Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38332e302f32342d3234203d3e2039303039.roa
File: 3231332e3133392e38332e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier: lKJSkJqFjy6TPDk7oRGHPjAYx2K53051mCG+JZr9O4Y=
Subject key identifier: 2E:A9:14:49:A6:F4:DD:EE:C2:5A:BC:81:42:4C:73:5B:0A:54:A4:41
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 6CFCADE03149FADBE9289E1DA7335653606A56C4
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38332e302f32342d3234203d3e2039303039.roa
Signing time: Fri 17 May 2024 15:43:29 +0000
ROA not before: Fri 17 May 2024 15:38:29 +0000
ROA not after: Fri 16 May 2025 15:43:29 +0000
asID: 9009
IP address blocks: 213.139.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:fc:ad:e0:31:49:fa:db:e9:28:9e:1d:a7:33:56:53:60:6a:56:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: May 17 15:38:29 2024 GMT
Not After : May 16 15:43:29 2025 GMT
Subject: CN=2EA91449A6F4DDEEC25ABC81424C735B0A54A441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3d:19:6b:eb:0f:da:6b:4a:fd:b7:cf:a2:4b:
dd:e9:79:0d:5c:87:03:c9:0b:0b:28:51:a7:b1:6b:
62:a1:e6:8a:f8:80:ce:58:d6:2a:d3:b6:4c:60:7b:
a7:53:e3:bc:f4:f3:56:9a:5b:7c:30:1a:e7:1f:6f:
8f:75:2e:a0:8e:d1:04:04:df:8d:a0:4b:94:01:53:
57:c8:4b:60:f3:4b:7c:7c:45:30:62:4f:07:2c:8f:
41:12:94:28:56:e8:9f:00:90:e0:ac:f3:83:25:8f:
5d:6e:09:2b:fb:b5:85:cb:60:c2:1f:f3:7d:6e:d7:
31:c4:d1:2c:75:bc:a8:cf:ce:49:ca:ef:bf:10:2f:
51:36:e8:39:60:14:e2:1a:d3:4b:c9:60:11:5d:2a:
b8:18:12:88:e0:e4:4a:9f:29:a9:62:95:9c:ce:d4:
dd:29:a1:da:5d:77:2d:1f:89:b2:99:55:b5:0f:e7:
36:3a:70:98:c2:99:9d:b3:d8:78:1f:38:9d:8d:5d:
aa:c1:eb:72:9d:8a:59:d3:cd:5c:a5:75:39:c3:fc:
3e:c0:65:7c:bc:77:7b:2d:00:0c:39:a2:e5:cc:98:
f2:dc:a4:f2:c8:ba:b5:c5:51:f7:7d:01:f3:d2:da:
fd:e4:3b:48:78:5d:3d:7a:83:8b:2b:6e:06:77:04:
cd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A9:14:49:A6:F4:DD:EE:C2:5A:BC:81:42:4C:73:5B:0A:54:A4:41
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38332e302f32342d3234203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.83.0/24
Signature Algorithm: sha256WithRSAEncryption
55:ee:8c:74:7a:7b:b8:a1:01:77:fb:e9:9d:9d:40:3b:8f:65:
41:86:44:86:69:c3:50:7d:cd:4c:eb:bc:bd:cb:58:2a:ff:98:
2c:c2:52:78:07:c3:51:42:3c:c5:da:40:fc:cf:6a:af:26:62:
42:b4:af:43:fc:12:5e:15:ab:50:c5:e6:53:bf:c5:47:af:73:
f2:8a:27:6a:ee:86:5b:bb:94:93:d5:b4:1e:8e:f3:b9:dd:18:
95:fb:ce:3c:a3:ee:c8:31:59:34:11:29:3b:84:dc:c5:6c:cd:
ef:11:9c:58:ac:26:72:ab:46:6d:86:87:18:66:94:74:3a:54:
38:b5:e0:20:2b:e0:10:27:43:6b:95:d5:9f:c6:28:84:f1:64:
68:02:0f:14:99:11:f6:fc:bf:63:e2:96:5d:66:d8:e2:c9:cf:
d2:8e:e7:55:d1:19:1b:71:20:22:5e:9b:69:a4:b1:69:84:a6:
97:08:47:e9:f6:ec:1c:14:23:b9:60:8f:92:4f:17:13:b3:a3:
8e:17:ee:a2:31:7a:38:93:3c:80:cc:86:04:d5:e0:15:79:ea:
3a:4e:aa:af:53:84:bb:1f:73:e0:1c:0a:df:d9:3e:b7:93:f5:
35:dd:7e:38:6f:c0:4e:64:f4:a6:ce:f2:c7:4c:08:6b:56:74:
29:1f:fd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:58:17 2024 by rpki-client on console-fra.rpki-client.org