Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231362e302f32342d3234203d3e203136323736.roa
File: 34352e3133322e3231362e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier: L/BEDQa9goRD1yPLVMHjeX/aQHCzx+ivnSV21s/5SYY=
Subject key identifier: 30:C0:A6:4E:70:AC:75:DB:CD:05:4C:13:9D:4B:9A:36:A0:1D:DB:B6
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 14B71B301EB09E1F81770E853EA5B7840C587C3F
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231362e302f32342d3234203d3e203136323736.roa
Signing time: Sun 10 Nov 2024 19:42:39 +0000
ROA not before: Sun 10 Nov 2024 19:37:39 +0000
ROA not after: Sun 09 Nov 2025 19:42:39 +0000
asID: 16276
IP address blocks: 45.132.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:b7:1b:30:1e:b0:9e:1f:81:77:0e:85:3e:a5:b7:84:0c:58:7c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Nov 10 19:37:39 2024 GMT
Not After : Nov 9 19:42:39 2025 GMT
Subject: CN=30C0A64E70AC75DBCD054C139D4B9A36A01DDBB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a4:b8:9f:59:22:4a:23:63:81:ac:9b:7b:b5:
24:26:ac:bf:19:8f:c1:23:fc:1e:5e:89:10:86:ac:
b7:2b:a1:df:7a:b1:b1:3d:ed:97:a5:8c:94:a9:b2:
d4:bd:89:be:d1:0f:ec:1a:36:33:7a:b2:88:26:50:
6b:75:e0:d3:ff:92:20:cb:2b:52:19:75:2a:16:9c:
88:44:e0:de:3d:4b:c2:1b:34:65:ce:d6:7b:17:44:
f7:52:a4:dd:ca:46:cb:38:7a:1c:cc:06:78:30:f2:
57:0a:b6:71:c3:57:91:b0:27:a7:94:df:2c:7f:a7:
3c:5b:13:53:a0:35:28:a4:25:eb:26:4f:fb:66:c4:
95:6e:09:e0:46:bb:54:c9:6f:9d:9b:6e:7f:9c:b8:
0f:51:5e:83:87:c6:9c:34:79:09:7f:e4:2e:76:0d:
7b:c6:18:53:1f:8f:b0:b2:5d:67:51:ce:0b:38:2a:
a3:57:7b:76:9b:08:4a:9d:c6:76:1f:49:8d:fb:21:
4c:9e:b4:34:d4:70:18:e0:26:3c:6c:56:0a:7f:18:
a3:65:0c:00:84:d4:42:43:9e:97:b8:62:2a:a4:3e:
f3:97:09:cb:ac:ff:47:70:ba:74:fb:bd:3f:52:42:
26:d0:25:c0:1e:e8:cf:0f:fd:0c:6d:20:f4:26:03:
09:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C0:A6:4E:70:AC:75:DB:CD:05:4C:13:9D:4B:9A:36:A0:1D:DB:B6
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231362e302f32342d3234203d3e203136323736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.216.0/24
Signature Algorithm: sha256WithRSAEncryption
16:4a:10:d2:bf:cb:0a:9e:46:4e:8f:12:68:0a:ba:9b:af:92:
00:69:61:02:47:38:74:0d:7f:93:85:ac:2b:d7:21:7f:cd:67:
97:bb:3a:5a:44:cd:21:a1:8a:47:f7:c7:71:42:ed:22:f8:2b:
50:6f:6d:0d:a8:53:28:fb:c4:d7:91:ec:74:a1:b1:b2:01:3a:
f0:b9:26:fe:ee:1f:9f:b4:71:86:13:26:71:94:5a:a1:38:46:
d8:e9:69:43:c7:7b:cd:7b:6e:13:f5:4e:76:9d:f2:76:f7:ce:
8f:da:f1:3b:04:fd:3f:ee:c1:b0:65:70:cd:80:e4:26:09:dd:
1d:e8:de:90:60:98:bd:1e:cf:3e:e7:3d:f3:f3:36:57:76:74:
b3:46:d0:a7:6d:93:3c:b2:1c:67:2e:f0:93:07:db:28:9d:ca:
03:63:a5:12:49:71:2b:88:a6:03:90:ea:4d:54:7f:2d:d6:0f:
97:85:d8:ee:62:c9:cf:28:82:ae:7a:7e:63:ec:df:9d:4d:88:
4a:5b:c5:ff:dc:96:98:5d:b9:79:0a:5d:16:29:f9:82:c8:38:
8d:32:ab:79:84:0e:d7:33:35:38:5b:f5:32:32:0b:04:e4:d1:
06:6f:4a:b8:c3:02:ad:fa:db:e8:ef:34:76:bc:60:d6:07:d7:
f4:1a:35:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:18:36 2024 by rpki-client on console-ams.rpki-client.org