Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31362e302f32342d3234203d3e20323135373634.roa
File: 33312e362e31362e302f32342d3234203d3e20323135373634.roa (raw, json)
Hash identifier: jM0Rucu7GqzDygRJDHVMvoIy7yl92IOtjU8nP/FfmoU=
Subject key identifier: A8:33:AA:C1:AB:B4:93:7A:29:33:33:9B:CF:09:C5:2B:5E:15:4E:6E
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 1DC2FBBA8A6D70DAB9D48FBB6BE5BDF58FD91472
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31362e302f32342d3234203d3e20323135373634.roa
Signing time: Sun 08 Dec 2024 13:53:48 +0000
ROA not before: Sun 08 Dec 2024 13:48:48 +0000
ROA not after: Sun 07 Dec 2025 13:53:48 +0000
asID: 215764
IP address blocks: 31.6.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 10:42:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:c2:fb:ba:8a:6d:70:da:b9:d4:8f:bb:6b:e5:bd:f5:8f:d9:14:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Dec 8 13:48:48 2024 GMT
Not After : Dec 7 13:53:48 2025 GMT
Subject: CN=A833AAC1ABB4937A2933339BCF09C52B5E154E6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:71:68:f0:67:10:6e:f5:c9:6c:a3:86:39:19:
26:b4:4b:ae:08:75:9d:1f:76:ae:02:1f:31:21:1a:
f8:41:c1:03:d3:ce:3b:19:72:4b:f0:19:ee:e3:4b:
a0:2c:68:e4:b4:ed:ea:8f:1c:3f:39:64:4e:66:29:
2c:d1:40:ed:90:a3:ad:7b:f0:a0:39:31:45:70:88:
87:f1:1b:fc:50:3a:d8:2d:47:e6:5f:f1:50:3c:c8:
e4:87:05:72:4b:7d:f3:dc:b7:02:07:77:c3:37:49:
c1:23:b8:01:85:71:f4:0a:27:ed:d3:03:6b:96:d0:
d5:34:75:cc:a1:11:28:f0:39:97:e3:e5:26:a7:43:
51:61:9c:30:32:46:00:ff:4a:0b:50:e9:6b:27:fc:
bc:2e:7c:3b:09:9e:31:9a:41:26:b9:0a:1a:b7:3d:
13:34:00:fd:27:5f:2c:23:21:61:f7:13:b2:48:8f:
f7:5a:03:17:e5:83:72:9f:51:63:9f:f7:ef:bb:ab:
02:f2:3d:44:cb:fb:93:a1:44:e7:8f:e3:4a:f8:35:
20:63:5b:cc:b0:db:db:7a:6f:ec:20:e3:b6:02:7b:
48:af:d5:c3:99:b7:b7:a5:8e:cd:08:5a:8a:69:9a:
39:77:7d:76:65:87:e6:ba:1d:39:c2:f3:db:0d:1b:
bc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:33:AA:C1:AB:B4:93:7A:29:33:33:9B:CF:09:C5:2B:5E:15:4E:6E
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31362e302f32342d3234203d3e20323135373634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.16.0/24
Signature Algorithm: sha256WithRSAEncryption
06:fd:2a:16:21:1b:31:c0:f4:26:96:dc:97:4b:d6:3d:ad:b6:
92:fd:70:24:ff:8b:98:c9:a7:80:91:1c:12:c1:90:25:a2:e0:
07:b9:fe:30:af:b7:e5:ca:de:70:c0:8c:9f:af:62:e3:fe:01:
0b:74:65:2f:a3:21:07:48:b7:eb:c9:b7:bf:70:1d:af:b8:47:
31:3b:74:29:10:7e:f5:ed:4b:f5:10:ed:55:2b:ad:c6:dc:33:
90:1a:e7:f8:1c:17:ac:72:fb:27:08:74:3d:15:b2:7d:04:35:
3b:b0:f8:81:8c:3d:95:25:94:fd:b1:8e:ad:41:98:10:78:1b:
84:d9:7a:f5:15:c5:5a:5e:d4:a1:74:c5:47:a2:80:5a:91:1c:
2d:91:68:fa:81:92:d4:60:82:e3:ba:88:28:53:b1:54:e8:37:
2e:a5:1e:10:cc:57:d3:e1:31:e7:38:83:66:17:78:ee:04:24:
b1:f8:4a:71:9a:e5:18:c4:6e:7c:b3:68:b3:1c:db:02:80:40:
53:a5:4f:a0:4c:dd:3b:94:36:33:f4:bd:18:cd:c9:73:b6:84:
ff:3c:43:91:98:12:9a:f8:71:8e:85:7c:ee:d7:c9:ad:eb:f4:
1b:27:41:85:27:80:80:1e:f8:a3:30:c1:96:38:6e:21:42:d6:
e3:84:11:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:46:10 2025 by rpki-client