Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234302e302f32342d3234203d3e20323639303730.roa
File: 34352e3134352e3234302e302f32342d3234203d3e20323639303730.roa (raw, json)
Hash identifier: Fx8lA4avbsmernWt6IDOzA3NfpW1UoiSmWx8aeHvPn4=
Subject key identifier: E0:6E:74:04:9D:24:39:BC:61:C9:4B:A9:A3:42:88:4A:F1:DC:02:2D
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 21AF52989479153B9CB1BDCCB7FFE45B188E348A
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234302e302f32342d3234203d3e20323639303730.roa
Signing time: Fri 08 Mar 2024 19:00:07 +0000
ROA not before: Fri 08 Mar 2024 18:55:07 +0000
ROA not after: Fri 07 Mar 2025 19:00:07 +0000
asID: 269070
IP address blocks: 45.145.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:af:52:98:94:79:15:3b:9c:b1:bd:cc:b7:ff:e4:5b:18:8e:34:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Mar 8 18:55:07 2024 GMT
Not After : Mar 7 19:00:07 2025 GMT
Subject: CN=E06E74049D2439BC61C94BA9A342884AF1DC022D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:08:22:c4:c1:8c:d7:ab:46:50:30:0d:e1:97:
ec:7c:0a:7f:cd:fc:4a:d0:0c:7e:7e:15:ea:52:a4:
7a:03:f8:d8:d5:88:68:52:e4:3c:10:9c:0f:41:05:
d8:b4:1a:ea:92:f2:91:c5:27:64:47:d2:8d:70:21:
3b:7d:34:bd:fb:c3:76:dc:b4:5f:00:66:48:f0:f0:
0f:b0:21:59:9b:e8:7a:bf:57:29:4f:79:9e:33:a9:
51:f7:33:c8:95:0d:f4:74:65:d3:55:a5:e4:dd:6c:
3c:2c:96:4f:02:eb:4b:43:e9:a4:18:87:b0:59:28:
1e:99:e4:de:a8:42:57:5e:e6:c3:7b:ce:f8:90:fb:
12:f4:b4:98:f1:ba:bf:b4:ed:6d:0a:11:12:07:3c:
cc:c2:06:d2:25:3e:e3:7b:57:9b:51:cc:9d:bd:c8:
e2:68:3a:80:a3:48:f8:5c:47:48:18:8a:87:03:44:
8d:51:00:ed:68:88:09:2e:8d:ee:f0:7b:64:32:69:
ad:fb:c0:ff:fc:9f:77:f9:a4:28:64:24:39:eb:92:
a7:1c:8f:7b:1a:41:0c:a5:4a:e2:79:a8:69:b9:7a:
d6:65:54:db:08:32:25:d8:2a:6c:37:3d:7e:58:f5:
ce:2c:73:06:a9:db:a0:b0:60:0b:c7:12:86:c2:b4:
22:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6E:74:04:9D:24:39:BC:61:C9:4B:A9:A3:42:88:4A:F1:DC:02:2D
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234302e302f32342d3234203d3e20323639303730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.240.0/24
Signature Algorithm: sha256WithRSAEncryption
20:ba:97:5c:8a:56:75:a9:6e:83:2e:b6:c1:fc:6a:db:d9:87:
3d:8d:15:ea:56:05:9d:ce:b3:75:92:61:8a:dd:83:e6:7f:52:
b8:ce:4c:f8:00:4b:a8:cd:b6:54:6a:5f:c4:22:81:cc:15:6c:
cb:a7:56:3e:7b:53:7b:30:45:b0:36:8b:c6:85:05:0c:e6:58:
20:9a:1a:7d:10:d5:ba:11:20:cc:be:6d:f0:a6:37:9b:2e:66:
54:1e:13:5b:fe:d3:83:c3:ac:1b:64:19:75:38:c7:53:56:52:
82:15:89:78:c9:fc:99:91:7d:e6:9e:6e:f0:ac:5f:cc:1e:dd:
5d:3c:85:8f:51:6f:f2:f6:67:5a:f4:e5:d7:49:71:b2:80:c4:
32:1b:62:fd:87:3c:9d:60:c8:a0:9f:5e:d3:47:07:87:12:b2:
87:71:7e:29:39:ad:a9:03:3e:4b:24:f9:71:c6:6b:0d:bd:a5:
af:4d:e5:9f:fb:74:ad:c7:4d:a1:84:cb:c3:d5:d6:a3:76:71:
e8:80:df:6e:54:46:7f:fb:a5:19:b1:29:25:de:78:98:3a:9b:
90:f6:69:ca:74:37:c4:6f:77:92:1f:78:31:df:29:e4:49:a3:
93:d1:2c:14:14:b1:ba:13:48:b8:2e:39:c5:3e:b5:37:4f:cd:
56:fb:46:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:18:36 2024 by rpki-client on console-ams.rpki-client.org