Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35392e302f32342d3234203d3e203634323637.roa
File: 33312e362e35392e302f32342d3234203d3e203634323637.roa (raw, json)
Hash identifier: HL0d8IoocPjWIwDyymGyK48DwgDMXSm6UDqOqehxG8o=
Subject key identifier: 9D:10:D2:EC:FC:44:2C:34:9F:0A:31:DC:82:E9:6F:8A:AB:F6:E5:07
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 0ED4F34C9CBBE3EA0EC192934D1F5A59D605D65E
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35392e302f32342d3234203d3e203634323637.roa
Signing time: Wed 22 May 2024 04:15:20 +0000
ROA not before: Wed 22 May 2024 04:10:20 +0000
ROA not after: Wed 21 May 2025 04:15:20 +0000
asID: 64267
IP address blocks: 31.6.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:d4:f3:4c:9c:bb:e3:ea:0e:c1:92:93:4d:1f:5a:59:d6:05:d6:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: May 22 04:10:20 2024 GMT
Not After : May 21 04:15:20 2025 GMT
Subject: CN=9D10D2ECFC442C349F0A31DC82E96F8AABF6E507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d8:24:78:72:03:83:25:23:cb:81:db:b4:a9:
50:b7:66:17:3f:24:68:51:57:7a:9b:31:9f:52:f9:
a7:44:1c:28:ee:17:5b:06:91:f7:84:24:04:9b:7b:
2c:85:0b:e1:26:48:dd:c0:89:c2:8e:1b:5c:b7:61:
cb:ac:f7:a6:ca:73:2b:d5:bf:75:7e:95:22:60:80:
3d:6e:58:b9:54:b1:5d:37:b9:a2:33:c9:53:ef:fe:
12:b3:fe:0f:8f:f3:3a:a2:23:0e:c0:40:8b:60:7b:
c6:5d:ab:6a:68:de:68:b0:de:b6:42:42:57:60:0a:
48:9a:72:fe:ca:fd:0c:fa:f2:5b:7b:8f:4b:00:f7:
58:d6:0f:a5:2c:fd:33:0b:2c:dd:20:5e:26:b8:f9:
94:df:8a:f8:78:37:40:9e:66:22:65:ef:33:a4:6e:
d8:2b:04:4a:56:ba:ce:3a:4c:66:40:6c:be:6d:0d:
23:96:e4:b9:7b:a3:4e:94:0e:2e:f7:0e:1d:bd:ad:
23:0e:15:a9:a9:be:ec:53:8a:6e:cf:57:30:1e:14:
c7:95:08:59:f1:da:d3:66:32:5e:e7:05:80:80:ce:
86:c3:e9:2e:21:13:84:18:d0:61:0c:8e:96:cd:5b:
0d:3b:1b:00:2e:f0:df:69:25:f8:4c:10:72:3b:5c:
ac:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:10:D2:EC:FC:44:2C:34:9F:0A:31:DC:82:E9:6F:8A:AB:F6:E5:07
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e35392e302f32342d3234203d3e203634323637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.59.0/24
Signature Algorithm: sha256WithRSAEncryption
45:cf:18:4c:f3:53:19:d2:33:00:33:fa:12:eb:ad:23:66:7a:
4f:14:4e:b2:02:6c:bd:be:06:31:13:e3:b4:26:b1:ef:e9:69:
22:f3:28:5a:b7:5f:e7:b6:9c:4b:b4:89:b7:1f:61:27:b4:5b:
e7:ea:2d:85:3f:74:48:f5:c3:c4:e1:29:56:f6:1b:71:8c:86:
c2:9b:d4:22:27:a9:9d:7b:5b:b3:08:3d:7e:79:06:f5:78:c9:
5e:3e:8f:e4:23:3e:c5:b1:8e:35:56:72:f7:f0:b2:e4:56:e2:
88:35:20:4f:67:a3:a4:4f:f9:1c:31:52:ee:fd:9b:18:99:99:
81:be:f6:e4:d8:b3:89:3d:b7:e3:7b:1c:64:c6:85:69:6b:da:
45:18:53:c2:f7:4a:11:b1:ec:3d:c2:8e:a5:58:fb:5f:51:cf:
57:50:54:6d:44:51:ff:0d:87:50:ea:75:c5:85:f8:7c:09:7a:
01:e3:7b:03:c5:2e:11:22:ad:33:fc:fc:c2:f2:71:ec:0f:e9:
c7:4a:c3:92:45:c1:05:bf:36:80:f6:f2:d9:28:0e:7b:45:b7:
d2:14:d5:5d:30:07:52:4f:6b:dc:e5:80:6b:b5:6c:f9:60:13:
6b:23:a6:b6:66:05:49:4d:d4:23:94:5e:a2:fc:7d:c1:3d:19:
15:c9:31:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:06:13 2024 by rpki-client on console-fra.rpki-client.org