Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3139332e32342e3233322e302f32332d3233203d3e203530333030.roa
File: 3139332e32342e3233322e302f32332d3233203d3e203530333030.roa (raw, json)
Hash identifier: Po6GZYgaRMfXN2u9BXIR6NM5bYxILn+hdgpL6aYdt9s=
Subject key identifier: 8F:78:F5:92:B4:E1:54:BD:B0:93:2C:F4:5E:99:20:FF:42:09:59:9D
Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial: 492F97E2115CCBA3B294194521E8227C37182946
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3139332e32342e3233322e302f32332d3233203d3e203530333030.roa
Signing time: Thu 05 Sep 2024 16:07:55 +0000
ROA not before: Thu 05 Sep 2024 16:02:55 +0000
ROA not after: Thu 04 Sep 2025 16:07:55 +0000
asID: 50300
IP address blocks: 193.24.232.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft
rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 13:20:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:2f:97:e2:11:5c:cb:a3:b2:94:19:45:21:e8:22:7c:37:18:29:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Validity
Not Before: Sep 5 16:02:55 2024 GMT
Not After : Sep 4 16:07:55 2025 GMT
Subject: CN=8F78F592B4E154BDB0932CF45E9920FF4209599D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5c:8d:db:c7:d6:8f:28:12:f8:db:07:21:d9:
18:34:71:30:12:87:fc:32:ff:4a:80:0f:e2:c5:ad:
74:f1:a6:1c:a7:0d:8d:13:70:55:c0:e6:ce:49:62:
f8:1d:fd:eb:d0:ec:f3:84:d8:79:89:56:7d:eb:49:
c0:e4:a5:ac:77:1b:9a:b5:c6:d0:77:86:1e:38:c1:
f1:42:1d:13:de:44:3a:8d:cf:a9:cf:eb:50:90:5d:
94:a1:ea:b9:71:02:74:05:a0:50:ab:f0:80:97:ad:
96:c0:5f:35:32:bc:82:fa:a6:7c:40:0e:99:da:7f:
77:0b:b2:e4:2a:42:d3:88:4f:f9:79:c9:ac:ea:0a:
65:a9:8e:a4:fb:e1:56:2f:43:76:75:6e:02:48:c5:
9f:fb:2f:c1:fd:85:c8:5a:c8:d3:3b:23:ff:f0:82:
f5:d5:fb:94:76:5d:c5:28:5c:2f:d4:30:99:18:ff:
9a:54:5a:1f:30:9d:12:8a:d8:54:27:63:0a:b9:75:
41:0c:e9:93:90:74:1d:a1:ad:a8:6d:2a:6b:72:58:
af:c7:e1:23:02:03:69:87:57:b2:20:9d:ab:0b:97:
ce:38:03:2f:71:04:1a:cf:69:85:19:c2:5c:1a:89:
18:ad:e5:c1:15:0a:19:0d:2d:87:ef:24:bf:10:9d:
6e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:78:F5:92:B4:E1:54:BD:B0:93:2C:F4:5E:99:20:FF:42:09:59:9D
X509v3 Authority Key Identifier:
keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3139332e32342e3233322e302f32332d3233203d3e203530333030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.232.0/23
Signature Algorithm: sha256WithRSAEncryption
89:65:6b:01:f4:7b:7c:c2:2e:3f:01:d5:0b:c2:a4:5a:cc:25:
aa:fe:58:5c:86:c6:09:81:b1:3d:92:6c:3a:1e:0a:6d:28:13:
cc:66:f5:e6:ac:48:fc:a8:64:22:11:a4:17:38:0d:45:8a:27:
bd:08:81:29:8c:8a:fd:68:62:36:d6:2d:19:9f:5f:a8:97:29:
77:f6:72:3b:41:df:3e:5a:f6:9d:a5:6f:e0:2d:d9:a5:03:75:
21:ff:be:b8:30:5e:ff:e4:2b:91:fc:d7:3e:d7:1b:82:0e:29:
41:df:27:f1:42:66:35:17:ae:41:fa:09:d8:0e:c0:04:ae:eb:
b2:e3:93:63:37:cf:c9:6c:4c:17:a3:8f:27:3f:2f:f4:85:94:
09:f5:8f:de:6d:57:dd:43:11:2b:e3:4f:4a:1b:81:28:18:61:
dd:1f:28:e8:f9:a2:75:ee:dd:50:1e:15:4b:cb:be:13:e7:2b:
1c:23:8b:4f:bd:4f:85:85:95:7f:d5:5d:8c:59:90:e3:fa:c3:
d9:e4:38:2f:95:e4:63:79:28:f0:30:fb:2d:78:d6:e1:c5:e1:
3f:63:ae:e8:f7:d8:7d:86:1d:57:d6:05:98:48:a3:53:ab:ad:
a1:1f:09:21:99:e9:c2:ee:b6:c1:0b:b4:33:f2:0b:15:79:37:
5f:2b:f9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 20:49:33 2024 by rpki-client on console-fra.rpki-client.org