Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131372e302f32342d3234203d3e20323135373732.roa
File: 39332e39352e3131372e302f32342d3234203d3e20323135373732.roa (raw, json)
Hash identifier: vLSBueodjY+0YJW63au8p8n765D5sPEn1sQkXoc5D7w=
Subject key identifier: B1:94:51:8E:F0:A1:2D:0D:8A:30:ED:C7:CD:F4:95:1F:A8:1F:80:90
Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial: 3CD5AE1616FC7D08DA00DE53E54571C9368AD5C2
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131372e302f32342d3234203d3e20323135373732.roa
Signing time: Mon 04 Nov 2024 14:32:47 +0000
ROA not before: Mon 04 Nov 2024 14:27:47 +0000
ROA not after: Mon 03 Nov 2025 14:32:47 +0000
asID: 215772
IP address blocks: 93.95.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:d5:ae:16:16:fc:7d:08:da:00:de:53:e5:45:71:c9:36:8a:d5:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
Validity
Not Before: Nov 4 14:27:47 2024 GMT
Not After : Nov 3 14:32:47 2025 GMT
Subject: CN=B194518EF0A12D0D8A30EDC7CDF4951FA81F8090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:11:38:9b:e3:62:89:2f:f1:5d:73:3b:dc:e5:
c2:76:34:c8:e2:9e:0c:42:8c:64:cb:c6:88:1a:0c:
d1:85:c6:d9:e0:52:f8:0e:7b:41:47:22:b7:e6:47:
c2:58:0e:31:0f:fe:f1:0d:b9:c0:c5:29:8b:71:3d:
59:8e:7a:bb:82:29:38:77:15:96:fd:da:e4:78:cb:
2c:e8:af:bb:47:0f:90:76:2d:98:99:65:d9:70:ab:
0c:2b:61:a1:6f:d4:c9:0d:21:6a:b9:be:a9:2e:9c:
b4:3d:72:fd:6f:30:44:a4:83:1d:3e:2a:44:f4:99:
14:66:5e:32:72:c9:96:35:2e:91:44:19:5a:0a:6f:
60:e9:57:92:25:b4:54:a7:bb:e0:9a:8e:b7:71:69:
ff:45:9d:9f:23:e1:cc:eb:82:61:fc:11:57:1f:dc:
f1:34:2d:47:83:83:4f:bf:f0:e2:91:e2:bf:48:3c:
c4:77:9c:f4:98:3e:07:c7:2f:26:18:9e:a7:0f:6b:
54:5b:0c:a8:c4:53:4d:50:41:19:98:e4:d3:77:ad:
9c:e2:80:98:23:de:8e:19:5b:37:2f:20:05:a5:81:
93:e4:af:9a:59:be:53:eb:7b:8f:4b:45:b7:8d:2d:
a5:07:c4:d9:20:90:b3:6d:6b:20:71:52:7c:4a:b3:
d2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:94:51:8E:F0:A1:2D:0D:8A:30:ED:C7:CD:F4:95:1F:A8:1F:80:90
X509v3 Authority Key Identifier:
keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131372e302f32342d3234203d3e20323135373732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.117.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:1d:62:63:17:8d:c5:48:26:3e:e5:e2:bd:71:07:83:c1:b5:
ac:be:98:a2:2a:7c:f9:58:c9:f8:2b:d9:f2:12:c6:f1:78:7f:
38:cf:d4:c5:58:2e:be:d3:64:80:e0:8c:63:07:55:2c:59:43:
55:69:d3:ec:d0:a9:04:42:12:2e:60:75:45:15:08:d8:6d:6e:
3e:76:da:bf:d5:fa:65:b6:b8:b9:26:7f:13:bb:d5:ef:c5:db:
94:9f:5f:c0:c2:a6:70:ac:96:f6:a7:12:98:4e:7c:d0:a0:70:
7c:1c:b0:c7:77:66:48:7b:96:e1:12:1c:cd:7c:88:56:4d:c7:
ed:d9:40:2e:b8:e2:e2:5b:c9:bc:dc:3a:f2:5c:1b:7c:df:8e:
3b:b3:ba:d8:1b:a0:0b:59:f3:50:03:b4:d8:cd:31:e1:14:5a:
60:3c:f2:79:b3:a8:b5:b5:56:43:df:60:00:8d:d4:5b:be:73:
df:1e:e6:ab:b8:71:a7:a9:41:d4:18:db:5e:69:8c:19:08:67:
93:18:3c:0f:f3:95:b0:43:4b:37:61:27:95:f2:d4:e0:b8:9c:
5b:2b:fd:bf:3e:7e:b0:9b:ac:16:ac:43:08:22:c0:fd:46:79:
c7:66:dc:87:4f:c7:82:15:e2:41:87:d3:0c:e0:a5:26:63:16:
d4:15:37:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 12:00:55 2024 by rpki-client on console-ams.rpki-client.org