Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS13335.roa
File: AS13335.roa (raw, json)
Hash identifier: cnyydXHK5Moldsscf96KXHMXeYuFM6RUtAgcmp7pHpU=
Subject key identifier: A0:2B:ED:B5:23:67:7B:0C:66:7F:A8:88:4E:A2:33:45:A4:95:2F:0E
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 71ACFEC362AD674AE210DCB90D71E5173ACC007E
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS13335.roa
Signing time: Wed 23 Oct 2024 00:08:10 +0000
ROA not before: Wed 23 Oct 2024 00:03:10 +0000
ROA not after: Wed 22 Oct 2025 00:08:10 +0000
asID: 13335
IP address blocks: 45.146.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:ac:fe:c3:62:ad:67:4a:e2:10:dc:b9:0d:71:e5:17:3a:cc:00:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: Oct 23 00:03:10 2024 GMT
Not After : Oct 22 00:08:10 2025 GMT
Subject: CN=A02BEDB523677B0C667FA8884EA23345A4952F0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0d:53:d9:c6:9e:bd:b6:e8:00:1b:5a:40:cc:
94:92:94:8b:88:5a:20:d3:17:6c:94:82:10:32:c0:
12:2c:47:fb:32:7d:77:45:7c:bd:2c:c3:40:8f:24:
d0:e3:7a:e9:f1:fd:8d:c4:3d:c8:b8:c6:ca:cc:1a:
8d:16:78:26:76:73:b5:27:f1:bc:6c:62:02:f9:97:
7a:7d:ad:c6:5c:8d:b9:17:61:cd:82:be:7b:11:15:
c3:70:5a:36:9e:30:17:cc:f5:79:ab:9b:cb:8e:36:
14:e0:c3:6d:3c:21:fa:72:da:b4:1e:03:66:0c:c8:
92:af:6d:f1:39:a6:f9:9b:4d:bf:f9:f7:a4:9a:e8:
36:54:99:1d:b1:e0:46:83:f0:25:ec:48:c1:34:9e:
77:50:d9:77:62:a0:41:ab:9d:1e:1b:48:ee:e6:df:
fa:17:19:6c:af:5c:00:5b:0b:32:3f:4e:1a:1f:e1:
77:d7:b9:5d:52:53:37:9e:29:9d:6a:5b:40:5b:ae:
fe:ea:d0:b9:15:26:15:61:96:53:04:02:fb:2f:9e:
06:47:33:8a:ca:bd:ca:b6:da:a7:f2:24:81:10:47:
29:02:48:54:98:79:bb:cc:6c:48:f3:0a:7e:1d:73:
f6:06:8b:85:54:1e:64:b0:1c:50:0f:55:20:49:1a:
3e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2B:ED:B5:23:67:7B:0C:66:7F:A8:88:4E:A2:33:45:A4:95:2F:0E
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS13335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.81.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:8d:63:52:77:68:c6:13:f2:ee:0e:15:62:55:c5:7c:9d:d8:
4e:5b:1a:6f:8f:36:26:49:fd:46:76:cc:23:65:17:9c:74:03:
55:21:dd:4e:09:c6:5b:a7:02:df:54:99:4d:85:55:12:10:bc:
b5:fe:81:2c:b4:cf:be:cf:4b:03:0c:d1:02:63:0f:96:89:6d:
ea:6b:37:7a:c9:7f:7b:48:33:e5:0b:81:47:5f:6b:89:f0:e6:
69:da:cc:0e:6b:2b:0c:7c:86:08:39:5e:fa:50:f1:34:28:6f:
38:33:4a:8d:ef:36:17:b0:38:ef:16:b0:f8:27:d7:a0:e8:89:
2c:8e:58:31:89:56:33:70:37:e1:1f:33:3d:79:12:c5:52:9c:
2f:4f:d1:3c:71:15:15:a1:54:b1:02:dc:4f:93:0d:9f:2f:84:
92:30:8a:1f:4a:2f:ac:7a:be:59:33:31:9a:04:4b:5b:c5:d1:
22:c5:b9:c9:85:bb:8c:dc:99:1c:8f:be:f0:4e:58:af:cc:ce:
bb:64:b4:46:c1:19:65:21:5e:50:55:c6:bb:d0:bf:56:76:31:
df:49:96:6d:34:68:4c:89:71:8f:1c:58:a2:22:92:03:e2:da:
f5:2f:ea:fc:e2:ac:48:05:2b:a8:04:28:18:f9:15:34:4b:0a:
68:32:5b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:15:23 2024 by rpki-client on console-ams.rpki-client.org