Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234312e302f32342d3234203d3e2039303837.roa
File: 34352e3134352e3234312e302f32342d3234203d3e2039303837.roa (raw, json)
Hash identifier: RXk1abykcCWuv/9+gQ1Ek+sfcf7cDuncKDgQoTTxThQ=
Subject key identifier: EA:4C:FB:E3:57:A8:08:33:17:DA:3C:02:36:81:1E:E1:2B:C9:81:F3
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 1D1CF7C1875F00487D1885DE3BEAE767F197F9A9
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234312e302f32342d3234203d3e2039303837.roa
Signing time: Wed 27 Sep 2023 12:05:31 +0000
ROA not before: Wed 27 Sep 2023 12:00:31 +0000
ROA not after: Wed 25 Sep 2024 12:05:31 +0000
asID: 9087
IP address blocks: 45.145.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:1c:f7:c1:87:5f:00:48:7d:18:85:de:3b:ea:e7:67:f1:97:f9:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Sep 27 12:00:31 2023 GMT
Not After : Sep 25 12:05:31 2024 GMT
Subject: CN=EA4CFBE357A8083317DA3C0236811EE12BC981F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e6:4c:9d:36:90:fc:d9:aa:54:ad:6c:a6:6a:
17:86:a3:61:f9:aa:81:50:e5:cb:d0:d3:97:10:ec:
75:83:b5:47:26:cd:b4:bb:08:0a:a5:fe:1e:f7:10:
a5:9a:36:ef:c8:2a:39:2b:45:c0:d1:fa:5f:9f:70:
cf:96:50:1a:a0:d8:fe:c9:62:a7:f5:2f:b4:04:ec:
21:91:c7:a6:b8:96:ed:68:0a:5a:50:21:af:c3:d2:
3b:d1:33:44:b3:d3:25:88:da:b8:cd:5e:2d:94:aa:
25:92:89:d8:13:30:e4:74:6c:99:44:fc:53:de:39:
6e:9c:e9:45:88:d4:2e:dc:b3:a9:7a:ca:9a:f1:0e:
58:ec:f8:8c:b0:eb:ec:38:da:ef:45:65:a0:1e:19:
23:0a:cb:2c:ae:c7:93:f9:ee:37:0d:66:3d:97:2e:
1b:cf:5b:2f:31:03:8e:27:df:f1:78:09:2d:2e:d7:
4a:7b:7b:22:d6:c0:cc:9b:25:06:84:ba:ac:47:99:
c3:c8:1c:13:b2:48:62:e1:86:4d:b2:c5:07:36:14:
88:31:71:ef:ae:ae:57:a1:f3:66:de:4a:65:fd:28:
5f:47:77:32:f8:cc:fa:1d:41:e3:33:cf:c8:b5:13:
93:9a:20:c6:c7:4f:bb:d2:8d:be:07:38:83:af:16:
76:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:4C:FB:E3:57:A8:08:33:17:DA:3C:02:36:81:1E:E1:2B:C9:81:F3
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234312e302f32342d3234203d3e2039303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.241.0/24
Signature Algorithm: sha256WithRSAEncryption
90:3b:9c:88:a1:0a:34:49:6b:17:02:a9:e6:be:60:0b:2a:41:
e5:89:c0:ee:d9:60:7c:84:18:8e:e1:1b:4f:e3:df:73:24:e4:
9b:9d:69:9a:81:90:5f:8f:44:6f:46:dd:0e:57:10:4e:48:f0:
a1:36:41:f0:e4:94:42:a8:26:07:27:c8:ed:21:3e:ac:00:1a:
a4:13:9f:eb:38:e7:50:7d:4a:f8:11:c7:d6:74:70:d4:96:d8:
c5:4e:80:fb:92:50:43:3a:5a:51:9f:2e:44:32:17:f3:8e:bd:
bb:79:5d:18:0f:2a:a0:7f:58:7d:e6:2a:87:4b:63:41:67:f6:
1e:12:4d:ff:d4:66:d1:be:5b:56:15:fa:1d:6b:ae:86:6e:86:
b0:f4:d6:96:d4:b4:11:d1:1b:23:48:90:49:f8:4a:6e:8a:4e:
de:2b:37:4c:d0:06:47:02:5a:9f:ec:48:d8:6c:d4:65:26:c9:
00:b9:5f:bc:da:76:b3:b2:00:1d:fe:9b:a7:47:d7:7f:f2:27:
14:a1:66:86:0a:a2:f6:89:f9:33:d2:e9:f6:8e:16:dd:d6:a0:
37:3d:98:00:10:0e:7e:63:31:01:74:75:90:ac:0f:f3:1c:23:
8d:7b:83:42:c9:3b:51:5f:ce:3c:61:f6:f4:da:36:f2:bc:1a:
7d:51:36:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 06:55:15 2024 by rpki-client on console-ams.rpki-client.org