Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e36322e302f32342d3234203d3e203136323736.roa
File: 33312e362e36322e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier: p1fi4tL5FbZEs5/L79g3utlp82e4lRHNJPIoiv+g85E=
Subject key identifier: FB:9D:FB:EF:F2:E7:88:B0:B6:E9:29:23:F3:17:FA:5D:0D:86:74:36
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 32F788D48B8370EEE9FCE6771E929AF7E0E1CCA8
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e36322e302f32342d3234203d3e203136323736.roa
Signing time: Fri 21 Jun 2024 15:22:27 +0000
ROA not before: Fri 21 Jun 2024 15:17:27 +0000
ROA not after: Fri 20 Jun 2025 15:22:27 +0000
asID: 16276
IP address blocks: 31.6.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:f7:88:d4:8b:83:70:ee:e9:fc:e6:77:1e:92:9a:f7:e0:e1:cc:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Jun 21 15:17:27 2024 GMT
Not After : Jun 20 15:22:27 2025 GMT
Subject: CN=FB9DFBEFF2E788B0B6E92923F317FA5D0D867436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:06:0f:45:b1:6a:53:ad:78:0d:6f:80:d3:c0:
d1:15:54:4d:98:cc:9b:39:42:cd:92:4d:43:7a:71:
83:67:77:06:0e:5b:cf:d2:e4:d4:87:69:0c:d1:3f:
9f:c9:b5:17:33:b9:7c:d3:79:76:8c:eb:07:2a:43:
b0:5b:c6:5c:80:17:57:40:68:8b:0e:86:ca:f8:0f:
4c:00:51:a2:68:3a:f9:83:26:fb:8b:21:48:3d:be:
0e:36:d8:74:60:8e:19:a8:51:08:33:1a:07:d0:97:
40:15:34:15:98:8a:39:11:81:47:89:03:82:a9:19:
cd:b7:26:85:3e:22:42:3a:2a:69:7d:a9:d3:ac:5b:
22:0b:d1:f1:b3:db:b1:63:ae:cb:89:da:01:0f:f3:
93:9a:1d:b0:e9:0d:3f:6c:20:1b:d0:40:25:66:6f:
42:a3:ca:c7:79:a5:6d:56:76:55:c0:9e:b9:a2:12:
01:0f:c1:6b:65:41:15:7e:0c:d8:6e:ee:36:7e:c5:
61:61:0d:25:69:46:5e:ff:ce:8b:4d:74:a1:b4:89:
47:aa:34:e2:2b:a6:1f:17:2d:4a:62:58:1b:6e:ef:
cb:f1:b9:08:79:18:83:51:b0:f9:5e:ac:94:f1:19:
9c:d6:fb:ee:d1:9c:d1:7c:49:76:53:a7:55:1c:7a:
e7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:9D:FB:EF:F2:E7:88:B0:B6:E9:29:23:F3:17:FA:5D:0D:86:74:36
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e36322e302f32342d3234203d3e203136323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.62.0/24
Signature Algorithm: sha256WithRSAEncryption
90:8f:6f:b3:25:18:f9:d6:e9:cd:57:6f:8d:f4:07:9f:60:e4:
72:26:54:19:76:13:78:a6:4e:cf:fc:e2:5a:7f:d4:a6:22:0e:
2b:52:8b:3c:3a:ee:13:6c:fb:49:cd:a1:f2:19:38:58:c4:f4:
0a:fc:27:6b:7d:5d:e9:f4:14:0a:00:0e:cb:f8:88:ad:4b:4c:
d5:28:7f:c2:de:eb:1f:4b:44:3d:d3:8d:4d:da:d7:4a:e4:d1:
b7:a6:68:c7:7b:ab:dd:dd:e8:88:b0:b3:05:3f:48:c7:23:a3:
11:d8:50:84:12:c0:4c:c2:08:72:1b:80:72:e6:05:82:2c:21:
3f:c5:30:01:ab:4c:e3:e6:10:8e:29:6b:34:ad:f8:e1:fb:c4:
9f:90:d0:03:5f:cb:ad:af:b5:c1:2c:95:ac:d3:4d:1e:31:a5:
e7:07:e7:82:60:bd:23:fa:b4:7d:24:58:7c:d8:6c:5e:e0:7f:
09:72:90:7f:a4:68:44:f8:1c:33:1d:10:c0:78:d7:53:49:7a:
40:06:6a:83:03:3d:42:b4:e3:37:c2:69:89:7f:ac:17:02:c0:
4a:c5:c1:d8:fd:db:34:aa:9f:67:15:39:74:7d:19:41:a6:1e:
77:ce:36:62:98:c8:ba:92:e0:be:7e:97:7e:b2:d8:f6:1d:1b:
94:3f:48:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:06:13 2024 by rpki-client on console-fra.rpki-client.org