Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234312e302f32342d3234203d3e2033333230.roa
File: 34352e3134352e3234312e302f32342d3234203d3e2033333230.roa (raw, json)
Hash identifier: 87rYUj0P3YM+GV2s42Tozk3YEkzKjwOuXxkBfaPoFFE=
Subject key identifier: 96:54:F7:B3:4C:25:49:85:76:7F:A0:D6:3D:D5:14:04:EF:D8:6D:B0
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 289317EF2379BC45D7D22138397B30FBACEF1595
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234312e302f32342d3234203d3e2033333230.roa
Signing time: Wed 27 Sep 2023 12:05:33 +0000
ROA not before: Wed 27 Sep 2023 12:00:33 +0000
ROA not after: Wed 25 Sep 2024 12:05:33 +0000
asID: 3320
IP address blocks: 45.145.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:93:17:ef:23:79:bc:45:d7:d2:21:38:39:7b:30:fb:ac:ef:15:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Sep 27 12:00:33 2023 GMT
Not After : Sep 25 12:05:33 2024 GMT
Subject: CN=9654F7B34C254985767FA0D63DD51404EFD86DB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:78:7f:4c:38:e7:34:ac:23:7c:8b:f5:ca:e0:
76:f3:50:d0:22:24:a5:6a:7e:90:3c:81:4d:d7:da:
eb:75:d2:30:53:21:86:d5:28:49:c7:94:7a:08:c8:
ac:b7:ad:e3:8a:ef:61:7b:28:68:52:57:fe:79:7f:
c9:d4:32:2b:7a:61:33:5c:31:1c:04:2a:17:bf:9f:
67:48:e9:ef:d7:e2:bf:9c:4b:8c:d8:a1:dd:4f:51:
75:3f:20:ec:a2:81:b9:66:4c:5e:5f:9e:4f:ec:65:
e0:9d:ad:9e:bb:8f:63:1e:24:64:34:4f:9e:41:eb:
1a:33:c0:9e:71:af:3b:a3:4c:55:22:43:4c:46:c0:
8d:fc:75:d0:8f:98:e6:24:99:95:d0:91:46:13:7f:
cb:0d:f7:44:f5:17:cb:11:61:42:52:24:2c:d1:0d:
ef:22:63:6d:c2:e0:67:a9:7f:aa:38:ba:66:e3:ef:
da:86:37:86:ef:91:16:c4:5c:b7:96:ec:ea:02:bc:
09:42:ab:1d:44:20:a1:16:04:a1:77:fa:0a:cd:e1:
54:87:16:2b:6b:e1:9a:c9:75:af:48:91:98:20:4c:
cd:17:6d:b1:b1:22:83:cf:40:87:aa:e2:d4:4c:4c:
87:d9:b2:0e:33:e8:55:71:64:75:94:60:ea:30:74:
cf:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:54:F7:B3:4C:25:49:85:76:7F:A0:D6:3D:D5:14:04:EF:D8:6D:B0
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234312e302f32342d3234203d3e2033333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.241.0/24
Signature Algorithm: sha256WithRSAEncryption
17:c7:19:66:b6:37:d6:4e:e5:ff:5f:47:d3:cc:38:ac:17:26:
2f:51:be:ff:51:05:a7:26:fc:e8:63:fc:72:6f:bc:c5:e8:a5:
20:70:c8:52:48:53:01:1c:e6:9d:fa:0e:fb:b9:4f:31:43:6d:
86:93:f0:08:6a:2e:93:4d:b7:e2:00:65:2b:c4:71:89:0b:a0:
8c:66:95:89:b7:7c:e9:c7:50:3a:1c:04:79:1b:b4:f7:53:bf:
5a:d2:d1:ac:b3:a3:f2:1e:b1:6e:f5:c8:8f:50:e2:8f:b1:38:
0b:5a:5a:79:c1:0f:45:dd:68:67:2b:7c:4e:f5:89:15:98:ca:
2b:28:a7:f1:15:0a:06:85:bb:7d:4a:5f:aa:8b:92:ba:ac:b5:
e8:fe:a0:b7:b5:ff:cf:39:66:bf:23:a4:04:d2:af:8b:45:67:
1a:66:6b:4e:e9:13:b5:1f:93:fa:93:64:41:c8:0b:2b:8d:46:
42:f6:07:3c:4e:98:af:da:db:c7:89:4c:b8:b2:49:1e:ad:ce:
6b:b8:86:1f:02:df:af:ff:4e:27:43:b3:5d:c1:e2:73:b7:ae:
7d:af:8c:de:bd:da:65:3a:2f:72:55:59:e6:1b:fa:2f:ab:8a:
d7:cc:2f:c5:ac:bc:fc:65:11:76:2f:aa:11:fc:2b:94:0a:62:
d0:b1:8d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 17:02:14 2024 by rpki-client on console-fra.rpki-client.org