Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e382e302f32342d3234203d3e203232333633.roa
File: 33312e362e382e302f32342d3234203d3e203232333633.roa (raw, json)
Hash identifier: iOcWfWxDrFFSl/1MVz9aRa4cLn6xTi20bqgvoJ1eWJc=
Subject key identifier: 02:22:C1:8C:74:EA:A4:D1:3D:55:17:7B:9A:BE:5D:02:70:57:B8:CC
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 72A5CE67B304B9FEB5EB886FF51B744B771482B9
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e382e302f32342d3234203d3e203232333633.roa
Signing time: Mon 02 Sep 2024 06:05:19 +0000
ROA not before: Mon 02 Sep 2024 06:00:19 +0000
ROA not after: Mon 01 Sep 2025 06:05:19 +0000
asID: 22363
IP address blocks: 31.6.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:a5:ce:67:b3:04:b9:fe:b5:eb:88:6f:f5:1b:74:4b:77:14:82:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Sep 2 06:00:19 2024 GMT
Not After : Sep 1 06:05:19 2025 GMT
Subject: CN=0222C18C74EAA4D13D55177B9ABE5D027057B8CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ce:5a:01:6e:8a:00:9a:73:0e:ec:4b:4d:5c:
48:af:69:bb:6c:4d:4c:1c:f9:65:c7:c4:b7:15:aa:
5d:fb:57:af:0e:66:d0:5a:0f:af:85:ba:24:35:ca:
ce:1c:42:73:ea:78:ea:47:de:a8:8f:5a:e0:9a:18:
28:53:03:55:e4:dd:9f:9a:23:94:52:75:dd:e4:1c:
5a:46:2e:e9:4b:ea:a5:e1:ca:e2:47:e9:a3:dc:44:
68:32:cf:37:b8:03:73:c1:db:fe:94:ea:dd:85:6c:
0e:8d:23:79:6a:97:e8:d4:25:20:2a:f6:55:82:f4:
a8:55:4f:23:b1:f3:a2:d4:b5:fb:3e:ec:1a:d1:e2:
2d:32:8f:5d:50:74:0e:05:fc:0d:5e:1c:74:3c:a2:
2d:c0:0b:1e:6d:73:08:02:c9:33:f3:fe:20:b8:70:
ec:e4:c9:08:4a:c0:1c:d6:c7:db:c9:23:b5:c4:04:
02:68:3e:73:dc:88:a0:ac:16:f9:ee:c4:0a:16:ae:
fd:5c:dd:33:31:f1:eb:4a:c9:ea:55:3d:ca:64:56:
5c:ff:fe:55:2f:eb:b2:28:ff:3c:35:20:93:9e:7a:
36:99:14:78:2a:e5:93:b3:ca:58:32:1b:fa:32:4a:
17:2e:09:0a:8d:92:8c:e1:d0:84:d0:db:39:d3:a7:
15:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:22:C1:8C:74:EA:A4:D1:3D:55:17:7B:9A:BE:5D:02:70:57:B8:CC
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e382e302f32342d3234203d3e203232333633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.8.0/24
Signature Algorithm: sha256WithRSAEncryption
29:f7:16:0e:4b:33:7c:49:3e:51:b0:d6:fe:6a:31:f0:b8:f1:
27:aa:89:ab:93:4f:26:df:60:23:7c:6d:e0:28:ae:b0:73:61:
28:85:99:d2:31:bc:d8:2a:24:17:74:a5:9e:26:f5:c1:9e:5c:
58:95:4a:11:de:ed:d5:6e:5b:4e:9c:82:36:d9:6a:96:2e:ee:
88:3f:41:57:91:3c:cb:d7:37:7c:d8:bd:18:f5:9f:ca:34:2f:
ea:d8:d6:22:8f:de:78:47:2e:4f:80:29:65:7a:a6:f5:4e:21:
9c:04:68:96:d7:de:40:ef:6e:70:99:c5:c2:d0:52:7e:55:20:
0e:e8:91:35:0a:88:d3:5f:0f:7e:02:e8:e7:be:62:63:15:56:
cc:0e:83:c6:fd:bd:0d:d3:5b:9e:8f:d0:8a:1e:63:7a:ba:a6:
ed:be:d5:7c:47:dc:b6:b2:55:1a:0a:69:d1:ea:c6:61:52:5f:
2e:05:74:8f:a1:26:63:b7:b8:76:c0:e9:6c:21:6c:92:4d:58:
c1:c5:78:38:af:dc:f7:94:f2:d5:cf:50:27:02:26:b0:42:7d:
90:c3:dc:b2:96:05:af:2d:0b:f2:c7:86:26:6f:98:09:cf:99:
81:d7:64:cf:30:8f:fb:81:08:27:83:ac:e9:05:fe:be:fd:ed:
d9:2c:fc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:52:26 2024 by rpki-client on console-ams.rpki-client.org