Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3135302e302f32332d3234203d3e20313532313739.roa
File: 34352e38392e3135302e302f32332d3234203d3e20313532313739.roa (raw, json)
Hash identifier: bmojzZeepyIZ/0OgLjhR5pc6BgvPZg2mTK4vcnODns8=
Subject key identifier: F6:55:44:30:6E:71:51:70:52:7D:DD:A0:2E:22:CC:E9:9E:22:08:64
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 35BB345D463E23F0ACBAD1A752C2BD81E9D9C2C5
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3135302e302f32332d3234203d3e20313532313739.roa
Signing time: Tue 16 Jul 2024 14:01:14 +0000
ROA not before: Tue 16 Jul 2024 13:56:14 +0000
ROA not after: Tue 15 Jul 2025 14:01:14 +0000
asID: 152179
IP address blocks: 45.89.150.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:bb:34:5d:46:3e:23:f0:ac:ba:d1:a7:52:c2:bd:81:e9:d9:c2:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Jul 16 13:56:14 2024 GMT
Not After : Jul 15 14:01:14 2025 GMT
Subject: CN=F65544306E715170527DDDA02E22CCE99E220864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:62:4d:a3:2c:5f:bb:f6:e1:fb:0d:71:9e:ba:
4f:02:88:b5:29:9d:b5:db:3a:c5:a7:85:b1:22:6f:
1a:25:99:01:e3:b4:84:fa:1f:a8:e3:59:12:ad:50:
89:1a:b8:c1:c9:64:e8:14:87:a0:dc:07:74:6e:04:
0a:1d:4e:ad:64:7f:33:bd:eb:ac:61:09:b0:8c:66:
2f:16:25:1f:79:81:0e:33:28:19:9e:f0:01:23:f7:
32:0e:0a:44:a5:69:18:d6:50:b4:f5:13:8c:fc:b9:
69:4a:66:74:4f:78:39:71:38:1e:53:34:03:f4:7c:
14:b1:e3:17:ea:c5:1d:2b:da:bf:f2:45:37:77:cb:
21:e5:e0:23:66:4c:de:e3:bb:83:6c:9f:5f:82:30:
e0:b5:24:48:01:3d:25:e4:ae:7c:25:96:ad:88:0e:
ec:a4:09:39:35:d2:8c:7b:b6:61:73:af:71:98:95:
e7:9b:26:ce:2c:96:38:b0:76:8f:09:18:58:2b:d9:
8d:5a:56:12:cd:0d:82:63:32:0f:55:6c:75:5f:1e:
96:c0:7b:a3:56:b1:d0:39:af:22:05:5a:d7:e3:5b:
1b:aa:11:6a:8b:f1:f7:1f:36:2d:af:37:3f:b9:c9:
1f:cb:47:e0:17:90:21:7b:a7:e5:bd:54:77:ce:6d:
37:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:55:44:30:6E:71:51:70:52:7D:DD:A0:2E:22:CC:E9:9E:22:08:64
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3135302e302f32332d3234203d3e20313532313739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.150.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:59:4d:b5:2b:9f:0f:7b:d2:4e:d1:23:80:f8:0f:22:8f:30:
77:cc:00:7b:c7:d7:61:de:6c:8c:f7:af:73:d9:8d:9e:04:e5:
92:0b:dd:ac:d2:b3:0e:a2:c3:b5:51:67:e8:e4:17:92:dd:24:
67:b0:dd:79:05:57:e3:cf:e5:bb:c7:83:b6:75:51:d3:d5:40:
80:26:19:29:f1:4b:21:c9:13:84:05:57:db:7a:28:15:0e:dd:
40:43:3a:91:6b:1d:10:b5:51:a5:bc:a3:43:d1:55:b0:ee:85:
ee:3b:51:d4:9c:df:5c:6b:1b:90:ee:5f:46:47:c2:46:ab:2f:
0f:61:ba:ca:96:fd:2b:06:f3:e1:e4:00:b0:9d:ac:8b:78:d1:
e6:ee:a1:93:5f:d5:4b:6f:b0:ed:df:d3:f5:73:d9:1b:47:07:
29:1b:91:ec:b6:65:34:9f:41:72:a2:1c:46:c4:e7:41:8b:33:
a3:78:17:c0:78:a8:73:0c:2a:4d:93:aa:65:e9:ff:f4:54:66:
f9:32:08:b4:4a:59:ef:66:0f:a7:14:3d:a0:a7:39:42:da:0a:
7a:bb:a4:af:a0:17:9b:a2:9c:12:42:0f:7a:77:8f:28:b4:02:
73:56:dd:48:b3:68:e3:90:21:93:83:20:0a:d3:39:e6:9d:d7:
d8:0c:c2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:18:36 2024 by rpki-client on console-ams.rpki-client.org