Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35322e302f32342d3234203d3e20323037323532.roa
File: 33312e362e35322e302f32342d3234203d3e20323037323532.roa (raw, json)
Hash identifier: qt4O7t8MlsLKIqMI7IS0xE0/p6D5Aek+0pnySxdAhLw=
Subject key identifier: 2E:1A:2D:F3:60:A2:33:66:6F:27:76:FB:FE:78:EE:6F:D0:67:72:E4
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 0C3D221A32DF5D4A8581657CC2F16AB50F8AB255
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35322e302f32342d3234203d3e20323037323532.roa
Signing time: Thu 14 Nov 2024 14:01:21 +0000
ROA not before: Thu 14 Nov 2024 13:56:21 +0000
ROA not after: Thu 13 Nov 2025 14:01:21 +0000
asID: 207252
IP address blocks: 31.6.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:3d:22:1a:32:df:5d:4a:85:81:65:7c:c2:f1:6a:b5:0f:8a:b2:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Nov 14 13:56:21 2024 GMT
Not After : Nov 13 14:01:21 2025 GMT
Subject: CN=2E1A2DF360A233666F2776FBFE78EE6FD06772E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:09:7a:3b:19:60:89:5f:95:ae:0d:f8:41:3e:
10:3b:47:ca:ab:97:e2:8b:2c:72:52:c5:e1:74:19:
af:21:f8:4d:55:f9:2f:3f:ea:04:a4:65:85:5e:9c:
76:10:c0:20:e6:3b:08:be:2a:50:90:d4:76:b8:14:
ad:7c:8b:48:f2:0f:da:76:17:38:17:96:f5:76:7d:
36:52:13:22:0f:de:5f:ef:8f:7a:e9:56:f7:ca:0f:
74:8c:78:8b:6b:94:2b:b7:61:87:83:df:91:94:22:
77:c2:a2:d9:27:1d:30:3b:1c:a5:d4:e5:80:5c:a1:
8c:f6:ce:63:08:2d:6c:32:f5:b6:f8:e6:4e:a5:01:
16:1d:c5:01:7f:cb:2a:6a:d6:96:4e:86:56:8f:db:
97:ab:a5:68:17:43:a3:ef:f1:c2:a8:0d:1d:3e:89:
4b:a0:be:05:07:07:88:cb:4e:45:c3:39:74:a9:ee:
5a:d5:49:12:19:30:b3:5b:8d:dc:5c:0c:0c:21:4f:
e0:9e:dd:0b:87:e7:20:36:67:c8:7e:c5:fc:89:53:
a3:e3:b8:eb:d5:86:6b:57:09:c7:fd:7f:67:bf:5c:
af:13:66:72:3b:31:58:8b:ed:4a:19:af:41:86:e2:
3c:ec:6f:80:fa:ac:2a:f9:54:7d:1d:5e:38:14:bf:
93:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1A:2D:F3:60:A2:33:66:6F:27:76:FB:FE:78:EE:6F:D0:67:72:E4
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35322e302f32342d3234203d3e20323037323532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.52.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:b8:7a:03:51:5d:de:03:25:ad:3c:b1:23:b7:83:da:ff:62:
a7:30:33:00:b0:9a:2c:1d:28:83:c8:e9:ea:8d:72:96:6b:ef:
a5:2c:b5:82:4f:9f:83:74:8f:8d:56:a2:cd:00:b7:8d:f4:6d:
43:56:65:ee:8b:e7:96:3c:37:16:07:63:6b:1f:72:4c:a4:0f:
ad:03:8e:20:1b:9b:82:d6:09:7e:44:f9:0c:d5:27:67:c8:d7:
f2:0d:26:1e:07:0b:3c:6b:e0:ed:8a:37:64:f3:9b:9b:8f:11:
8a:ca:85:15:76:65:68:69:15:7c:f8:39:84:0f:88:4f:71:1b:
05:e6:06:b7:b6:04:44:0c:1e:34:4d:3d:5a:7a:31:b1:f5:61:
b3:53:74:25:10:d4:de:9c:de:cf:60:3c:d7:0f:fc:1f:54:41:
5c:93:07:f1:6b:f3:3f:19:f6:d8:70:99:c3:70:e8:73:3c:41:
40:97:69:8a:e7:7e:f6:49:26:72:d1:6e:53:f7:23:ad:71:9c:
60:7c:9c:44:30:42:4e:43:64:0e:b7:b9:9a:07:c4:b9:bb:17:
1d:7f:4c:46:d7:6d:2c:d5:dc:8c:25:df:b5:79:87:31:39:1b:
ff:84:57:0c:e6:ec:41:fe:8d:2f:6e:ea:62:ef:9e:92:a5:78:
af:15:6b:78
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUDD0iGjLfXUqFgWV8wvFqtQ+KslUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNDExMTQxMzU2MjFaFw0yNTExMTMxNDAxMjFaMDMxMTAvBgNV
BAMTKDJFMUEyREYzNjBBMjMzNjY2RjI3NzZGQkZFNzhFRTZGRDA2NzcyRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsCXo7GWCJX5WuDfhBPhA7R8qr
l+KLLHJSxeF0Ga8h+E1V+S8/6gSkZYVenHYQwCDmOwi+KlCQ1Ha4FK18i0jyD9p2
FzgXlvV2fTZSEyIP3l/vj3rpVvfKD3SMeItrlCu3YYeD35GUInfCotknHTA7HKXU
5YBcoYz2zmMILWwy9bb45k6lARYdxQF/yypq1pZOhlaP25erpWgXQ6Pv8cKoDR0+
iUugvgUHB4jLTkXDOXSp7lrVSRIZMLNbjdxcDAwhT+Ce3QuH5yA2Z8h+xfyJU6Pj
uOvVhmtXCcf9f2e/XK8TZnI7MViL7UoZr0GG4jzsb4D6rCr5VH0dXjgUv5O1AgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQULhot82CiM2ZvJ3b7/njub9BncuQwHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTM1MzIyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzczMjM1MzIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAfBjQw
DQYJKoZIhvcNAQELBQADggEBAAy4egNRXd4DJa08sSO3g9r/YqcwMwCwmiwdKIPI
6eqNcpZr76UstYJPn4N0j41Wos0At430bUNWZe6L55Y8NxYHY2sfckykD60DjiAb
m4LWCX5E+QzVJ2fI1/INJh4HCzxr4O2KN2Tzm5uPEYrKhRV2ZWhpFXz4OYQPiE9x
GwXmBre2BEQMHjRNPVp6MbH1YbNTdCUQ1N6c3s9gPNcP/B9UQVyTB/Fr8z8Z9thw
mcNw6HM8QUCXaYrnfvZJJnLRblP3I61xnGB8nEQwQk5DZA63uZoHxLm7Fx1/TEbX
bSzV3Iwl37V5hzE5G/+EVwzm7EH+jS9u6mLvnpKleK8Va3g=
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:19:05 2024 by rpki-client on console-fra.rpki-client.org