Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31372e302f32342d3234203d3e203232333633.roa
File: 33312e362e31372e302f32342d3234203d3e203232333633.roa (raw, json)
Hash identifier: 2uIMG4eMU1W2n3Dk3pOxQYZLt0NWAiWFSJ1UqN586NI=
Subject key identifier: 02:F1:5A:BD:07:79:5A:4F:0F:21:D3:E3:EE:CE:BC:A2:7C:6A:D7:D1
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 0D6D05F7967B04C56EBF8463327E4557320A8A93
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31372e302f32342d3234203d3e203232333633.roa
Signing time: Mon 02 Sep 2024 06:05:19 +0000
ROA not before: Mon 02 Sep 2024 06:00:19 +0000
ROA not after: Mon 01 Sep 2025 06:05:19 +0000
asID: 22363
IP address blocks: 31.6.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 10:42:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:6d:05:f7:96:7b:04:c5:6e:bf:84:63:32:7e:45:57:32:0a:8a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Sep 2 06:00:19 2024 GMT
Not After : Sep 1 06:05:19 2025 GMT
Subject: CN=02F15ABD07795A4F0F21D3E3EECEBCA27C6AD7D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:97:fb:40:fe:a2:72:ba:6e:3f:be:ee:a3:3f:
82:93:6d:46:62:6a:7e:b5:39:7d:b1:b4:90:5b:fa:
43:75:6b:87:57:f0:71:56:89:4b:ff:f5:10:d6:87:
01:89:c8:cd:b4:d4:1b:3a:4c:7d:40:33:c5:0a:27:
f9:2b:31:42:a9:ee:4a:b9:4c:3c:b0:94:ed:52:b2:
1f:40:d1:b0:90:5a:4f:d7:fd:03:02:da:8a:52:bf:
4b:85:d9:6c:51:12:bc:a9:5f:d8:05:ac:35:4d:69:
05:18:08:0f:32:65:1d:f7:49:c7:94:23:4b:38:3b:
8b:99:f2:91:f6:ce:e3:97:30:45:28:47:0b:df:17:
4e:7b:36:19:11:f9:52:00:23:6d:4f:7b:51:2f:de:
3e:df:41:5c:74:b7:c5:37:ca:61:a9:99:1f:fa:a1:
d1:96:82:8e:23:a2:8f:0a:15:a7:de:5d:31:5c:e6:
82:b3:6d:eb:d9:f0:ae:66:cf:d9:1b:c6:a5:8a:3f:
d1:37:2f:3e:97:9c:84:60:67:07:d4:cd:a9:5f:87:
0c:b3:2f:c2:80:1e:9b:dd:f8:56:38:7a:bb:b0:ed:
f5:d6:a1:c9:92:18:e6:9a:0b:e2:8a:8a:49:a3:64:
56:f3:b3:93:82:7a:f3:1b:55:12:eb:82:5b:9b:ee:
d9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F1:5A:BD:07:79:5A:4F:0F:21:D3:E3:EE:CE:BC:A2:7C:6A:D7:D1
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e31372e302f32342d3234203d3e203232333633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.17.0/24
Signature Algorithm: sha256WithRSAEncryption
76:85:1e:f6:e8:98:6a:d9:3c:67:a8:85:1e:ba:0b:58:43:cf:
0f:72:6b:0c:0f:ef:e3:8f:c4:cf:dd:1d:14:5c:01:10:c0:cf:
bb:52:c6:0c:27:2b:9c:a1:44:c0:55:da:6e:43:ce:84:ab:7f:
63:8a:c1:dc:eb:32:0a:7c:c6:95:da:a4:77:dc:f9:c6:5b:22:
f8:01:47:ab:37:76:33:62:b4:1b:fd:20:72:6f:23:28:f7:09:
1c:c4:e0:28:8b:ee:e3:e4:2e:df:3e:f0:f6:7e:2e:dc:1c:9f:
71:46:e9:ec:0d:80:62:0e:bc:66:f0:d3:e0:ca:c1:96:3c:61:
a7:64:87:76:af:1c:cf:67:1a:00:2f:6e:af:96:48:03:94:4d:
da:c3:23:e0:1b:85:3d:68:7f:fa:41:04:64:89:d1:42:6c:b9:
db:aa:e3:09:68:47:ef:e1:79:14:09:ca:9c:f1:0a:ee:c9:d4:
3d:e0:64:09:7c:c3:a4:d6:97:c6:cc:e7:74:b8:24:a0:3e:47:
f2:87:b8:f9:bb:f6:e0:ea:ba:42:4e:19:c5:41:cf:9c:ec:96:
88:e4:3a:ee:1d:1a:8f:3e:90:8e:01:9a:57:2c:5a:db:64:b9:
69:a9:50:51:3c:86:dc:38:4c:6f:1a:8d:02:0d:e8:cc:bb:d2:
bc:da:e8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:46:32 2025 by rpki-client