Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35372e302f32342d3234203d3e203230343733.roa
File: 33312e362e35372e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier: l+L5XQuUU9ktg6fB1gkCODNfDmATznW6Q77SGKZxbFw=
Subject key identifier: 98:A7:32:A5:6A:1D:08:31:AA:3D:CD:9F:CB:B7:8C:57:EE:36:FA:28
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 54064CE29729EB4D0975C61F7356A2FADDBB3072
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35372e302f32342d3234203d3e203230343733.roa
Signing time: Wed 20 Mar 2024 17:20:51 +0000
ROA not before: Wed 20 Mar 2024 17:15:51 +0000
ROA not after: Wed 19 Mar 2025 17:20:51 +0000
asID: 20473
IP address blocks: 31.6.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:06:4c:e2:97:29:eb:4d:09:75:c6:1f:73:56:a2:fa:dd:bb:30:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Mar 20 17:15:51 2024 GMT
Not After : Mar 19 17:20:51 2025 GMT
Subject: CN=98A732A56A1D0831AA3DCD9FCBB78C57EE36FA28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4d:39:4f:0b:d1:fd:0c:0f:ae:d7:5d:de:63:
79:59:7e:0e:26:d8:c9:90:5a:6f:31:36:3d:d6:e7:
93:b4:8a:b8:7d:f4:a1:51:fd:be:c0:59:95:bf:ba:
68:01:82:71:da:a9:90:b3:97:96:ad:d1:68:3a:de:
4b:b6:f5:b1:30:1c:43:f3:1d:b7:d6:d3:3d:7d:64:
d9:fc:a1:e8:6e:4c:d2:ed:12:10:c1:47:ef:65:e5:
c0:0d:06:37:e6:e8:7b:60:d3:d5:ea:0a:04:3a:e0:
30:39:5d:f6:8f:bb:9f:a7:06:50:d9:f1:41:a3:21:
01:da:d2:79:5e:44:2d:a2:ee:1b:ac:92:55:26:22:
8e:bf:08:6f:24:88:c4:f2:3c:30:f1:c3:4c:84:71:
39:b6:24:71:24:c3:1e:e8:c5:c4:85:94:9a:1f:e6:
40:8b:8b:59:71:b3:a5:3d:b8:e9:17:a2:59:c3:49:
43:c7:98:f2:47:b8:78:0a:43:4a:17:c4:6e:8e:de:
52:7a:4d:b9:dd:76:fa:fc:8f:90:49:28:5e:8f:b3:
8a:97:f9:95:a0:14:93:94:cb:27:28:98:9b:2c:e0:
48:32:ce:77:be:49:38:43:7a:16:b0:76:db:58:2f:
fa:0e:37:00:6e:e0:0e:1a:64:8e:72:a6:bb:eb:9d:
cc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A7:32:A5:6A:1D:08:31:AA:3D:CD:9F:CB:B7:8C:57:EE:36:FA:28
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35372e302f32342d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.57.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:e3:fc:90:3a:ce:c7:87:ab:38:39:13:d4:4e:7c:46:ad:86:
3f:bc:8f:c4:30:21:a4:d3:2b:e6:04:f8:62:3a:83:2e:82:97:
30:72:de:17:4d:53:94:51:b0:b3:fc:80:74:60:1c:37:93:c2:
c9:06:39:d9:c7:c4:9c:8f:9d:b2:79:8b:75:c3:1b:d6:1f:b2:
a9:d9:81:7f:b1:3f:d0:dc:f1:cb:a4:9e:99:04:98:aa:62:e1:
ec:f2:c1:fc:5c:f4:10:df:e7:e5:f8:2c:16:9d:24:1a:08:58:
66:de:79:c9:85:72:25:70:08:d4:00:c6:ed:e7:d9:75:07:f1:
2b:41:a6:24:18:d5:30:fe:93:2b:b3:97:4e:39:6e:a8:58:64:
6a:8b:d4:9f:da:bf:93:7a:6c:04:f5:48:e1:08:c5:ac:dc:61:
06:25:07:35:e9:7e:bc:08:0e:91:02:f1:a4:9e:11:fd:b0:66:
a5:d8:df:ad:6d:2d:da:19:a2:49:97:52:70:5d:c1:10:6b:ad:
c1:75:a6:ed:d2:36:50:df:ba:50:07:fe:99:11:e1:32:18:fb:
07:fd:a1:d2:b7:22:c5:3a:d4:5c:cc:0b:19:8e:3e:60:59:a2:
82:c2:1b:b7:ba:9c:9b:ae:47:8f:b3:7e:75:3c:56:bf:6d:5d:
be:68:fe:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 14:06:24 2024 by rpki-client on console-ams.rpki-client.org