Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/37382e32342e3132362e302f32332d3234203d3e2037303138.roa
File: 37382e32342e3132362e302f32332d3234203d3e2037303138.roa (raw, json)
Hash identifier: Ewgl0Q5XKiwc3+RtnMTYpJnZfZzrujAGTUlH9m1GeCQ=
Subject key identifier: C6:5C:F3:C4:98:D8:91:0C:22:97:72:3D:A8:C7:A7:35:85:F2:3A:39
Certificate issuer: /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Certificate serial: 362EE3128955694377D66FC95871BA0ED93ACAB0
Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/37382e32342e3132362e302f32332d3234203d3e2037303138.roa
Signing time: Sun 28 Apr 2024 12:57:38 +0000
ROA not before: Sun 28 Apr 2024 12:52:38 +0000
ROA not after: Sun 27 Apr 2025 12:57:38 +0000
asID: 7018
IP address blocks: 78.24.126.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl
rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft
rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:2e:e3:12:89:55:69:43:77:d6:6f:c9:58:71:ba:0e:d9:3a:ca:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Validity
Not Before: Apr 28 12:52:38 2024 GMT
Not After : Apr 27 12:57:38 2025 GMT
Subject: CN=C65CF3C498D8910C2297723DA8C7A73585F23A39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d4:27:6b:63:cd:06:b1:ed:9f:ae:d8:b0:0e:
a9:52:92:39:bd:c6:1b:f9:41:95:f5:b5:b5:ad:43:
69:ac:77:50:da:9c:ef:87:b2:6f:8e:4c:c3:62:66:
14:de:01:a0:1e:b4:d0:30:9e:ff:87:8d:5d:f3:60:
0e:b1:27:d8:4e:bf:ee:06:de:f2:a5:f2:c1:ae:20:
9a:cc:d6:b5:52:d1:6c:e6:60:ac:79:9f:8e:fb:14:
f3:39:1e:46:7b:b7:cf:e9:1a:bc:1e:2e:21:65:83:
69:dd:81:57:75:30:99:df:1a:39:2f:81:92:06:fd:
21:3c:54:af:d5:62:da:fc:f3:a0:6d:31:db:91:03:
a5:51:45:52:4e:db:c5:ea:b0:44:75:de:02:c5:a8:
7b:25:a7:3e:d9:24:c7:09:a3:cf:20:b6:34:a2:e2:
02:e9:09:12:63:1b:54:c0:8d:13:b9:65:97:79:47:
53:ab:ea:94:de:35:1a:27:c8:48:e1:8c:b2:95:e5:
f1:83:b3:b0:75:64:74:02:c5:19:28:d0:3d:2c:b3:
f9:25:bd:3e:37:e3:b0:f2:69:e5:6d:bb:86:42:c9:
0c:f1:59:73:7c:9c:00:a6:bb:6f:2a:dd:89:6f:a2:
74:e2:1a:ad:a0:82:57:2f:9b:2c:08:77:24:82:e0:
98:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5C:F3:C4:98:D8:91:0C:22:97:72:3D:A8:C7:A7:35:85:F2:3A:39
X509v3 Authority Key Identifier:
keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/37382e32342e3132362e302f32332d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.126.0/23
Signature Algorithm: sha256WithRSAEncryption
02:d3:b1:d7:a3:a8:41:3f:35:2c:e6:43:80:d6:0a:3b:79:a2:
3a:11:ff:58:45:98:6b:fd:2e:67:38:ce:97:7c:27:49:af:29:
3b:d4:17:78:8e:68:88:f7:5f:7e:42:9f:c1:ae:e8:fa:4e:bb:
72:ec:0d:89:32:76:c3:1e:72:aa:c8:29:43:12:0e:01:b2:c4:
a7:08:16:4e:e4:87:0a:7a:16:de:35:a2:aa:69:d1:90:16:8f:
0c:cd:9d:ad:1f:2b:ff:3c:0e:9b:e9:16:e0:a7:d9:81:23:c3:
f3:d8:35:52:c8:54:5c:45:64:7e:16:01:d0:06:53:4b:01:ad:
65:a5:5f:fd:25:82:83:52:ad:89:6d:92:66:f5:00:dd:cd:f4:
5d:a6:a6:5d:02:e0:b9:e2:77:b1:12:f8:20:64:f9:6c:2c:b7:
e3:bb:d7:23:2e:22:25:a2:ea:26:05:03:f4:fa:8c:6a:0d:a4:
dd:29:9c:f2:e8:9d:f3:de:fa:c1:2d:9f:95:49:47:c6:67:f4:
83:3a:3d:8c:3b:41:cb:5c:b7:ed:d1:1b:56:b0:4c:b2:ad:77:
26:c3:85:1c:50:a5:11:fb:83:df:25:ef:ee:43:f8:00:55:88:
87:d2:2a:00:59:3a:c9:9c:32:b1:67:5f:86:e2:7b:04:91:50:
dd:b1:20:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:52:16 2024 by rpki-client on console-fra.rpki-client.org