Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231392e302f32342d3234203d3e203536393133.roa
File: 34352e3133322e3231392e302f32342d3234203d3e203536393133.roa (raw, json)
Hash identifier: AxLNZDyeHINJ0r0eh4VNHb6q4DdnWSgJt/pD0neyKdY=
Subject key identifier: 6E:89:B3:94:AB:72:E9:D8:E3:58:D6:9C:4B:A2:DD:B7:46:5E:1B:21
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 5108FD9527A9875C86B47B153B556DA041844B3E
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231392e302f32342d3234203d3e203536393133.roa
Signing time: Wed 28 Aug 2024 13:05:19 +0000
ROA not before: Wed 28 Aug 2024 13:00:19 +0000
ROA not after: Wed 27 Aug 2025 13:05:19 +0000
asID: 56913
IP address blocks: 45.132.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:08:fd:95:27:a9:87:5c:86:b4:7b:15:3b:55:6d:a0:41:84:4b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Aug 28 13:00:19 2024 GMT
Not After : Aug 27 13:05:19 2025 GMT
Subject: CN=6E89B394AB72E9D8E358D69C4BA2DDB7465E1B21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b9:38:4b:a3:eb:06:98:6e:ce:a8:20:6f:35:
a2:90:c0:23:46:cf:b7:44:28:76:97:58:5f:40:9a:
72:5e:3b:da:a6:0f:5e:da:82:9c:fe:29:53:3a:ad:
23:d1:f9:a8:12:73:1c:83:b4:11:93:74:f6:19:dc:
f3:95:34:e0:7c:60:ae:84:64:56:82:9c:60:71:51:
5e:a7:ec:26:64:d7:d3:7d:57:63:e6:85:8f:7d:07:
f3:d7:f6:8a:86:32:dd:60:1b:19:bb:7f:f9:a4:f1:
9f:2d:a4:5a:43:87:ff:a2:16:a8:73:de:2a:1e:96:
de:90:a5:0a:67:8a:0a:f1:47:a9:b5:07:c1:df:68:
c1:39:4e:3b:5c:53:ee:d0:e2:1f:15:ca:a7:e7:65:
93:aa:77:63:42:28:11:af:f5:41:86:b3:b0:41:15:
f0:91:0b:82:b1:e4:95:6c:a9:e7:29:ef:a2:fd:1a:
38:d3:19:20:ec:7c:d3:72:e9:73:1e:1e:31:d2:a7:
32:fe:8a:d6:84:61:05:d3:82:68:9a:cc:b1:4d:6b:
63:ab:ef:cb:94:74:74:cd:62:82:ce:b2:30:2b:3d:
aa:a1:bf:d8:b6:70:75:a2:a4:42:f4:a3:3b:00:59:
95:73:a8:5e:49:e4:a8:10:05:5c:25:cf:7a:9a:c7:
fa:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:89:B3:94:AB:72:E9:D8:E3:58:D6:9C:4B:A2:DD:B7:46:5E:1B:21
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231392e302f32342d3234203d3e203536393133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.219.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:da:aa:f6:1e:e1:b0:02:f6:d5:2f:bb:81:29:d8:74:4d:5c:
b5:da:f6:f3:c5:60:1b:89:e6:72:e6:df:e9:ce:5d:9d:37:41:
7c:0a:de:91:e7:c5:1d:91:09:a6:db:1f:ae:fe:e2:35:d7:6e:
46:d8:d8:02:9f:10:27:3f:2b:5a:e1:b2:83:c6:4d:b7:38:1c:
31:e3:f6:a8:8c:43:ee:a9:34:0c:94:9e:50:9b:9a:1b:0c:4f:
17:ba:39:a5:71:2a:9d:8d:72:8d:f9:2b:27:85:72:a9:13:e6:
24:4d:fa:74:bd:2e:70:01:c1:28:5a:9e:ab:4d:be:5d:24:0a:
79:ad:58:98:2b:17:c1:f1:7f:a5:62:fc:26:43:7d:6f:47:66:
a3:5f:5f:b1:30:b7:2a:b6:62:ef:95:6f:66:d9:cc:0a:5f:3a:
c1:d0:ac:89:24:b4:66:65:13:13:57:cc:30:eb:13:0e:a5:de:
e7:5c:b2:a4:be:30:0d:4f:61:0b:75:40:c8:13:fa:c4:13:06:
59:44:dc:ff:52:79:16:71:42:dd:49:bc:22:bc:12:8f:d7:04:
9f:f3:36:30:21:df:df:f7:62:00:04:e9:56:9c:db:36:e5:96:
53:e4:38:53:ff:98:e5:19:a0:34:63:31:7c:44:27:03:4f:84:
86:dc:c0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:08:36 2024 by rpki-client on console-fra.rpki-client.org