Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32322e302f32342d3234203d3e203232333633.roa
File: 33312e362e32322e302f32342d3234203d3e203232333633.roa (raw, json)
Hash identifier: F6fiE/q77FlOhTiRcbuTf1/c2uQC9/pEJeFWgGhjvW8=
Subject key identifier: A1:10:97:07:2B:19:2F:44:B2:53:5A:37:6B:0A:76:4A:D6:A3:AB:75
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 356DF775C92FB2F120D3B4B4A2D002C87036582F
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32322e302f32342d3234203d3e203232333633.roa
Signing time: Mon 02 Sep 2024 06:05:20 +0000
ROA not before: Mon 02 Sep 2024 06:00:20 +0000
ROA not after: Mon 01 Sep 2025 06:05:20 +0000
asID: 22363
IP address blocks: 31.6.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:6d:f7:75:c9:2f:b2:f1:20:d3:b4:b4:a2:d0:02:c8:70:36:58:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Sep 2 06:00:20 2024 GMT
Not After : Sep 1 06:05:20 2025 GMT
Subject: CN=A11097072B192F44B2535A376B0A764AD6A3AB75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:89:d6:be:7b:d8:49:8d:d9:79:4a:56:57:b4:
d3:38:a1:0c:7f:bf:93:7f:85:b4:09:16:de:68:5f:
2a:5c:b1:0e:37:4e:f7:e0:1f:31:67:f5:dd:46:7d:
ba:d2:7f:c4:bd:0c:d6:3a:5a:8c:e2:ec:5e:8c:a2:
5a:39:fe:5a:b1:1e:3b:9e:d4:ca:3f:32:84:a5:d8:
cf:22:80:38:37:78:4e:77:30:53:a7:2e:b8:ab:33:
92:f3:20:4e:de:9b:78:e1:89:b2:af:73:3c:24:12:
fa:ff:d7:ae:b9:ea:10:f0:83:88:0f:52:b6:28:aa:
b5:b4:be:b3:51:96:26:69:3d:f4:b8:bb:bd:d0:61:
67:96:a5:a5:94:c0:47:50:54:56:8a:b1:d9:14:83:
bd:ee:57:f0:44:7c:55:3e:58:7b:be:cc:46:6c:c3:
9a:4f:07:d0:e3:e1:8b:e2:0f:f6:ab:9d:1f:26:fd:
90:13:c3:85:56:53:3f:06:55:83:3d:e2:7b:38:5b:
fc:d1:da:06:8b:b7:f4:a1:81:fe:8e:55:17:1a:ae:
82:ff:b3:32:eb:77:cb:c3:a8:1d:f5:c3:8a:e0:1c:
a0:30:20:2b:c7:38:4c:eb:91:7f:8b:c3:4a:79:39:
ee:f4:f7:c9:f4:19:c3:c3:fb:e9:1b:f3:59:5e:76:
5f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:10:97:07:2B:19:2F:44:B2:53:5A:37:6B:0A:76:4A:D6:A3:AB:75
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e32322e302f32342d3234203d3e203232333633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.22.0/24
Signature Algorithm: sha256WithRSAEncryption
21:7b:88:4a:b5:3d:d1:cb:41:48:71:93:37:91:f8:77:0a:4e:
38:37:1b:d9:b0:4e:d5:d5:bd:6f:ef:05:f4:a1:6f:0e:ef:19:
52:11:68:ff:68:33:d7:be:34:f0:1e:78:a2:5c:b4:92:bf:64:
1b:ea:cb:4d:e6:96:0b:a2:32:6f:5c:94:1d:d0:04:e1:5b:f8:
1f:e1:1d:4e:be:66:62:ad:06:be:a9:38:af:50:f6:c3:fe:2e:
86:ca:1b:a3:d4:59:d2:f9:2d:b1:da:a0:c1:cb:60:94:93:87:
c1:c8:9d:ab:b4:95:3c:fd:97:11:81:14:90:67:8b:fe:e4:2f:
b9:e1:2e:fd:ad:b0:92:58:dd:27:f6:c2:2d:22:fe:02:8f:58:
9b:3f:86:40:c5:49:12:b4:10:eb:fe:91:0d:ca:c3:96:a6:33:
db:d7:2f:98:a4:fc:b4:50:e7:c1:f8:4e:a7:35:a7:3c:b5:11:
57:6a:91:d9:fc:89:08:b1:71:6d:02:75:7a:42:80:da:70:28:
37:7b:e9:7d:5f:c7:f6:aa:2f:93:9e:ae:1c:5f:f9:16:fd:91:
76:36:15:f8:2d:87:4a:e5:98:b5:6d:48:38:67:2a:6d:48:de:
15:3c:39:ac:67:db:36:55:84:0e:17:ed:f8:71:b8:82:15:31:
47:97:c6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:19:05 2024 by rpki-client on console-fra.rpki-client.org