Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3139352e382e34382e302f32342d3234203d3e203630343538.roa
File: 3139352e382e34382e302f32342d3234203d3e203630343538.roa (raw, json)
Hash identifier: yFBBGyzWNG1ZamO61GNcmk1rLW9TNm/BwU0RYxt01MM=
Subject key identifier: 5A:9B:BE:1A:58:8D:A8:F6:B4:26:6C:64:53:7B:71:E9:2F:62:FE:E9
Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Certificate serial: 7FB95D671EF0FD7C33A2E78D986D27FEBEDA3533
Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3139352e382e34382e302f32342d3234203d3e203630343538.roa
Signing time: Mon 03 Jul 2023 05:41:56 +0000
ROA not before: Mon 03 Jul 2023 05:36:56 +0000
ROA not after: Mon 01 Jul 2024 05:41:56 +0000
asID: 60458
IP address blocks: 195.8.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:b9:5d:67:1e:f0:fd:7c:33:a2:e7:8d:98:6d:27:fe:be:da:35:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0
Validity
Not Before: Jul 3 05:36:56 2023 GMT
Not After : Jul 1 05:41:56 2024 GMT
Subject: CN=5A9BBE1A588DA8F6B4266C64537B71E92F62FEE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c5:3d:70:b1:cb:db:e3:6b:19:b1:5e:1a:f3:
73:25:74:14:23:49:dd:b0:25:4c:e3:24:38:b5:7c:
5f:05:9f:a7:7f:00:6a:50:98:1d:20:e1:ed:3a:2a:
08:42:d9:af:96:ed:b0:f0:10:53:bf:12:4f:0b:16:
34:03:59:de:2d:8f:b9:d4:26:16:b2:47:cd:0f:5b:
87:f1:31:5d:9b:8d:a3:49:38:a0:cb:dc:7d:3a:56:
12:ea:9c:30:17:f8:ea:dc:83:65:8c:0e:bf:67:e1:
76:f7:f8:1d:29:23:cf:a0:47:cc:38:ee:53:53:09:
de:fa:bf:b1:de:cc:82:fc:a2:9c:8d:b6:b1:85:ea:
cb:06:e5:e8:7e:35:97:e6:41:1d:f6:de:b1:ec:79:
a1:dd:5a:e3:7d:14:4f:24:26:81:92:57:88:f4:d9:
35:54:af:a2:a0:26:47:3b:58:27:56:b5:40:81:41:
76:71:c7:8f:f1:76:9e:88:77:9c:b3:00:6b:da:d9:
11:db:d4:40:d4:3c:7d:3d:90:84:00:bb:7a:42:07:
fa:5b:97:a2:f9:a2:81:c4:a0:91:fa:09:2c:41:8f:
5e:02:b7:b8:43:15:38:ec:8c:b3:3f:de:d2:ea:88:
b5:29:11:a5:e9:97:2a:24:98:11:d0:4f:3d:14:01:
fa:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9B:BE:1A:58:8D:A8:F6:B4:26:6C:64:53:7B:71:E9:2F:62:FE:E9
X509v3 Authority Key Identifier:
keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/3139352e382e34382e302f32342d3234203d3e203630343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.8.48.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:62:43:97:b2:8d:4d:4d:05:73:ea:39:91:a7:a4:50:7d:d4:
44:a5:45:31:a6:2e:90:13:91:f6:b0:d0:2e:48:19:e0:86:59:
56:23:2f:24:18:ac:65:5b:75:1a:da:84:8c:61:27:cf:ac:b3:
4c:8e:da:60:95:87:94:ed:1d:d9:41:48:a2:40:8d:78:ab:ef:
d4:8a:c9:75:98:ec:c6:99:58:52:cb:88:42:08:5a:70:96:df:
20:03:b1:ed:01:1b:81:87:18:b5:98:7a:6f:c2:70:0b:6a:94:
b7:ec:a4:62:fc:fd:06:b6:90:79:57:f7:cb:50:c8:c8:d1:5f:
57:e7:5e:99:ca:69:94:0d:79:d5:c5:1c:40:83:cf:bb:91:7a:
7b:40:c6:ad:c1:15:29:7a:0c:51:d1:ed:38:4a:54:f6:02:74:
35:0c:39:a5:32:8f:04:6f:3d:42:01:d3:9a:22:9c:ba:d1:4a:
03:a1:59:ad:fb:80:8e:50:03:8d:8a:85:75:86:5e:16:c8:b9:
28:a2:2f:0c:9d:13:bc:2d:c6:7b:e1:ec:f3:48:59:87:f2:88:
0c:22:d0:bb:78:9d:1e:e7:06:89:5b:41:dd:56:a0:c4:f9:48:
32:af:50:83:9d:67:af:b5:d8:7f:3f:f2:79:d2:13:77:f1:fd:
6c:77:43:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:02:59 2024 by rpki-client on console-ams.rpki-client.org