Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35352e302f32342d3234203d3e20333937363330.roa
File: 33312e362e35352e302f32342d3234203d3e20333937363330.roa (raw, json)
Hash identifier: vNHyAbMwYjUXOQKc4eUD/chJaIob9SpVCkwSaW0bhu4=
Subject key identifier: 39:1F:BA:E7:CD:9E:01:FC:30:7B:F9:C9:32:98:9F:D4:54:1F:29:67
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 513D17A8A460853B03D26A57E5B19AF57C77B654
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35352e302f32342d3234203d3e20333937363330.roa
Signing time: Tue 14 Nov 2023 15:02:28 +0000
ROA not before: Tue 14 Nov 2023 14:57:28 +0000
ROA not after: Tue 12 Nov 2024 15:02:28 +0000
asID: 397630
IP address blocks: 31.6.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:3d:17:a8:a4:60:85:3b:03:d2:6a:57:e5:b1:9a:f5:7c:77:b6:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Nov 14 14:57:28 2023 GMT
Not After : Nov 12 15:02:28 2024 GMT
Subject: CN=391FBAE7CD9E01FC307BF9C932989FD4541F2967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:50:86:f8:77:6c:f8:20:b4:2c:ab:88:57:28:
7d:fc:17:96:1c:15:ea:73:3f:c9:ab:33:3c:e9:bb:
a4:4b:b1:4c:88:7a:68:99:5b:4a:53:c6:e6:78:ef:
0a:0f:74:31:98:e7:54:17:69:78:29:69:45:23:cb:
c4:1b:85:c7:f0:bb:e6:e5:b6:25:b5:45:81:93:f7:
e7:68:34:3a:08:2b:5d:ee:71:fe:63:d8:48:8e:69:
d3:5d:1c:a0:88:3f:76:c7:47:1b:7f:c5:22:3b:3a:
c9:df:f7:a8:ef:29:b6:8a:b1:a3:61:e7:9d:64:a3:
ee:45:10:81:f5:cc:73:f2:cd:f2:c4:67:ea:36:e7:
cd:05:a1:93:c0:29:ec:1f:65:11:93:52:bf:37:82:
39:a9:ad:fe:b0:13:3d:06:7b:f2:1f:42:25:26:7c:
45:00:cf:52:94:7c:a2:8e:7b:f9:09:61:7f:20:11:
b5:2f:9c:5f:2e:4e:b9:a6:71:40:a4:0b:ed:3e:c9:
e2:10:2e:c8:d0:74:28:fc:19:be:88:9c:87:ad:5d:
89:bd:9a:5c:b0:db:55:78:f4:37:ff:d1:c6:63:5f:
7c:3b:ce:10:9a:cb:ef:e4:21:88:76:ed:4c:49:85:
2d:c0:2c:26:3a:93:97:e8:ef:1e:9b:bf:ef:82:49:
28:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1F:BA:E7:CD:9E:01:FC:30:7B:F9:C9:32:98:9F:D4:54:1F:29:67
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35352e302f32342d3234203d3e20333937363330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.55.0/24
Signature Algorithm: sha256WithRSAEncryption
36:c2:f5:73:c0:0f:e8:ef:9c:3a:94:59:d4:29:f1:2a:33:44:
f7:f0:7c:46:70:96:b1:df:2d:94:c3:2e:56:3d:51:01:db:03:
5d:df:77:f3:2d:33:44:13:bb:04:ca:6b:b9:82:00:67:df:20:
d2:0d:9f:b5:6f:77:ff:cd:51:87:59:0b:3d:59:f2:58:aa:b6:
3b:58:a7:ae:7a:a7:b1:d9:f5:ac:96:dd:82:81:62:91:30:8f:
b4:ff:39:ec:87:35:4f:3f:48:d8:5c:a9:d0:b3:ed:30:eb:06:
56:d4:5a:33:66:40:27:04:fc:87:cb:d6:17:b6:ed:17:52:7b:
18:a4:f7:f6:d8:15:a7:b7:c8:7e:76:a0:1a:d6:77:f1:7f:0e:
fc:d1:19:11:8a:36:32:45:bc:98:54:3a:a3:23:02:35:f7:d1:
0d:5f:ab:73:25:48:bc:2e:8b:8b:0e:90:90:55:d9:7e:f4:7a:
85:92:7d:78:b2:2f:2f:39:8d:6b:82:0b:03:7b:92:28:97:7b:
43:ea:ed:d8:f2:db:54:b9:7e:46:81:b0:eb:58:2b:d7:57:d8:
45:e0:92:9c:0b:f2:87:f4:af:cc:9e:97:34:a4:5d:b5:40:60:
ae:f9:3f:b3:d4:dd:20:dd:11:13:25:e0:9f:fe:ff:82:0a:b7:
ee:08:31:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 10:45:37 2024 by rpki-client on console-ams.rpki-client.org