Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131322e302f32342d3234203d3e203231383539.roa
File: 39332e39352e3131322e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: 1vjH8mfscIQPc/vTfaSXURucL05I0LJVlR9FbaAY1YM=
Subject key identifier: EE:0B:11:9F:EF:A4:22:BF:FC:11:54:70:34:BD:E4:9C:1E:73:91:76
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 4AAF0F9FF534EE061C262B3404B4DE368FE4177E
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131322e302f32342d3234203d3e203231383539.roa
Signing time: Thu 07 Nov 2024 01:46:19 +0000
ROA not before: Thu 07 Nov 2024 01:41:19 +0000
ROA not after: Thu 06 Nov 2025 01:46:19 +0000
asID: 21859
IP address blocks: 93.95.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:af:0f:9f:f5:34:ee:06:1c:26:2b:34:04:b4:de:36:8f:e4:17:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Nov 7 01:41:19 2024 GMT
Not After : Nov 6 01:46:19 2025 GMT
Subject: CN=EE0B119FEFA422BFFC11547034BDE49C1E739176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ef:c2:e3:20:14:15:b3:44:fd:b9:63:47:42:
2e:91:d7:6c:b0:ec:ea:32:20:0d:9c:b8:50:c7:93:
3a:1d:5d:e1:21:22:2f:8c:48:54:56:e2:0a:3f:13:
9a:87:56:54:91:14:38:0e:ac:38:fc:2e:f1:16:ff:
ad:24:94:ce:e0:b4:0b:38:b6:77:e5:66:f7:69:a7:
f1:d8:54:7a:ea:c9:a9:5c:79:b5:de:a3:1c:ff:3d:
32:9e:44:49:8a:4b:9f:ba:0e:4e:cd:47:ea:79:4c:
48:e1:bc:dc:33:b0:71:0b:ee:7a:c0:80:4e:8b:4a:
2c:44:0d:ad:b4:6b:d0:b2:3a:bf:84:a8:0e:a8:76:
90:0e:39:60:9d:2d:04:85:f8:f5:88:11:c0:e3:88:
f6:93:78:03:83:ce:27:88:1b:22:63:ea:2d:42:c6:
85:ae:a6:0d:8e:36:86:18:57:d5:c0:cd:78:fc:be:
66:52:3a:6c:97:28:1d:4a:40:0c:c4:fd:2a:02:42:
d6:f5:76:8b:23:98:dd:16:ee:52:a5:76:50:71:d3:
85:16:ea:c8:44:c9:8e:5a:cd:1e:68:7f:56:30:ae:
51:9f:2f:b5:a8:d5:6d:21:20:79:44:c8:1a:9b:b0:
10:86:06:06:63:63:78:98:c2:d3:e9:60:b2:d7:38:
c1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0B:11:9F:EF:A4:22:BF:FC:11:54:70:34:BD:E4:9C:1E:73:91:76
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131322e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.112.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:de:bc:52:b0:d8:56:63:7d:b9:a2:0b:75:67:80:d8:e1:16:
bd:89:24:ae:43:04:45:db:7d:1b:09:0d:08:8d:c9:1e:bc:1a:
44:a7:e7:3a:cf:a2:37:ba:78:e4:c0:30:26:e3:c9:dc:e4:21:
b5:fb:b7:13:b6:dd:92:b9:78:69:57:4e:25:27:58:0f:25:66:
86:aa:8f:84:2c:df:ba:e9:38:2d:8c:c5:fc:af:36:d1:f8:44:
e3:16:73:a7:c7:f2:1f:01:da:e1:41:bd:d6:9d:5e:a2:0f:6c:
42:7c:8d:97:46:f1:15:71:0f:17:e7:e5:66:b0:0c:81:20:bb:
fb:83:cc:bf:37:39:93:bc:46:1a:9a:27:23:7d:94:db:54:f2:
a1:a8:f1:0a:82:d6:3c:bb:67:f3:01:3f:3e:12:bc:11:46:5e:
22:24:7d:c3:1d:e6:0a:8e:61:38:da:16:12:09:96:71:9c:e6:
96:9b:21:e6:f7:a7:d3:1f:db:e4:87:4f:f1:6f:61:9c:62:6c:
43:4a:ef:ac:cc:91:df:6a:4c:de:34:87:f4:3a:bd:68:74:ab:
1b:2e:62:6b:11:bb:06:ed:2b:9b:34:38:55:a5:5b:3e:c0:f0:
79:77:17:81:e2:84:e6:57:70:0a:2b:85:6a:33:42:c0:b0:60:
c4:fa:51:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 14:22:19 2024 by rpki-client on console-ams.rpki-client.org