Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38382e302f32342d3234203d3e2039303039.roa
File: 3231332e3133392e38382e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier: osiInenMTL8nKf7tFVx8rBMOYt6Vnk1ZBd7DbmGt4LE=
Subject key identifier: 59:D3:80:2A:B1:F9:C2:16:2C:32:F9:26:BF:49:B6:3C:D0:44:41:61
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 61F11D69DA447FA8376C7A8A38F9A473E4EA6BEE
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38382e302f32342d3234203d3e2039303039.roa
Signing time: Mon 20 May 2024 10:11:23 +0000
ROA not before: Mon 20 May 2024 10:06:23 +0000
ROA not after: Mon 19 May 2025 10:11:23 +0000
asID: 9009
IP address blocks: 213.139.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:f1:1d:69:da:44:7f:a8:37:6c:7a:8a:38:f9:a4:73:e4:ea:6b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: May 20 10:06:23 2024 GMT
Not After : May 19 10:11:23 2025 GMT
Subject: CN=59D3802AB1F9C2162C32F926BF49B63CD0444161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c8:61:c4:0f:69:24:9e:15:78:6c:eb:ef:52:
fe:88:33:d4:bf:a6:53:fc:9b:6d:41:bc:86:f5:d5:
c6:c5:8b:26:91:9d:f7:ba:82:eb:69:2b:fd:5b:ed:
ac:2c:dd:ab:eb:7b:44:2c:5e:56:2b:43:7f:50:a1:
e7:6e:4d:e5:94:a2:d8:df:c0:e0:4a:bf:7f:14:a2:
99:50:90:3c:e0:44:a1:5b:bc:6b:8b:ef:fa:eb:ba:
66:ab:11:89:b6:f3:80:9d:c1:7c:39:13:e0:b6:6b:
c9:16:e0:dd:76:23:23:e7:2e:de:83:15:ee:09:08:
ac:1b:cc:26:63:40:bd:67:99:69:ad:3e:fc:b1:81:
52:59:41:2a:2f:d5:2b:09:c0:3a:3d:7e:e7:26:39:
2e:7f:93:24:07:11:0e:99:d7:46:2a:7b:e0:f2:5a:
50:1f:bc:4b:a4:67:ac:a7:2e:d7:2e:61:33:a9:e7:
7a:32:00:31:35:a8:42:32:16:7e:89:1f:be:cb:9b:
aa:4a:d5:b9:93:45:de:28:8b:19:a9:0a:d6:e5:03:
9b:cf:04:43:d7:66:d1:f0:2e:ac:39:dc:d2:7d:24:
22:6f:6d:54:4b:2f:08:14:52:28:76:58:99:bb:70:
00:d6:5e:2d:12:8f:d2:a2:d6:13:60:60:b8:ce:14:
06:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D3:80:2A:B1:F9:C2:16:2C:32:F9:26:BF:49:B6:3C:D0:44:41:61
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38382e302f32342d3234203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.88.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:07:69:42:34:fa:af:1e:60:cd:73:1f:12:d7:9a:58:90:0f:
58:03:8f:ae:f5:5c:d3:e4:92:f9:94:3b:30:97:4d:e8:a5:f0:
2f:42:1c:05:6b:6d:c8:46:0b:f2:a4:73:f3:87:f9:53:e5:83:
57:ed:f9:50:57:21:e2:36:ed:bb:b5:b5:5a:19:0e:d3:9f:7d:
b9:4c:01:7b:83:3c:3b:91:a0:e3:7f:f9:94:37:b5:22:09:f1:
fb:a9:77:49:88:0c:f9:6a:a3:e3:cf:00:0d:98:2a:93:a1:e8:
b0:9f:24:2f:18:af:54:23:93:23:1d:55:53:d3:f1:79:73:a6:
3e:98:f0:4d:55:6a:80:69:c3:a0:c3:e5:79:78:b7:2d:31:01:
90:b3:a5:1f:02:39:d4:38:92:01:be:16:98:32:16:13:9e:67:
4d:c4:a2:91:83:e2:59:c0:31:d1:eb:37:a6:3b:54:e6:19:5e:
73:de:40:e4:40:44:a3:cf:84:8e:e0:ff:7f:f8:0b:91:f1:74:
4a:cb:17:df:dd:23:5f:b4:5c:3f:0a:a6:4b:df:fc:25:bb:41:
95:d8:d2:cb:14:13:a0:15:60:eb:45:25:f2:11:b8:aa:aa:b4:
5d:0a:bc:f8:ac:d7:8d:24:f6:df:3e:e1:99:e5:f6:e5:18:b9:
c1:f8:7e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:58:17 2024 by rpki-client on console-fra.rpki-client.org