Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3232332e302f32342d3234203d3e203136363238.roa
File: 38352e3233372e3232332e302f32342d3234203d3e203136363238.roa (raw, json)
Hash identifier: AkyIStfPL62B1/hxHtHYa4khNhZgJ/PyuDssfOaZfPo=
Subject key identifier: B1:DB:6D:DB:23:20:50:1E:E8:C6:B2:DF:AD:AC:7C:4C:FB:B1:2D:7C
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 6429BC1BCFE7D092C782643CE4C3EEC93AB642F7
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3232332e302f32342d3234203d3e203136363238.roa
Signing time: Sat 27 Jan 2024 09:51:12 +0000
ROA not before: Sat 27 Jan 2024 09:46:12 +0000
ROA not after: Sat 25 Jan 2025 09:51:12 +0000
asID: 16628
IP address blocks: 85.237.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:29:bc:1b:cf:e7:d0:92:c7:82:64:3c:e4:c3:ee:c9:3a:b6:42:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Jan 27 09:46:12 2024 GMT
Not After : Jan 25 09:51:12 2025 GMT
Subject: CN=B1DB6DDB2320501EE8C6B2DFADAC7C4CFBB12D7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:97:27:35:17:cf:9f:ff:b8:69:03:87:72:cc:
58:0e:a6:ab:85:81:21:cf:aa:27:49:c0:86:dd:de:
d4:e8:16:c4:0c:a5:e9:23:84:5b:97:e8:53:76:3b:
d1:1d:c6:04:61:05:6d:e4:3f:17:f8:fa:54:7a:84:
0f:8d:a2:f8:4d:d9:ea:cf:08:13:ba:15:75:04:7c:
66:26:35:b0:59:81:6a:81:65:93:81:16:fa:fa:78:
15:db:cb:11:ea:22:b1:b4:dd:42:2d:85:11:a5:ae:
ce:17:73:5d:3d:64:4f:93:c6:3d:96:69:43:ff:46:
e1:c2:a8:0b:12:50:a8:05:e5:4a:cc:57:b5:1b:e6:
27:0a:5b:fc:08:24:0f:70:23:cf:28:2b:1c:66:06:
71:fa:88:47:4c:09:b0:55:89:d9:bc:e2:f1:37:9a:
aa:46:64:d9:6d:dc:cf:39:64:a7:f7:a9:84:76:52:
76:95:05:0a:6a:28:b4:ee:48:ec:10:84:9b:c8:8a:
39:4d:b7:b2:e6:72:51:77:83:5d:4b:64:c3:55:41:
08:4a:a3:4c:cf:a5:de:60:17:3e:43:e1:48:b8:48:
43:55:b8:64:ce:f1:38:80:fc:8b:ae:aa:2d:59:7f:
85:ae:92:c2:26:00:8a:21:c7:74:c8:19:0f:ac:62:
f3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:DB:6D:DB:23:20:50:1E:E8:C6:B2:DF:AD:AC:7C:4C:FB:B1:2D:7C
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3232332e302f32342d3234203d3e203136363238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.223.0/24
Signature Algorithm: sha256WithRSAEncryption
61:2e:de:47:bd:90:5f:a1:ba:3a:d2:d2:ae:de:c0:60:f7:ba:
19:05:f7:23:53:eb:86:69:60:71:f5:ed:b1:09:3b:03:30:42:
23:f6:17:ba:9f:5f:68:50:d2:1e:c9:bf:29:7b:49:1f:b8:95:
b0:dd:99:4f:11:3f:74:4a:56:29:38:ea:a0:5d:ea:c7:7d:21:
63:de:aa:f1:ae:b6:1a:56:9f:36:e8:ea:c8:ca:f7:b6:69:45:
a8:cc:44:ed:4b:cc:30:99:85:0f:52:9d:80:29:21:29:49:20:
47:1b:38:aa:3f:b4:15:fa:b4:4f:86:95:29:43:d2:36:ea:d6:
e3:a5:eb:e5:c9:1a:ca:b9:72:df:1d:f3:02:7a:32:6b:e4:56:
41:87:1f:67:ab:97:22:e4:55:c3:ef:c4:74:2e:62:69:9b:1a:
c9:33:79:68:f4:70:96:c5:71:5a:dc:36:32:d8:01:f7:e0:e6:
a5:5a:2e:fb:4e:27:e7:25:97:0e:7b:e6:fe:ef:79:d3:51:2c:
e0:77:48:7f:8c:19:e3:e4:dc:1f:7b:08:bb:7c:7f:35:36:e8:
2d:55:42:42:00:1c:c4:e2:62:32:ef:0e:a2:9a:ca:96:bf:54:
69:13:7d:dd:3f:7c:26:85:94:25:27:ff:38:36:3e:ca:09:d4:
42:65:3a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:45:24 2024 by rpki-client on console-fra.rpki-client.org