Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35332e302f32342d3234203d3e20323032363536.roa
File: 33312e362e35332e302f32342d3234203d3e20323032363536.roa (raw, json)
Hash identifier: Peul+aDiUqZy5g3W0MW23XKUUXBJ+EI+x7UrI2OfRaE=
Subject key identifier: 60:DA:81:9D:5B:62:9E:3F:BC:C3:C1:9E:0A:3C:3D:3F:18:FD:7F:E9
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 75AC6870719E4CA3A3CFD4D9A757ED05D63C5EAB
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35332e302f32342d3234203d3e20323032363536.roa
Signing time: Thu 14 Nov 2024 23:30:32 +0000
ROA not before: Thu 14 Nov 2024 23:25:32 +0000
ROA not after: Thu 13 Nov 2025 23:30:32 +0000
asID: 202656
IP address blocks: 31.6.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:ac:68:70:71:9e:4c:a3:a3:cf:d4:d9:a7:57:ed:05:d6:3c:5e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Nov 14 23:25:32 2024 GMT
Not After : Nov 13 23:30:32 2025 GMT
Subject: CN=60DA819D5B629E3FBCC3C19E0A3C3D3F18FD7FE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:07:1c:50:a6:d3:31:c5:43:66:7c:e8:e4:52:
61:de:9b:ca:5e:9f:de:f7:30:b6:29:e9:e9:40:f7:
e1:63:b4:be:62:68:db:f2:58:3b:58:38:89:21:63:
f0:39:92:82:d7:ae:9a:f1:ac:37:a8:07:e2:ee:19:
69:01:5e:65:6f:da:e3:b7:bb:5e:68:98:d8:13:0a:
64:e3:28:28:5e:a9:58:da:51:d4:e0:e3:98:4f:12:
8a:54:eb:66:4a:5b:15:8c:9e:39:7a:ec:c4:c5:f3:
5d:f5:e2:78:e2:af:a8:3f:66:22:e7:9e:33:45:32:
46:66:27:07:e7:2a:20:4b:de:a8:01:76:f7:3d:46:
af:62:4f:78:51:14:e0:ca:df:6f:97:20:a8:6c:a8:
b4:5e:2b:0a:6b:52:46:76:9c:fb:a2:52:1f:16:4a:
be:d1:81:d3:6e:83:c9:9d:4c:54:f1:3d:83:18:11:
8f:ca:b1:d2:be:ff:be:57:e8:5e:ed:41:88:9d:72:
f3:f3:ff:8b:ef:bd:f0:5a:32:39:4a:22:b9:b1:03:
b4:32:70:b1:21:fb:d2:b6:84:82:b1:5d:6d:9b:90:
01:fd:50:67:34:60:e3:d8:66:71:fd:bb:d9:e5:9e:
1e:a2:96:30:62:88:4a:5b:8a:d2:32:d8:a3:6d:7f:
68:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DA:81:9D:5B:62:9E:3F:BC:C3:C1:9E:0A:3C:3D:3F:18:FD:7F:E9
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35332e302f32342d3234203d3e20323032363536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.53.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:fd:11:15:8d:33:04:58:5b:ef:db:27:26:ec:8b:35:3c:54:
c2:65:8f:27:37:9a:11:90:ec:6c:df:5f:56:b6:73:99:c7:e2:
2f:19:87:3f:b6:8c:8a:6e:8b:4f:04:fc:d6:8b:64:d8:b5:3c:
99:86:3a:8a:76:12:4a:c8:2f:ce:19:3c:3b:ae:0c:10:41:df:
61:db:a8:75:86:7e:39:6d:ad:ef:d8:45:82:e6:f1:90:06:89:
39:ad:0b:bd:a3:2d:2c:6f:b9:ec:68:b6:e4:63:57:5f:e4:b7:
5e:e3:a9:cf:61:84:e5:a5:65:a2:03:2f:f7:f5:e7:60:37:92:
64:85:21:90:58:cf:32:9b:43:11:75:21:46:15:13:99:30:ef:
30:7f:dd:48:e1:41:4e:4d:f9:ed:7c:bf:85:73:e4:70:b6:5a:
e5:e4:b7:66:d1:7e:8c:a0:85:e0:33:9e:0f:0b:b0:b0:b0:86:
5f:24:e6:e7:90:93:c9:72:22:c7:fb:16:13:e8:61:d4:44:b4:
59:75:24:59:94:d9:16:6c:3a:95:2a:d1:bc:dc:be:80:33:e1:
62:d6:65:77:35:cf:81:ba:6e:f9:8d:20:14:53:73:99:6a:8c:
ee:59:0a:0c:d4:33:5a:59:22:fd:27:5a:05:ae:f0:dd:3d:ef:
0c:7f:c3:51
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUdaxocHGeTKOjz9TZp1ftBdY8XqswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yNDExMTQyMzI1MzJaFw0yNTExMTMyMzMwMzJaMDMxMTAvBgNV
BAMTKDYwREE4MTlENUI2MjlFM0ZCQ0MzQzE5RTBBM0MzRDNGMThGRDdGRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmBxxQptMxxUNmfOjkUmHem8pe
n973MLYp6elA9+FjtL5iaNvyWDtYOIkhY/A5koLXrprxrDeoB+LuGWkBXmVv2uO3
u15omNgTCmTjKCheqVjaUdTg45hPEopU62ZKWxWMnjl67MTF81314njir6g/ZiLn
njNFMkZmJwfnKiBL3qgBdvc9Rq9iT3hRFODK32+XIKhsqLReKwprUkZ2nPuiUh8W
Sr7RgdNug8mdTFTxPYMYEY/KsdK+/75X6F7tQYidcvPz/4vvvfBaMjlKIrmxA7Qy
cLEh+9K2hIKxXW2bkAH9UGc0YOPYZnH9u9nlnh6iljBiiEpbitIy2KNtf2h/AgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUYNqBnVtinj+8w8GeCjw9Pxj9f+kwHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzMzMTJlMzYyZTM1MzMyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzIzNjM1MzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAfBjUw
DQYJKoZIhvcNAQELBQADggEBAGz9ERWNMwRYW+/bJybsizU8VMJljyc3mhGQ7Gzf
X1a2c5nH4i8Zhz+2jIpui08E/NaLZNi1PJmGOop2EkrIL84ZPDuuDBBB32HbqHWG
fjltre/YRYLm8ZAGiTmtC72jLSxvuexotuRjV1/kt17jqc9hhOWlZaIDL/f152A3
kmSFIZBYzzKbQxF1IUYVE5kw7zB/3UjhQU5N+e18v4Vz5HC2WuXkt2bRfoygheAz
ng8LsLCwhl8k5ueQk8lyIsf7FhPoYdREtFl1JFmU2RZsOpUq0bzcvoAz4WLWZXc1
z4G6bvmNIBRTc5lqjO5ZCgzUM1pZIv0nWgWu8N097wx/w1E=
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:19:05 2024 by rpki-client on console-fra.rpki-client.org