Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34362e302f32342d3234203d3e2037303138.roa
File: 3231322e3130332e34362e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier: rMME+vqCZKRx6MWTu2JJLyrYUejGxmy68BYs8Iy+dcs=
Subject key identifier: 78:D9:FE:C2:93:98:97:3C:86:79:93:AE:7C:F6:08:65:62:7A:3A:6E
Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Certificate serial: 380F63653843D83ABD62A548952A1B384736493D
Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34362e302f32342d3234203d3e2037303138.roa
Signing time: Mon 29 Jul 2024 16:31:32 +0000
ROA not before: Mon 29 Jul 2024 16:26:32 +0000
ROA not after: Mon 28 Jul 2025 16:31:32 +0000
asID: 7018
IP address blocks: 212.103.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft
rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:0f:63:65:38:43:d8:3a:bd:62:a5:48:95:2a:1b:38:47:36:49:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b
Validity
Not Before: Jul 29 16:26:32 2024 GMT
Not After : Jul 28 16:31:32 2025 GMT
Subject: CN=78D9FEC29398973C867993AE7CF60865627A3A6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:00:5d:08:c3:1f:1d:76:ea:56:a2:00:f5:02:
a1:33:5d:9c:b3:07:84:53:30:9d:6a:a3:13:65:df:
b7:b2:38:15:a6:73:d3:33:09:ca:cc:72:75:a5:54:
51:eb:b0:d4:e5:e3:fb:79:9c:0a:0e:b1:f0:9e:85:
15:4f:09:36:31:7d:6f:cf:29:6c:17:5d:b6:d2:41:
1e:64:3e:78:55:b5:1f:aa:22:ce:3a:2a:42:62:0c:
f8:1e:94:fb:04:ce:77:de:d2:68:ba:62:dc:97:50:
71:6b:8b:d4:31:a3:1b:66:d1:79:a9:58:05:fa:b4:
16:c6:ca:3c:81:89:8d:9e:5a:c9:a1:0f:75:88:4c:
01:cf:cc:0e:a5:1c:10:3b:32:1f:90:12:b1:d0:03:
d5:15:4c:a3:29:69:ff:01:22:83:13:e0:fb:7b:c1:
61:3c:4c:02:aa:92:e1:37:26:50:1a:7c:c2:46:08:
2c:18:d8:66:54:7b:6d:e9:e8:93:bb:ef:0c:bf:3a:
65:2b:0d:60:98:00:49:02:71:de:25:f4:7b:d7:a8:
74:30:26:67:e4:4f:84:79:fc:b3:be:32:45:8d:01:
e6:2d:68:15:43:86:47:0e:56:9c:79:71:1b:7c:06:
b3:53:50:96:92:43:db:63:58:1d:c3:c1:75:3e:7c:
3a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D9:FE:C2:93:98:97:3C:86:79:93:AE:7C:F6:08:65:62:7A:3A:6E
X509v3 Authority Key Identifier:
keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/3231322e3130332e34362e302f32342d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.103.46.0/24
Signature Algorithm: sha256WithRSAEncryption
56:22:3a:00:f6:b0:6a:69:a1:72:9a:7c:90:46:4e:5e:3d:95:
76:c1:76:57:b2:da:ab:5b:d3:6d:6c:ab:e5:d6:24:00:9e:7f:
67:2e:7b:50:ea:13:66:8a:01:99:2d:ab:58:70:73:eb:60:f5:
cf:36:81:8b:ce:ba:58:0e:ab:eb:28:a1:73:37:b7:f5:5c:fb:
15:a8:57:68:91:ca:ed:1f:31:a0:07:7b:86:88:14:a7:7f:02:
c9:b8:5a:ff:d2:54:0c:0c:99:0c:49:9a:f3:8a:a9:35:f4:b7:
ef:19:37:db:24:2e:32:62:cc:d2:a0:ae:71:9e:6a:98:e3:dc:
1b:dd:77:ec:dd:14:1e:1e:a8:ee:54:a8:f3:c4:05:26:24:ba:
b8:d1:8a:9f:f6:c6:1f:60:42:3e:44:ac:b5:6e:b5:77:d6:54:
c4:fa:8c:5c:62:2d:8f:79:95:65:1f:d6:e8:75:7d:59:57:39:
5a:bd:a9:0e:d5:79:ab:0a:ff:f5:31:26:b0:1e:4a:9a:f2:b2:
c8:47:68:7b:46:25:f5:4d:04:ee:ad:e2:53:c3:1c:c3:2c:6f:
cf:09:b2:b3:e9:c4:0c:6d:b3:72:44:5b:f6:91:54:58:65:74:
26:90:cc:f5:e3:f7:d1:69:6c:52:4f:b8:03:c1:9d:cc:63:3e:
fd:2e:5d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:35:20 2024 by rpki-client on console-ams.rpki-client.org