Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3139352e382e34382e302f32342d3234203d3e203630343538.roa
File: 3139352e382e34382e302f32342d3234203d3e203630343538.roa (raw, json)
Hash identifier: RpXb99JBtcXc1SRWEFWQruGINFB9BMjVnVQo59s25bw=
Subject key identifier: 8B:7E:6A:FA:8C:8E:C8:CB:93:1E:52:8C:FD:F3:F2:F5:FF:EC:35:BA
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 78D751A3A418ED827178748E68CE4083D9A9C5A1
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3139352e382e34382e302f32342d3234203d3e203630343538.roa
Signing time: Mon 03 Jun 2024 06:05:17 +0000
ROA not before: Mon 03 Jun 2024 06:00:17 +0000
ROA not after: Mon 02 Jun 2025 06:05:17 +0000
asID: 60458
IP address blocks: 195.8.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:d7:51:a3:a4:18:ed:82:71:78:74:8e:68:ce:40:83:d9:a9:c5:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: Jun 3 06:00:17 2024 GMT
Not After : Jun 2 06:05:17 2025 GMT
Subject: CN=8B7E6AFA8C8EC8CB931E528CFDF3F2F5FFEC35BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9d:67:c3:5e:d0:46:f0:9d:8f:27:f9:ea:20:
a3:87:cf:3f:95:5c:c6:f5:56:5f:8d:d2:f1:f3:6a:
da:90:45:d6:13:10:52:4f:1d:1d:b9:9f:97:70:ea:
39:b4:c4:71:83:25:1e:c1:cd:89:3a:e3:f9:3d:80:
20:7a:10:6f:1a:c3:14:1c:e8:d6:e4:3c:28:8d:ff:
ef:51:39:d4:ad:73:9b:5f:87:7b:d9:05:0f:30:55:
27:4e:08:09:41:75:7d:0e:99:23:d1:af:37:e4:ed:
5a:b0:96:67:f9:13:73:c9:5f:13:5d:f2:5a:3a:d6:
3b:7e:ac:21:2f:0d:88:37:a7:66:cc:a1:70:03:5d:
5a:55:18:f1:82:d4:66:44:9c:9b:a5:d8:97:3e:79:
7f:d1:60:e1:59:b4:8c:34:24:b5:2f:01:1c:e3:37:
0d:8b:d8:39:e6:38:39:c3:3f:54:cd:15:bd:f5:4a:
fd:d0:a4:1d:e7:c3:52:9e:1f:52:42:53:60:51:b0:
86:ab:ef:e2:e3:6c:a5:09:53:32:5c:17:81:ca:fd:
db:94:53:90:97:68:12:96:81:9b:65:40:0b:12:bf:
00:39:9c:dc:23:5a:99:4c:05:b5:c8:77:c2:f5:4a:
f6:c3:68:85:b7:43:6a:76:83:19:c2:ea:ed:b2:92:
90:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7E:6A:FA:8C:8E:C8:CB:93:1E:52:8C:FD:F3:F2:F5:FF:EC:35:BA
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3139352e382e34382e302f32342d3234203d3e203630343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.48.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:23:24:1b:fe:10:cc:96:a9:2a:11:66:7c:27:69:b8:45:26:
28:57:39:22:ba:3f:2a:e7:63:a9:2a:39:e5:2a:f3:4e:a6:22:
3b:cd:0c:97:ae:e3:14:52:14:ee:90:93:12:59:27:41:e3:aa:
f6:39:a5:3e:db:0c:34:d0:5d:04:d1:a5:be:24:8a:f9:44:24:
86:16:63:3a:f8:88:2b:a9:3e:d4:b8:8f:eb:b8:3d:50:ba:2b:
89:cd:64:d3:f7:ec:50:22:48:af:98:3e:3c:c9:81:26:66:59:
72:93:21:1b:54:ca:c2:e8:b9:e0:e9:d4:bf:4b:eb:18:18:fa:
52:c8:a3:b5:2f:5a:12:8b:0a:f4:d9:b9:3b:86:ba:b4:22:f6:
51:0c:7c:07:9e:46:5c:9e:5f:0e:b3:f8:38:59:8a:8c:4b:71:
6d:b3:f4:54:23:75:75:de:8c:43:a1:26:3d:f3:7a:4b:36:c5:
cd:8d:e0:a8:7b:3a:fd:17:8d:80:05:d4:61:d6:c5:27:2d:8b:
ba:3e:d6:93:76:e1:db:e9:90:ae:64:a9:f4:53:2a:6b:28:7d:
3f:e3:0f:b7:2b:5b:c0:16:76:5b:94:d5:c7:19:d1:ea:b0:68:
a0:77:10:af:ed:25:08:34:ef:fe:52:6c:7b:44:72:b6:54:8a:
21:60:20:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:55:50 2024 by rpki-client on console-fra.rpki-client.org