Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3132382e31322e302f32332d3234203d3e20383334.roa
File: 34352e3132382e31322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: TV142dkIfjlXVF18mfQXIHSlB6/BpS7NTRR0FAI1u74=
Subject key identifier: 2E:BD:1C:01:84:E8:67:EC:C9:72:B6:76:CB:E0:DE:FF:D2:BB:F6:8B
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 69F003E8C8CED1E6403D9CF62B9DEB9A026D6777
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3132382e31322e302f32332d3234203d3e20383334.roa
Signing time: Fri 30 Aug 2024 00:05:19 +0000
ROA not before: Fri 30 Aug 2024 00:00:19 +0000
ROA not after: Fri 29 Aug 2025 00:05:19 +0000
asID: 834
IP address blocks: 45.128.12.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:f0:03:e8:c8:ce:d1:e6:40:3d:9c:f6:2b:9d:eb:9a:02:6d:67:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Aug 30 00:00:19 2024 GMT
Not After : Aug 29 00:05:19 2025 GMT
Subject: CN=2EBD1C0184E867ECC972B676CBE0DEFFD2BBF68B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:29:d5:13:2c:67:0e:d0:8b:a6:1a:ff:bf:c6:
4b:5c:83:1a:a6:cf:68:66:c2:d8:f1:7f:df:30:b8:
02:ac:33:b6:65:53:63:2f:1f:70:29:c0:82:18:76:
90:dc:2a:19:ee:f0:09:98:7f:10:32:78:74:50:50:
32:0e:61:17:b8:b2:db:46:29:4f:84:b6:c5:c4:8d:
da:04:3a:f5:49:e6:ef:6f:7b:3a:c1:5c:c0:e3:6c:
54:48:10:da:94:36:25:32:15:12:fb:99:83:f1:f6:
ca:20:52:9a:85:62:37:d3:a4:55:1a:15:05:4a:d3:
c5:d2:9e:71:1f:aa:32:af:98:2a:df:96:a6:83:9f:
01:44:09:a3:03:26:b6:3f:04:a8:11:8d:94:d2:78:
7c:5a:de:35:7c:68:3e:11:d5:3e:b7:72:3b:14:24:
b2:3a:21:bc:c3:65:50:ad:d1:e8:aa:3c:ea:64:9b:
20:4d:ce:fc:a5:14:43:db:df:f7:92:54:ae:08:c1:
da:6e:0a:76:be:c1:d9:12:b6:59:5d:a9:b2:2c:2f:
9a:e9:39:f1:44:8d:53:59:a9:1c:32:cc:1c:17:e4:
28:7a:1b:3b:0b:18:03:cf:de:49:f5:40:51:53:a4:
87:2b:63:0a:ea:30:22:71:e8:ab:8e:73:db:51:cc:
56:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BD:1C:01:84:E8:67:EC:C9:72:B6:76:CB:E0:DE:FF:D2:BB:F6:8B
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3132382e31322e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.12.0/23
Signature Algorithm: sha256WithRSAEncryption
39:2a:61:e0:05:e3:13:fa:f9:16:b8:e3:7e:36:05:ca:96:98:
da:b5:ad:5a:31:45:47:2d:89:d3:1b:df:06:2e:93:46:89:b7:
12:63:61:ff:86:4a:f1:80:0c:96:4c:35:ea:ff:d5:b9:3e:a6:
64:ac:76:39:3d:b4:cf:42:62:c7:74:be:34:92:39:3f:66:d8:
60:73:e2:73:16:94:61:9d:16:4d:a5:c0:07:30:8a:b7:13:a4:
61:bb:43:72:b0:be:dc:17:3d:ac:14:1a:5c:42:29:bb:ca:1e:
f4:cb:e5:db:57:58:21:e4:7e:2e:bd:bc:16:fe:24:d8:75:c0:
36:10:2f:85:fc:45:7c:7c:92:d7:38:81:59:79:14:03:38:c2:
f2:b6:e5:42:02:91:e3:b3:30:e0:7c:df:5f:3b:43:90:a4:a3:
fa:49:a1:78:04:38:fc:7f:43:2b:39:2c:59:05:49:46:a8:a5:
ac:43:75:49:d8:d8:59:a6:9f:51:a0:f9:38:ec:06:b3:bc:0f:
e6:4a:84:27:1b:ad:44:29:1c:7d:d7:b5:4d:38:45:5b:7d:90:
a2:5c:2c:1e:85:66:97:12:2b:b5:28:ba:b1:94:0a:fe:c5:98:
da:70:5b:12:77:82:be:01:42:d2:4d:b9:25:6d:63:81:12:4d:
fe:31:fb:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:18:36 2024 by rpki-client on console-ams.rpki-client.org