Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34332e302f32342d3234203d3e20323134303234.roa
File: 33312e362e34332e302f32342d3234203d3e20323134303234.roa (raw, json)
Hash identifier: GQikHXDYOcAke4c7ob6YHbl5U8LeW6TR6J3aRZSs9hQ=
Subject key identifier: 58:9F:50:F6:5A:F8:25:1F:CE:27:27:9B:AE:90:94:D5:64:9A:15:5C
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 6630A8CBF71DDCE1ABAF7EF230DE78C95D80CE17
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34332e302f32342d3234203d3e20323134303234.roa
Signing time: Sat 09 Nov 2024 13:06:14 +0000
ROA not before: Sat 09 Nov 2024 13:01:14 +0000
ROA not after: Sat 08 Nov 2025 13:06:14 +0000
asID: 214024
IP address blocks: 31.6.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:30:a8:cb:f7:1d:dc:e1:ab:af:7e:f2:30:de:78:c9:5d:80:ce:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Nov 9 13:01:14 2024 GMT
Not After : Nov 8 13:06:14 2025 GMT
Subject: CN=589F50F65AF8251FCE27279BAE9094D5649A155C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:12:4a:0e:0e:7a:7b:98:ac:3c:2f:c7:a8:0c:
db:c8:b6:ea:fe:fc:7a:16:36:da:21:be:bd:56:1c:
14:b1:ea:ce:6a:98:01:c1:53:c3:07:3b:8b:14:af:
86:56:1c:b6:7d:82:07:da:b2:19:e3:fd:ad:37:42:
8a:23:f5:33:67:37:46:6e:40:2a:85:d4:e6:dd:4a:
12:d6:c2:92:82:a1:a7:37:e5:46:d4:ae:af:f3:19:
8a:6d:61:1b:0e:03:5a:c3:17:06:92:ba:f1:2c:18:
eb:cb:31:6b:17:4b:b6:1a:96:05:c3:32:fd:a6:b5:
29:79:ab:31:52:7e:2a:d9:7d:6c:94:30:cc:85:e7:
7f:0a:f6:18:29:04:f8:84:e7:8f:25:9e:a4:85:83:
84:d9:eb:fd:0a:dd:b9:c2:24:d4:25:92:fa:9f:69:
2e:76:4e:71:56:70:68:78:55:0b:38:7e:93:49:0d:
2a:2e:26:b7:3b:d6:67:6e:9a:5f:f4:97:51:44:89:
0a:82:dd:45:54:cc:dc:83:00:c3:20:e3:29:c5:f6:
5e:22:e1:9b:c0:e6:1e:22:8a:9d:ff:e5:64:de:c4:
27:fb:39:a5:31:89:e8:ef:8f:05:5f:c6:c3:c6:a6:
77:66:7f:2e:bc:3f:26:dc:6b:c4:09:02:89:08:6d:
71:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9F:50:F6:5A:F8:25:1F:CE:27:27:9B:AE:90:94:D5:64:9A:15:5C
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e34332e302f32342d3234203d3e20323134303234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.43.0/24
Signature Algorithm: sha256WithRSAEncryption
92:38:85:a4:6d:af:b2:99:72:de:58:b0:4c:03:fc:fb:e9:25:
03:58:0f:ea:38:b6:fd:b0:e1:a7:ac:42:47:14:10:b1:78:22:
c4:60:66:a9:c7:d5:e7:e1:7e:c5:e6:ee:28:7d:a6:c0:a4:cc:
6a:40:48:a5:96:06:2c:dc:e9:dd:8c:0d:bc:3e:5b:df:12:2b:
33:75:ab:a6:8f:ce:ae:7d:5c:1d:6e:fb:71:54:1f:c6:13:bb:
5b:b5:e0:6e:29:b7:c4:f0:67:ed:47:43:78:74:17:3b:fb:1e:
94:cc:26:8c:7f:61:69:20:a6:f1:66:66:78:0f:c8:e1:fb:a2:
42:21:b9:dd:ad:f3:27:c7:96:76:d7:92:c5:bf:9c:2c:15:3b:
2e:5e:c1:09:39:40:42:a3:81:6a:38:5b:20:60:97:38:21:6c:
db:15:57:69:c9:32:66:30:44:7e:d6:c5:f4:ca:7d:5e:96:83:
8c:6c:30:6c:16:30:03:c9:34:20:a3:0f:7a:ca:a8:0b:78:94:
4e:fd:35:ec:4f:3d:b9:44:4c:de:00:44:64:ae:6e:8e:8d:88:
cc:30:64:07:ea:90:33:57:7b:28:e8:a3:2e:88:6e:a9:fc:f1:
e3:44:d0:ab:9f:bd:86:ad:97:7f:5d:e4:c5:21:ba:a9:ce:cd:
01:27:c8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:06:13 2024 by rpki-client on console-fra.rpki-client.org