Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/3138352e3235302e34322e302f32332d3234203d3e2033333230.roa
File: 3138352e3235302e34322e302f32332d3234203d3e2033333230.roa (raw, json)
Hash identifier: u1O78a9/7pBA/iKPpWh8pJdrqjj8k5ZR7sHvGIdHjW8=
Subject key identifier: F4:A2:53:EA:71:08:78:69:39:F6:C7:A8:64:38:69:1E:98:5A:B3:BE
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 434764647EF3B3F6100305241736454A75C8AC09
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/3138352e3235302e34322e302f32332d3234203d3e2033333230.roa
Signing time: Sat 23 Sep 2023 17:20:49 +0000
ROA not before: Sat 23 Sep 2023 17:15:49 +0000
ROA not after: Sat 21 Sep 2024 17:20:49 +0000
asID: 3320
IP address blocks: 185.250.42.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:47:64:64:7e:f3:b3:f6:10:03:05:24:17:36:45:4a:75:c8:ac:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Sep 23 17:15:49 2023 GMT
Not After : Sep 21 17:20:49 2024 GMT
Subject: CN=F4A253EA7108786939F6C7A86438691E985AB3BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:05:f5:be:0f:72:ba:ae:39:bd:80:9a:c7:73:
73:f7:29:87:e9:f2:74:36:e7:ff:e9:2a:4d:7c:31:
c3:fb:88:43:b9:d5:77:e1:df:94:17:b0:ff:3b:88:
1f:1a:9b:98:f9:b7:e8:05:3f:a2:78:f3:f5:f5:24:
4a:23:74:6c:52:0e:b5:ce:f3:f0:d7:32:63:6b:e5:
a2:d0:cb:ce:89:f5:70:5f:1c:a6:dd:c6:7f:bd:2c:
21:7c:9f:35:9a:17:da:82:0b:fd:f9:be:b2:41:61:
ae:39:9b:85:a2:5a:f8:0d:7a:c0:b2:73:3d:b6:19:
14:5d:08:fb:59:96:93:84:a8:40:bd:0f:1e:73:5c:
d9:48:9c:2e:06:4b:fb:66:91:5b:11:c8:54:43:d9:
29:25:1a:f9:c8:64:a1:6f:f6:5f:07:e5:2e:67:ac:
68:0e:4a:4b:5b:73:59:62:6a:f6:12:ca:4c:e1:b3:
89:7f:a1:32:3e:b8:89:71:68:89:44:dd:9e:67:88:
48:93:1b:df:ad:34:aa:ea:51:89:f7:1c:33:7e:55:
f9:ba:a5:49:48:35:86:0c:82:69:f4:31:30:b1:cf:
57:70:56:26:5c:24:af:fe:db:6a:3b:ac:85:e8:05:
29:91:7f:20:ea:0e:ae:51:fa:43:d7:5d:b4:36:c7:
ab:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A2:53:EA:71:08:78:69:39:F6:C7:A8:64:38:69:1E:98:5A:B3:BE
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/3138352e3235302e34322e302f32332d3234203d3e2033333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.42.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:02:e1:11:a9:17:3c:b7:d0:b4:c8:21:da:0a:27:8a:70:c4:
54:2c:ba:2a:69:c6:ec:c1:c3:8a:de:c6:14:42:b8:c4:a8:c4:
08:e0:6a:2d:69:22:77:d7:a2:24:c0:a4:a8:ce:90:c2:ff:15:
e1:b3:f0:8c:5d:ec:69:5d:9c:aa:df:65:99:e8:f7:82:59:73:
a6:c2:f5:af:e9:f2:94:a9:64:17:37:5e:67:6f:4d:3e:9e:7b:
f8:6e:5b:b0:b4:6d:07:9e:bf:4e:ec:83:85:c9:25:51:ac:c0:
02:5b:05:29:4a:b7:ba:30:b7:35:c3:3b:bc:3e:a7:25:88:23:
b5:f6:a5:4b:ae:c8:f6:5b:65:de:d7:32:42:4e:ce:48:11:b6:
a5:b4:7c:89:0c:e4:f6:60:0a:3f:4c:f6:07:b1:80:15:f1:f3:
22:e5:ae:dd:02:f5:24:ef:8c:bf:73:95:ac:65:4a:1d:f7:c2:
63:75:21:b7:27:d0:60:5c:5f:33:fb:58:c6:5f:e6:cd:23:69:
c9:b1:c6:0c:da:66:1e:ba:c2:33:9a:6b:fd:0b:b4:b6:08:b6:
51:b5:0a:5a:6b:ca:a1:16:26:84:7b:d5:45:55:38:c2:96:ae:
24:85:48:12:10:75:2e:15:08:1b:ef:1d:c3:66:c9:15:77:3e:
66:70:69:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 17:02:14 2024 by rpki-client on console-fra.rpki-client.org