Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35312e302f32342d3234203d3e203331373135.roa
File: 33312e362e35312e302f32342d3234203d3e203331373135.roa (raw, json)
Hash identifier: X6dnsN1CJs0fP1ybGb9TJvW/WDDqw9gSvDR1lLmuHsI=
Subject key identifier: 0F:3C:FF:76:95:01:E8:F5:DE:6A:95:68:E3:B5:33:0A:FF:B1:B5:6D
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 35EA8F390DB9DD4D62DF28E35E513371BD7C76B3
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35312e302f32342d3234203d3e203331373135.roa
Signing time: Thu 21 Nov 2024 02:21:59 +0000
ROA not before: Thu 21 Nov 2024 02:16:59 +0000
ROA not after: Thu 20 Nov 2025 02:21:59 +0000
asID: 31715
IP address blocks: 31.6.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:ea:8f:39:0d:b9:dd:4d:62:df:28:e3:5e:51:33:71:bd:7c:76:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Nov 21 02:16:59 2024 GMT
Not After : Nov 20 02:21:59 2025 GMT
Subject: CN=0F3CFF769501E8F5DE6A9568E3B5330AFFB1B56D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:51:e1:49:ce:30:8e:35:2d:ca:05:e1:43:9b:
d7:3e:41:b0:25:a7:52:f6:44:29:1f:b8:b7:d6:86:
a6:62:24:0d:6d:21:83:b9:65:3b:e0:fd:a9:d3:20:
e6:3e:d3:05:df:9f:8d:1a:70:f5:00:0d:73:f2:60:
63:ac:4a:90:b2:dc:59:ed:da:5a:62:62:61:13:4f:
6c:99:a5:a3:27:13:1e:b8:c7:f1:60:1b:10:4b:49:
1b:01:df:c5:23:d5:f1:a4:bc:95:53:bd:41:72:64:
c0:70:ad:41:38:76:69:01:91:1b:a1:81:f0:c0:d4:
c9:66:73:ff:84:d8:c8:c7:dc:be:5b:7b:5b:6b:50:
82:c1:96:82:ff:63:18:e9:19:b3:a4:93:19:27:cb:
cd:48:fc:82:fb:f4:03:6e:e4:fa:8c:0c:0e:07:63:
af:fe:ee:78:c0:e4:59:1a:63:9d:3c:17:1b:7e:93:
95:fb:ff:c6:c6:e7:27:57:11:54:4c:af:5b:65:a8:
2a:c9:05:ae:d1:09:9f:b0:22:28:13:ed:12:96:4a:
58:a2:77:69:bb:5e:d9:09:74:34:41:0e:af:dc:e0:
2e:49:0b:4c:99:1b:74:c7:53:82:4d:27:b8:f3:ad:
bc:c4:ce:e9:d2:eb:13:95:b3:84:0d:e7:2d:7e:b3:
fc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3C:FF:76:95:01:E8:F5:DE:6A:95:68:E3:B5:33:0A:FF:B1:B5:6D
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35312e302f32342d3234203d3e203331373135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.51.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:4e:8e:6e:2e:f9:9f:d4:73:52:75:39:53:7d:35:be:96:6a:
53:04:91:86:e8:20:6e:3f:82:17:95:2c:c1:63:17:29:c5:0c:
f9:8c:81:32:88:34:24:3e:71:06:b5:d3:29:9f:65:f2:f0:41:
dd:98:8e:d3:87:67:c4:8a:1d:c2:98:58:5f:14:6d:ab:cb:bc:
d4:e6:ee:f3:fa:46:26:bc:48:de:69:6b:96:d8:f5:56:74:6e:
c0:da:33:89:f7:02:73:b2:d7:1b:76:5e:86:37:a6:ed:2e:49:
a0:28:35:5e:8a:ea:48:64:41:46:b2:dd:5a:b8:ba:e1:e5:2b:
0e:44:99:5e:00:95:0d:3c:c6:c2:cd:10:83:ee:df:cc:99:aa:
6f:52:f4:68:79:a9:12:ad:47:76:1f:ef:bd:22:a7:f9:c1:88:
89:36:44:7e:a0:6c:57:2e:ff:c9:35:d9:e0:e2:8d:7c:d0:bc:
91:dd:16:eb:2c:51:b6:0b:64:35:17:3c:fd:de:e7:3f:08:cb:
dc:42:52:99:dd:3b:2a:24:3c:1d:1a:a1:10:e2:30:54:d1:a9:
b3:c9:59:68:bd:59:53:e1:ca:d4:8d:d8:21:13:47:82:f6:70:
4e:8a:2c:00:df:04:c5:e4:c5:38:0a:66:3f:74:9d:20:2a:9c:
5f:ed:26:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:13:49 2024 by rpki-client on console-ams.rpki-client.org