Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135332e302f32342d3234203d3e203631333137.roa
File: 3138382e3136342e3135332e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: GFU0T/cDdJ1GewNNJwvJpOAx98P/z00ohY5Osytx4uM=
Subject key identifier: 76:B4:59:33:2E:F9:8D:9E:11:1C:FF:59:A6:7D:06:B8:29:69:08:2E
Certificate issuer: /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Certificate serial: 189B2E6A29F3BB5AAD615516D5BBE0F402084611
Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135332e302f32342d3234203d3e203631333137.roa
Signing time: Thu 25 Apr 2024 03:05:16 +0000
ROA not before: Thu 25 Apr 2024 03:00:16 +0000
ROA not after: Thu 24 Apr 2025 03:05:16 +0000
asID: 61317
IP address blocks: 188.164.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl
rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 May 2024 22:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:9b:2e:6a:29:f3:bb:5a:ad:61:55:16:d5:bb:e0:f4:02:08:46:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Validity
Not Before: Apr 25 03:00:16 2024 GMT
Not After : Apr 24 03:05:16 2025 GMT
Subject: CN=76B459332EF98D9E111CFF59A67D06B82969082E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ab:5b:b4:49:8f:78:9f:83:57:78:dc:83:90:
95:a2:dd:e5:0f:95:eb:f9:97:87:69:6e:b5:8a:fe:
57:cc:a7:af:4f:ad:9b:9f:05:51:f7:a2:a7:82:90:
a9:06:da:ca:24:98:7b:bd:cd:ae:3d:1d:37:0b:57:
8c:d8:09:95:4e:ae:eb:7a:6a:bf:f1:81:09:ef:cf:
74:da:91:08:2b:65:c4:81:c0:b8:a1:0f:7e:09:a3:
4f:10:85:3d:35:2c:09:56:0e:2b:42:a2:85:f0:3d:
a4:7e:3f:b1:43:0d:8a:44:a7:0a:b7:5c:a0:39:06:
91:e9:13:e4:eb:92:a3:56:31:5a:c5:23:ce:c3:16:
c7:59:60:7a:d8:cb:23:eb:42:03:b4:a8:5a:0c:aa:
a5:7f:2d:2a:25:41:b3:50:b9:39:33:c1:7b:fa:3f:
b7:7e:6d:e5:59:6d:46:fc:33:81:1b:f0:ae:70:43:
2e:45:c8:9e:b5:9d:03:0d:d1:df:a2:c9:1a:83:51:
1b:b4:b9:d5:d6:2c:1e:4d:fc:83:05:ac:85:c3:92:
73:73:a8:d9:e9:8b:7a:ef:ba:c7:8d:c0:07:14:7b:
17:68:71:3c:45:3d:6f:b8:8d:51:09:e9:4c:4b:ef:
5f:8b:b2:ee:e2:eb:4d:a7:16:5a:e8:92:93:b1:5a:
62:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B4:59:33:2E:F9:8D:9E:11:1C:FF:59:A6:7D:06:B8:29:69:08:2E
X509v3 Authority Key Identifier:
keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/3138382e3136342e3135332e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.164.153.0/24
Signature Algorithm: sha256WithRSAEncryption
59:44:3f:92:f1:73:d4:6e:ed:ee:4e:21:0a:1c:82:8c:7a:7d:
97:b4:af:01:64:96:f4:47:14:af:46:c6:53:ab:3e:19:50:98:
26:aa:94:c7:68:26:63:9e:51:ad:f4:65:6f:15:f3:16:47:cb:
b5:57:e9:1d:7c:d0:c8:07:84:6c:9c:b4:ba:06:39:b1:1c:8b:
0c:e2:7e:bc:ff:1b:08:f0:55:9a:59:40:9f:ae:7e:46:31:5a:
bd:95:65:e4:d8:e1:78:b6:c1:45:05:94:9e:bc:bd:26:8a:40:
40:70:e5:cb:e3:2a:71:31:9a:8d:ac:3b:ce:09:14:1d:91:05:
21:fb:c7:5d:15:81:60:2a:c2:2c:0d:48:6b:c9:9b:c4:e4:59:
62:52:4b:b4:cf:58:b5:d1:2e:62:17:52:2f:e2:96:8d:07:3a:
9b:e2:56:f8:5a:74:d1:03:08:af:03:3a:c6:cb:18:09:36:78:
e2:7b:f1:7f:5b:a3:bc:1b:a0:4e:37:aa:cc:de:17:21:42:db:
8c:40:da:de:36:53:72:70:9d:9f:58:8a:50:1e:56:1a:32:d7:
e7:4f:2a:2d:59:d5:f6:87:68:4b:ad:b3:fc:a6:bb:3b:2c:98:
8e:a9:01:80:69:ad:78:4e:e2:50:d5:23:a1:a0:9a:d1:6d:74:
41:ef:77:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 05:56:44 2024 by rpki-client on console-ams.rpki-client.org