Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3137362e302f32342d3234203d3e203232333633.roa
File: 3137382e3230382e3137362e302f32342d3234203d3e203232333633.roa (raw, json)
Hash identifier: dIKueqCUyQORj6bW3DwnxDaxdtOXOXBFOFd/t1Y/yag=
Subject key identifier: 32:60:B0:F5:AB:3C:9D:75:28:54:E4:1C:33:54:8D:34:71:B3:C4:06
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 36AA7BA716C2484AA17F5A11AB87847BABA267DD
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3137362e302f32342d3234203d3e203232333633.roa
Signing time: Mon 02 Sep 2024 06:05:19 +0000
ROA not before: Mon 02 Sep 2024 06:00:19 +0000
ROA not after: Mon 01 Sep 2025 06:05:19 +0000
asID: 22363
IP address blocks: 178.208.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:aa:7b:a7:16:c2:48:4a:a1:7f:5a:11:ab:87:84:7b:ab:a2:67:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Sep 2 06:00:19 2024 GMT
Not After : Sep 1 06:05:19 2025 GMT
Subject: CN=3260B0F5AB3C9D752854E41C33548D3471B3C406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:45:5f:e1:b1:b7:f8:ce:86:b7:7f:07:b6:fa:
81:03:eb:dc:40:5a:5d:d6:ef:08:6a:ec:69:8b:6d:
17:52:c6:d4:bf:95:c9:a7:ae:ff:c1:bf:15:1e:cf:
78:98:a3:21:00:49:76:ad:e8:9a:63:26:cd:2a:3b:
5e:4e:ab:ef:e3:d5:50:a2:8f:6d:18:98:71:3e:5b:
4f:7c:ab:1f:3e:a4:93:3b:42:e4:51:67:b2:d4:57:
82:07:4b:88:03:e0:13:07:af:b6:6c:f5:92:07:9f:
88:f0:1b:32:23:4f:78:84:a0:cc:90:3d:a9:f5:52:
96:dc:be:21:ea:9c:20:9d:36:e4:6c:28:a5:ca:0d:
63:77:a6:2d:fc:ba:31:3d:bb:10:cb:b1:a1:e6:b3:
f4:e1:7c:5f:9d:ff:8d:5c:f6:43:f1:66:e0:6b:7b:
2b:d8:ca:c5:b8:06:58:79:c6:27:3c:b4:de:ad:5a:
8d:3c:d6:7a:aa:ce:6c:3d:21:fa:0a:a2:20:b5:42:
e1:d6:ef:04:86:4c:77:45:51:e3:31:10:5f:c3:1c:
c1:ae:eb:07:0f:99:fa:53:82:66:80:c8:94:a5:12:
81:22:18:9b:69:04:ef:ec:69:06:05:e4:0e:03:e9:
3c:27:00:f4:5a:1f:d0:e9:14:11:cc:89:27:9f:85:
83:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:60:B0:F5:AB:3C:9D:75:28:54:E4:1C:33:54:8D:34:71:B3:C4:06
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3137362e302f32342d3234203d3e203232333633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.208.176.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:ae:7b:ac:23:25:8e:21:ff:72:2e:23:d8:db:ab:20:dc:a9:
e9:10:40:56:ec:0b:74:19:6b:ca:03:c8:21:13:44:86:8f:b4:
a9:5a:45:3e:d6:99:82:0b:ef:a7:36:5b:d2:c6:56:84:d4:d7:
0a:fa:fc:54:4f:f5:31:3d:8a:6d:44:62:44:8a:7c:37:05:79:
dc:e8:37:40:6a:8a:9d:0e:c6:70:8b:45:96:c5:cb:ce:d7:91:
1b:3a:14:14:e7:df:de:02:6b:fc:2f:fa:bf:e8:e0:b3:57:74:
33:83:b5:e3:ed:ab:e0:f4:48:bd:c5:b6:50:15:5e:90:ae:c6:
3d:6b:78:7a:bd:3b:b2:92:7d:e8:66:60:3a:c5:23:d1:7f:f9:
2a:17:c4:dd:66:48:9c:05:f1:da:2b:cd:a9:9e:4b:38:a3:c3:
7e:4f:3f:96:fb:af:6e:67:3c:66:ec:25:5e:89:56:1e:ab:0d:
9d:fa:67:51:76:80:1e:6f:ef:4f:93:fd:c1:30:c7:ca:4a:37:
9d:10:cf:68:dd:89:16:de:4e:09:8d:32:bc:9d:07:fc:ff:d4:
31:b8:79:da:64:1f:fc:33:04:9f:22:a5:9b:97:69:7d:98:7b:
77:96:42:2e:af:03:02:10:8f:0b:8c:77:af:25:6c:23:bc:f9:
d2:b6:6e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:52:26 2024 by rpki-client on console-ams.rpki-client.org