Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35382e302f32342d3234203d3e203232333633.roa
File: 33312e362e35382e302f32342d3234203d3e203232333633.roa (raw, json)
Hash identifier: StXUpJUaMJbouJrRQZESHYF6U+sEYAtSpCUm7nV71Wo=
Subject key identifier: DB:7B:B2:A6:40:18:1E:6E:AE:6D:96:37:CF:14:E0:00:22:58:32:72
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 1B08B7C68D159538B65CB6CC5850A8314444304C
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35382e302f32342d3234203d3e203232333633.roa
Signing time: Mon 02 Sep 2024 06:05:20 +0000
ROA not before: Mon 02 Sep 2024 06:00:20 +0000
ROA not after: Mon 01 Sep 2025 06:05:20 +0000
asID: 22363
IP address blocks: 31.6.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:08:b7:c6:8d:15:95:38:b6:5c:b6:cc:58:50:a8:31:44:44:30:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Sep 2 06:00:20 2024 GMT
Not After : Sep 1 06:05:20 2025 GMT
Subject: CN=DB7BB2A640181E6EAE6D9637CF14E00022583272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:84:8c:27:71:6f:b4:4b:66:5e:a1:ef:39:b2:
8e:e8:04:61:9f:02:d6:e1:17:30:3b:b2:a2:55:8e:
9a:ee:84:bb:88:29:19:6a:9e:2f:bd:c2:8d:6c:4b:
b2:3b:fa:f2:4c:31:01:46:d4:3f:d6:a2:76:75:af:
71:3a:c1:6a:91:03:31:5c:d9:b6:d5:fe:f0:da:d8:
7a:32:b2:25:e2:1e:70:00:1b:30:25:fd:e8:8c:1e:
43:4f:bd:57:15:c9:96:3f:c4:b2:c5:1f:d9:2a:26:
a8:52:85:99:4c:95:56:dc:06:c2:df:d5:7d:74:87:
87:a8:30:45:31:fe:89:e2:c6:bb:d0:0a:a1:ca:c7:
4a:aa:a8:b7:44:3d:50:d3:c7:e1:7a:06:d8:b2:78:
c8:af:c1:59:e8:c7:ef:fc:58:73:9a:4e:36:06:70:
aa:3b:4f:9a:72:e1:d1:85:00:fa:8b:f9:06:5a:2e:
43:f5:a7:8f:d4:5e:12:d8:f7:91:cc:71:e0:b1:bc:
11:96:cf:c3:62:33:1c:60:e7:92:3d:5e:ee:a3:69:
a6:7c:ae:a9:65:60:9e:18:24:60:bb:b3:b8:4b:b7:
b0:a5:e8:ab:c0:03:d4:76:bc:e2:b0:6c:35:48:85:
fe:8b:fd:11:9e:ff:39:c9:16:0d:e3:35:0c:81:65:
f1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7B:B2:A6:40:18:1E:6E:AE:6D:96:37:CF:14:E0:00:22:58:32:72
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35382e302f32342d3234203d3e203232333633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.58.0/24
Signature Algorithm: sha256WithRSAEncryption
74:bf:4d:af:fe:e9:9c:cf:d1:0b:a5:ec:44:6b:a1:04:9a:4b:
a2:9c:6a:97:6a:67:fc:0a:2a:af:53:a6:2a:9e:15:ff:59:bc:
d2:f9:17:f1:3d:42:9a:e7:2f:5c:8b:ae:aa:9d:c1:83:aa:6e:
bc:37:06:9f:d5:80:b6:a4:18:4e:1e:6b:ac:3d:5d:db:66:6d:
b5:29:73:7d:9c:c3:92:d7:06:d5:5f:49:a4:34:b9:9b:10:78:
62:83:39:2d:75:db:ad:21:85:ca:f5:1f:9c:0c:27:80:d1:2b:
20:05:d5:76:04:d3:1a:99:94:1e:61:7d:7b:b9:17:66:aa:51:
7d:49:63:44:f0:5b:38:e3:91:79:75:9a:24:43:c2:de:98:96:
bc:c7:0b:46:b6:cb:13:26:53:f9:b9:fd:12:12:5b:d3:98:52:
38:21:39:a5:55:75:4c:48:a3:3e:2a:b4:38:a7:3c:84:49:b2:
2c:59:ce:c0:49:11:0b:17:b2:d1:77:f8:05:7c:bc:43:29:65:
05:5a:7a:6e:fb:3f:93:4a:32:62:f0:7e:d1:7e:2e:47:8f:cc:
0e:e5:4c:76:b9:f1:13:f2:b9:ac:ea:43:e6:50:31:35:47:de:
8c:1b:de:76:e5:62:e5:60:3f:8d:08:85:93:ae:5f:ea:f9:e2:
db:3e:d8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:54:59 2024 by rpki-client on console-ams.rpki-client.org