Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37352e302f32342d3234203d3e20323731393837.roa
File: 3231332e3133392e37352e302f32342d3234203d3e20323731393837.roa (raw, json)
Hash identifier: k/dg+vn2LRgJwjRiBw+dTVhqGlwM5OEWHrHzMTRZgGU=
Subject key identifier: C6:58:85:5B:70:9E:10:C3:14:54:F1:E6:FB:CF:9B:46:25:F3:B6:4F
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 65B7E5BCE0BA379A565A04FC29B0575F0BFAAA0C
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37352e302f32342d3234203d3e20323731393837.roa
Signing time: Tue 10 Sep 2024 15:35:26 +0000
ROA not before: Tue 10 Sep 2024 15:30:26 +0000
ROA not after: Tue 09 Sep 2025 15:35:26 +0000
asID: 271987
IP address blocks: 213.139.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:b7:e5:bc:e0:ba:37:9a:56:5a:04:fc:29:b0:57:5f:0b:fa:aa:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Sep 10 15:30:26 2024 GMT
Not After : Sep 9 15:35:26 2025 GMT
Subject: CN=C658855B709E10C31454F1E6FBCF9B4625F3B64F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0d:a9:2a:9b:39:44:67:0c:c1:bb:c3:33:e5:
ee:8c:a7:1b:fe:ed:42:a6:9a:ab:08:96:76:d2:47:
02:cb:4b:8b:f2:24:46:ca:35:b5:9e:31:4b:96:8e:
66:57:34:f6:47:44:1a:fa:cd:75:f6:46:c9:97:36:
e8:5d:ab:2e:4e:2a:ac:cb:c3:a1:cf:b7:21:2b:a1:
0c:bd:f5:1f:94:ab:28:a2:06:78:c6:a4:02:21:23:
b9:d3:b5:77:7e:97:69:6d:d1:3a:4f:e1:3d:28:a9:
b8:06:9c:66:3a:cb:35:ff:b5:41:61:f4:30:47:14:
61:fb:69:c0:2f:f2:b4:d5:23:fa:b9:4e:50:e7:c6:
db:e4:68:b3:b2:20:71:b3:2a:31:5a:d7:97:47:76:
45:73:2e:2f:af:df:02:7d:74:7a:3e:bf:d8:5c:cf:
b5:c6:3a:1a:34:7d:e2:9c:9b:62:1c:2a:03:4a:11:
18:23:df:58:d1:60:3e:9f:8c:c5:9a:af:5c:50:68:
dd:46:56:bd:10:0f:c2:f4:7e:b0:6c:4c:3f:33:af:
f7:5a:23:eb:c4:6a:f4:93:13:2b:48:a8:32:bc:0b:
52:26:2c:0d:c9:b3:19:7f:93:76:12:a2:a6:32:43:
d7:ff:49:d5:f4:0a:38:14:c9:82:d7:16:a9:12:43:
81:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:58:85:5B:70:9E:10:C3:14:54:F1:E6:FB:CF:9B:46:25:F3:B6:4F
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e37352e302f32342d3234203d3e20323731393837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.75.0/24
Signature Algorithm: sha256WithRSAEncryption
43:95:dd:ba:82:16:70:65:0e:4b:00:5f:12:5a:7e:55:0d:19:
7f:7b:12:e8:80:2b:cb:96:fd:09:c0:83:07:7f:b3:00:59:ab:
a6:a4:82:8d:af:f3:fd:1c:9b:dd:54:e6:13:ef:22:60:50:f0:
cb:27:8c:13:77:41:83:da:fa:41:17:58:d6:a0:5c:c5:9b:93:
02:97:f6:c0:1c:61:59:a6:b9:8a:eb:ac:3e:ba:7d:da:7e:0a:
06:7c:b2:ca:d2:a0:52:b2:eb:5a:2e:7f:a5:4f:e5:c0:d0:a2:
f4:36:96:09:2d:b3:81:9c:a5:65:88:c1:70:52:22:7d:a3:fd:
c2:72:e1:ca:d3:85:d4:f7:a2:fb:a4:53:20:8a:5a:17:11:dd:
dc:4c:fa:ea:b1:0e:46:78:1d:92:57:c2:17:bc:ac:64:a4:99:
44:58:8a:c3:6c:fe:c4:f8:1f:8d:80:a6:a1:da:57:c7:2f:0c:
86:b2:80:ca:0b:8a:88:8b:06:33:dc:84:38:6d:6c:cc:52:c7:
20:8d:04:ec:f8:e0:5e:dd:fa:96:71:10:4b:39:9e:1d:48:dd:
66:e2:9d:c1:a0:9f:93:4a:5c:30:55:64:dc:c2:73:63:1a:7d:
a8:82:64:6e:76:c3:da:84:3c:af:15:56:97:ad:18:ad:44:c8:
5c:d4:a8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:40:00 2024 by rpki-client on console-ams.rpki-client.org