Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e39332e3138342e302f32332d3234203d3e20383334.roa
File: 34352e39332e3138342e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: AgDIaeNXKjMDkwvUNi4RDqBQvLdmZGzG4aV/gHgeUXE=
Subject key identifier: B1:A1:41:91:CA:77:5B:E4:4C:B9:38:C4:EB:68:8A:68:A1:D2:FC:FB
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 5EA945CC77DF2E37FF26D0A6B0D7131CFCC51CF1
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e39332e3138342e302f32332d3234203d3e20383334.roa
Signing time: Fri 25 Oct 2024 00:01:17 +0000
ROA not before: Thu 24 Oct 2024 23:56:17 +0000
ROA not after: Fri 24 Oct 2025 00:01:17 +0000
asID: 834
IP address blocks: 45.93.184.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:a9:45:cc:77:df:2e:37:ff:26:d0:a6:b0:d7:13:1c:fc:c5:1c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Oct 24 23:56:17 2024 GMT
Not After : Oct 24 00:01:17 2025 GMT
Subject: CN=B1A14191CA775BE44CB938C4EB688A68A1D2FCFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ed:2b:b7:e6:1c:5e:cd:83:0c:f5:bf:be:65:
56:0c:e1:e4:9e:12:32:0f:cf:f3:4a:85:c0:fa:43:
5e:47:f4:47:b0:f9:34:70:47:4b:22:40:1c:cc:5d:
63:69:cb:c2:ed:e7:a7:4c:4b:72:46:1d:21:84:a7:
02:aa:bd:3b:ff:0c:12:11:16:c6:02:71:bc:00:9f:
65:19:2f:1d:07:c2:0a:14:36:1f:84:a1:51:e8:51:
19:10:e2:18:8a:f0:3c:27:bb:4a:64:75:2c:34:3a:
7b:b1:25:fa:8f:f8:50:d7:2c:05:cd:8e:6e:20:5f:
62:3c:8f:a8:50:29:48:a8:ff:e2:b3:74:3f:66:cd:
81:25:0f:49:1f:68:58:fc:5c:e2:b8:ce:6f:6b:0f:
f7:83:9a:47:62:9c:4d:51:5c:3e:d9:70:e5:85:9a:
df:3b:c5:71:8b:bb:1a:e4:75:99:c3:14:87:9c:43:
7f:ab:d2:19:b8:80:95:ba:e5:a3:5b:07:8b:7b:39:
93:73:ad:f1:e1:39:96:57:ae:39:f7:60:74:fe:ab:
5b:46:d8:2d:a3:6d:66:23:54:1e:a8:d8:88:98:7b:
f3:a6:91:77:ef:cb:d2:04:a2:32:9f:fb:90:03:48:
e7:fc:02:ca:d2:32:4f:16:1b:85:06:8b:c6:84:85:
db:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A1:41:91:CA:77:5B:E4:4C:B9:38:C4:EB:68:8A:68:A1:D2:FC:FB
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e39332e3138342e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.184.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:40:8a:d4:ad:5e:9c:31:99:33:33:82:26:60:6a:1a:b6:d6:
6a:a0:2c:eb:b8:02:62:90:98:c9:b2:2c:9e:90:d4:af:03:6a:
0b:e3:d0:c4:92:92:be:e3:ad:93:9b:66:fa:bb:98:e4:32:84:
05:a9:13:85:a9:3e:eb:e4:41:d8:b0:27:bb:a6:8c:8e:6a:52:
44:c4:0b:51:2d:f0:48:b1:e3:4a:07:7d:61:d9:3a:58:75:12:
67:1f:49:e7:86:a7:62:f0:63:e1:7c:ca:4f:25:cb:c4:4b:ab:
f2:c6:9b:4f:8c:cf:a7:c7:c7:89:82:aa:39:ea:dc:81:0a:51:
83:11:67:b4:4b:a3:c7:67:90:83:eb:ac:ec:fd:ca:e2:13:14:
3c:86:07:22:fb:1d:37:90:aa:23:ea:5e:28:85:ee:dd:60:bb:
f7:69:f3:b0:9b:bf:0d:97:12:ff:c5:a7:ba:ef:6f:5f:51:08:
f1:5e:5f:ab:7a:7b:df:40:26:4c:40:cb:65:ce:17:af:b2:42:
90:74:fd:6f:e0:e3:97:15:a3:04:48:a1:c5:df:0b:bf:0a:a8:
1f:72:2e:0c:f9:aa:71:3b:b4:e1:51:2b:ab:5d:67:02:04:6e:
02:b1:3b:89:2f:32:87:a3:f6:42:2b:4a:76:95:14:d4:5f:9c:
17:44:33:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:08:36 2024 by rpki-client on console-fra.rpki-client.org