Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e392e302f32342d3234203d3e203232333633.roa
File: 33312e362e392e302f32342d3234203d3e203232333633.roa (raw, json)
Hash identifier: 4l91YklgfkbS3uNJXggVeQcjLfC1FnjsS5CdO0kXGUg=
Subject key identifier: 29:DA:21:B9:65:AF:31:A6:81:F0:AA:61:D7:CA:50:23:5D:4E:8D:03
Certificate issuer: /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial: 22B1AAFE0C5AD7AF6082BEEAF588B543326287EE
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e392e302f32342d3234203d3e203232333633.roa
Signing time: Mon 02 Sep 2024 06:05:20 +0000
ROA not before: Mon 02 Sep 2024 06:00:20 +0000
ROA not after: Mon 01 Sep 2025 06:05:20 +0000
asID: 22363
IP address blocks: 31.6.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:b1:aa:fe:0c:5a:d7:af:60:82:be:ea:f5:88:b5:43:32:62:87:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Validity
Not Before: Sep 2 06:00:20 2024 GMT
Not After : Sep 1 06:05:20 2025 GMT
Subject: CN=29DA21B965AF31A681F0AA61D7CA50235D4E8D03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:08:9d:58:f6:42:64:00:16:08:f9:0c:26:e6:
53:5f:0e:83:26:c3:dc:51:4c:0c:01:5c:b5:84:3e:
af:d1:75:b8:b2:46:26:d8:6b:e6:14:9f:4a:92:c3:
82:93:d1:c9:80:1d:62:e0:b8:89:15:79:9d:e8:48:
6d:59:55:17:9e:d9:25:dd:2e:f7:e4:c1:70:88:ed:
87:2a:b4:43:ee:2f:9f:05:66:7f:52:ef:4c:0a:e7:
38:5d:6b:66:f5:3f:b1:c1:56:d2:fe:00:c5:53:23:
02:9d:98:71:b2:a1:22:83:21:9e:42:87:f6:bd:48:
b7:0b:75:30:3d:03:e0:52:b5:c4:33:d8:62:19:04:
8c:d4:49:91:73:30:f1:b9:67:68:e5:6d:bf:fa:30:
5a:92:47:00:0a:9c:b8:df:f0:c6:b4:3b:64:18:12:
9f:33:5a:7f:3a:77:3a:cd:dd:31:15:4b:62:24:9c:
92:c8:56:a7:85:7e:d1:da:fa:09:8f:21:66:ea:c6:
b4:1e:33:83:17:34:b6:0d:23:c6:ba:04:32:8d:63:
49:eb:24:93:69:4a:7f:cc:95:fe:57:b7:81:38:91:
d9:1c:61:e7:d7:49:36:f8:57:72:6f:9f:d0:a0:c9:
8a:97:2b:e6:4c:8a:9f:21:7b:fd:9b:27:38:0a:4b:
b9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:DA:21:B9:65:AF:31:A6:81:F0:AA:61:D7:CA:50:23:5D:4E:8D:03
X509v3 Authority Key Identifier:
keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/33312e362e392e302f32342d3234203d3e203232333633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.9.0/24
Signature Algorithm: sha256WithRSAEncryption
89:81:db:90:f1:9c:bb:81:8b:db:47:8f:7b:c2:57:f7:2c:24:
d8:32:fa:d3:c5:fa:0f:32:78:11:c5:9a:74:16:23:bd:41:44:
e7:07:82:5c:5f:60:a6:38:52:77:de:a2:f0:39:01:70:57:95:
7b:2f:88:86:0f:ad:1b:e7:89:3d:78:73:e9:6a:da:0a:d9:c7:
35:05:87:8a:78:0a:7a:4c:73:28:cb:77:68:b3:c9:86:63:10:
e2:34:cc:be:86:81:86:a7:91:3e:a9:22:1b:32:47:e5:02:35:
2d:df:67:6f:d4:fc:6d:f8:60:cd:3e:65:5d:ff:c5:3c:61:85:
a2:75:e6:44:02:e9:bc:54:68:f7:9e:c2:de:44:62:8f:a8:cd:
1d:1d:97:6d:37:75:5d:7b:b7:ed:12:d2:88:03:3f:6e:e4:93:
da:ec:be:f3:ee:f5:be:b7:0e:3c:93:ed:7c:77:63:75:4c:1f:
7f:ae:50:a6:aa:74:36:7c:42:1f:63:29:15:6c:5c:13:3c:3f:
75:83:1c:66:19:e5:cb:05:86:26:29:4a:4b:6c:d9:40:c2:57:
c1:85:2d:8e:99:b3:87:89:eb:1a:e3:95:6f:14:8f:f3:e8:bf:
04:6a:ae:b9:08:cc:23:b7:4c:98:52:bf:10:43:4c:8a:40:0d:
24:e3:5a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:52:26 2024 by rpki-client on console-ams.rpki-client.org