Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33392e302f32342d3234203d3e203230343733.roa
File: 33312e362e33392e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: XtZcLtyvAzt5zZPGkporVg77vQa+kUwHbzFmIxphk3c=
Subject key identifier: E7:B5:27:66:D5:F0:54:4A:0B:C1:90:AA:A5:19:37:45:66:59:92:68
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 7A8EA2C99C5498F7BDEFEB4A0D2D58C3275300BD
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33392e302f32342d3234203d3e203230343733.roa
Signing time: Fri 07 Jun 2024 15:28:49 +0000
ROA not before: Fri 07 Jun 2024 15:23:49 +0000
ROA not after: Fri 06 Jun 2025 15:28:49 +0000
asID: 20473
IP address blocks: 31.6.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 12:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:8e:a2:c9:9c:54:98:f7:bd:ef:eb:4a:0d:2d:58:c3:27:53:00:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jun 7 15:23:49 2024 GMT
Not After : Jun 6 15:28:49 2025 GMT
Subject: CN=E7B52766D5F0544A0BC190AAA519374566599268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:67:71:3b:80:15:6b:2f:0d:cd:c6:15:02:24:
4d:55:1a:69:28:56:d2:54:49:a1:64:b0:60:33:41:
78:95:3d:e6:5f:1e:dc:6b:b4:50:18:d6:13:e4:38:
44:3f:85:f9:a1:0b:72:e7:73:98:bb:e5:37:c8:5f:
af:80:f9:64:75:91:a4:b7:cf:2a:62:47:7a:73:a5:
53:7c:3d:b3:c5:bf:2b:25:92:d9:d7:fe:62:9a:09:
a9:23:b5:04:c6:40:76:35:a6:58:a1:71:7e:41:40:
fb:1d:fd:95:a6:10:c8:4e:cf:69:d3:0f:3b:68:09:
71:3e:ae:99:95:bd:0f:d6:4c:67:ef:09:49:fe:1a:
f4:92:80:95:41:66:39:2a:94:9c:de:4a:7d:7f:e6:
c7:ac:0d:0e:66:8f:53:d7:02:89:17:a6:7c:3e:23:
98:80:45:23:d9:e5:be:fb:6c:65:1b:61:e9:f2:ee:
c3:f6:fd:eb:11:4c:85:c2:be:65:8d:8f:e1:4c:15:
4f:eb:2b:7c:26:1f:a8:dc:e0:37:69:3b:41:2c:8d:
81:ab:19:59:00:78:aa:fe:e2:d7:75:1e:73:06:63:
72:0c:87:0d:b2:7c:17:c7:3a:c7:8c:2d:2b:bf:f5:
86:e8:89:5a:4d:9b:1d:a0:7d:e1:54:c6:7f:ec:dc:
15:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B5:27:66:D5:F0:54:4A:0B:C1:90:AA:A5:19:37:45:66:59:92:68
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e33392e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.39.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:b5:ec:4c:d1:58:3e:d0:1a:71:19:00:28:b2:69:19:94:d1:
f8:70:81:22:8d:e4:bb:00:3c:48:66:5b:66:34:22:c0:ef:8d:
c2:31:94:fe:b2:95:ba:29:f7:ff:d1:51:d6:59:2b:b9:f5:dd:
d3:14:8f:2a:66:05:c3:4a:b2:30:12:a1:61:74:5a:91:8e:96:
81:ef:3d:0c:7c:4f:b7:a4:50:7f:27:09:54:be:27:12:b8:ca:
a6:21:61:c6:37:ca:d2:ee:3a:36:87:aa:d9:67:56:08:d5:8f:
6b:02:62:04:1d:14:a1:08:43:74:b7:9c:33:56:20:3d:29:5e:
ae:52:5f:da:59:8a:bb:8a:54:12:5f:fc:16:4e:6b:1f:f0:de:
17:48:bb:5c:7f:89:e5:9b:d1:7a:37:ab:d7:f4:66:87:16:c9:
93:44:9d:6a:51:09:b7:ca:e9:72:1b:32:16:eb:2e:34:c1:35:
53:6f:bd:5a:80:bc:68:a0:d9:89:ab:98:2e:7b:49:58:03:4f:
31:4a:a8:51:0f:ad:1b:45:4e:37:73:fb:d5:a5:d4:55:e9:ca:
ed:ef:2e:0f:79:7c:96:58:e1:a4:eb:0c:59:be:e5:42:a9:da:
a7:78:a3:ea:e9:66:c1:cc:29:6f:b2:3a:79:74:d0:40:27:67:
bc:01:26:1b
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUeo6iyZxUmPe97+tKDS1YwydTAL0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNDA2MDcxNTIzNDlaFw0yNTA2MDYxNTI4NDlaMDMxMTAvBgNV
BAMTKEU3QjUyNzY2RDVGMDU0NEEwQkMxOTBBQUE1MTkzNzQ1NjY1OTkyNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Z3E7gBVrLw3NxhUCJE1VGmko
VtJUSaFksGAzQXiVPeZfHtxrtFAY1hPkOEQ/hfmhC3Lnc5i75TfIX6+A+WR1kaS3
zypiR3pzpVN8PbPFvyslktnX/mKaCakjtQTGQHY1plihcX5BQPsd/ZWmEMhOz2nT
DztoCXE+rpmVvQ/WTGfvCUn+GvSSgJVBZjkqlJzeSn1/5sesDQ5mj1PXAokXpnw+
I5iARSPZ5b77bGUbYeny7sP2/esRTIXCvmWNj+FMFU/rK3wmH6jc4DdpO0EsjYGr
GVkAeKr+4td1HnMGY3IMhw2yfBfHOseMLSu/9YboiVpNmx2gfeFUxn/s3BW/AgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQU57UnZtXwVEoLwZCqpRk3RWZZkmgwHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTMzMzkyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzQzNzMzLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHwYnMA0G
CSqGSIb3DQEBCwUAA4IBAQB+texM0Vg+0BpxGQAosmkZlNH4cIEijeS7ADxIZltm
NCLA743CMZT+spW6Kff/0VHWWSu59d3TFI8qZgXDSrIwEqFhdFqRjpaB7z0MfE+3
pFB/JwlUvicSuMqmIWHGN8rS7jo2h6rZZ1YI1Y9rAmIEHRShCEN0t5wzViA9KV6u
Ul/aWYq7ilQSX/wWTmsf8N4XSLtcf4nlm9F6N6vX9GaHFsmTRJ1qUQm3yulyGzIW
6y40wTVTb71agLxooNmJq5gue0lYA08xSqhRD60bRU43c/vVpdRV6crt7y4PeXyW
WOGk6wxZvuVCqdqneKPq6WbBzClvsjp5dNBAJ2e8ASYb
-----END CERTIFICATE-----
Generated at Sat Sep 7 15:28:59 2024 by rpki-client on console-ams.rpki-client.org