:fe:49:e4:c3:ee:10:08:ec:32:50:
2b:7a:44:54:35:4c:ec:ad:6b:2b:f5:72:c4:3c:27:
90:bc:b2:25:f5:43:34:35:9f:22:64:88:02:59:d0:
0e:10:ea:88:df:f3:d7:2a:61:d9:7c:b2:7e:80:47:
5e:ce:96:11:88:e8:4a:94:db:bb:16:43:ed:2d:94:
51:11:98:84:f3:f4:79:6a:59:c6:01:bb:49:38:47:
62:53:5c:d3:07:c4:c0:a3:d0:7e:9c:d0:3d:32:28:
27:a2:96:e2:4b:99:82:cb:ad:2f:1f:9e:1b:66:4d:
92:17:b1:e7:b9:a2:7f:80:1d:96:4a:99:81:8c:7a:
e0:84:dd:17:16:7e:65:cb:d3:cb:e6:0f:7f:6c:cc:
03:c7:45:01:1f:f6:31:74:57:9f:2b:de:7b:8a:50:
a0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6C:BC:68:A1:07:16:EB:31:E2:47:33:6A:8E:E9:9E:18:D1:9E:4B
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3230312e302f32342d3234203d3e203134343435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.201.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:d6:d5:54:35:38:05:cf:6b:27:ea:10:1c:2b:54:bc:8c:e8:
03:d5:10:8f:b6:27:bd:77:35:57:f1:ff:8d:49:df:db:98:0e:
c4:a6:cd:5f:12:b2:9a:2b:e5:9a:7d:b7:6b:b3:f0:00:7a:79:
49:ef:04:82:ad:15:ab:8b:b1:26:78:90:ce:02:ba:81:fa:e2:
2e:5b:f6:5d:8a:9a:8d:d8:17:76:e1:93:dd:b5:c2:d0:76:b0:
50:61:ca:dd:57:13:8d:10:3a:5e:73:06:5c:5e:9b:ed:c8:a4:
f1:1e:de:bf:30:5c:94:9e:32:1e:05:c7:4d:66:9e:33:11:82:
c6:94:62:09:46:aa:f4:c0:f4:01:d2:7f:5f:9f:ae:69:cc:e8:
ff:b2:12:b5:cf:11:d7:18:a0:0e:88:03:c9:04:20:f9:51:4d:
1e:fb:63:51:db:4d:df:ce:46:da:bd:d0:f2:68:7e:2c:b8:26:
e6:05:46:3d:96:ca:2a:81:00:75:80:5b:d0:40:3f:8e:90:9c:
78:1c:6c:66:0d:6b:1d:f9:9b:66:c6:1d:3f:3d:a6:de:fe:c7:
3d:a3:55:07:1f:bf:d6:1a:d3:98:ab:79:f7:f3:13:4f:45:70:
2c:db:4a:83:94:16:26:ac:dc:4e:30:c1:13:3c:92:34:a0:3b:
c1:7b:67:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 19:18:35 2024 by rpki-client on console-ams.rpki-client.org