Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e31382e302f32342d3234203d3e203534333339.roa
File: 39332e39322e31382e302f32342d3234203d3e203534333339.roa (raw, json)
Hash identifier: ZPrP8dQxnBlRV+SMhznGOOGWIIG1iXyuTJIlGLJRrkk=
Subject key identifier: 49:A1:3C:C7:EB:09:C8:A1:9E:44:DA:84:8F:95:CF:91:10:DB:C6:45
Certificate issuer: /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Certificate serial: 0825EB6B6965E5D0803F561F6D5D4A0A14C39EA4
Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e31382e302f32342d3234203d3e203534333339.roa
Signing time: Fri 24 May 2024 18:05:16 +0000
ROA not before: Fri 24 May 2024 18:00:16 +0000
ROA not after: Fri 23 May 2025 18:05:16 +0000
asID: 54339
IP address blocks: 93.92.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl
rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft
rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:25:eb:6b:69:65:e5:d0:80:3f:56:1f:6d:5d:4a:0a:14:c3:9e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Validity
Not Before: May 24 18:00:16 2024 GMT
Not After : May 23 18:05:16 2025 GMT
Subject: CN=49A13CC7EB09C8A19E44DA848F95CF9110DBC645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c4:7f:fe:7a:f6:5e:c2:d2:37:ba:79:c5:61:
89:34:28:11:02:73:ac:11:7b:8d:2c:2b:f6:f5:b9:
83:ad:56:cb:9e:70:91:3f:2f:5a:93:b5:7c:a4:14:
5c:a3:f1:36:38:59:ff:9b:a2:4d:d9:f4:07:68:bc:
8b:0e:33:19:2f:d8:1d:6e:3f:4d:df:05:a4:b5:ff:
62:8b:b2:9a:dc:fe:4f:7a:80:41:6e:39:46:6a:a0:
e5:2f:c9:d1:92:e6:f7:c8:44:03:f3:71:4f:48:34:
9d:8e:b5:a9:17:f1:3b:f8:22:c7:75:0a:bf:42:0c:
29:a6:13:5b:15:68:dd:92:cf:ea:96:3b:cb:78:c5:
ef:b5:29:5d:ba:43:9b:0e:42:d7:9f:9b:ac:78:07:
41:95:c1:65:0d:6d:41:22:71:a9:c1:b8:73:d3:92:
56:71:f5:b9:5b:c5:49:68:9d:43:44:47:7a:96:22:
2d:d7:94:7f:9f:b0:96:33:f5:d7:37:3a:b4:d2:9c:
37:bc:0b:aa:56:97:1f:e0:78:de:13:0b:30:fb:0e:
5b:00:2a:55:e7:74:09:b0:22:a7:87:86:a4:60:88:
9f:1d:17:89:37:62:52:b1:ae:b3:e8:4a:7a:34:6c:
a8:08:58:6d:9e:03:9a:83:41:dd:60:bc:9b:2c:58:
ad:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A1:3C:C7:EB:09:C8:A1:9E:44:DA:84:8F:95:CF:91:10:DB:C6:45
X509v3 Authority Key Identifier:
keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e31382e302f32342d3234203d3e203534333339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.18.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:ec:de:8b:c4:b1:3c:89:85:12:ad:49:82:17:b8:01:f0:a3:
19:61:ef:18:61:59:b3:6d:80:14:64:87:0f:cf:c6:36:f0:9a:
6f:4d:1b:e5:05:39:cf:78:f5:b6:e3:e4:97:2a:b8:f1:c1:d4:
b7:c2:be:a6:9f:fb:87:f5:74:83:6c:28:40:5e:83:2f:81:cd:
61:14:cd:6f:b6:0f:89:5e:e0:66:46:78:82:e2:4b:67:51:d1:
56:b4:c9:f0:4e:4b:a0:8f:bf:db:1b:8c:08:b3:b0:88:fc:1b:
f7:67:92:e0:09:3d:2a:8f:61:a7:62:79:fe:a0:36:ca:e3:ed:
a1:dc:c4:8c:73:e1:a4:ee:d7:3e:91:a2:b7:5a:04:d2:7a:ec:
3d:fd:10:98:c7:fd:23:d4:2f:dd:8f:6f:e5:2f:39:63:ef:b1:
53:40:5f:d0:d3:8e:09:64:98:7d:ec:30:d8:19:d1:a4:d0:04:
d2:ef:d6:fa:bc:33:0d:7b:49:b8:2d:43:88:5c:f8:90:46:90:
25:6b:66:3c:b1:1e:2a:4a:67:4d:dd:84:58:3d:be:e9:0f:56:
ec:9d:58:bf:b1:9a:e2:dd:a4:0a:43:0f:35:d1:19:d8:be:3c:
65:35:71:6a:d6:1e:1e:cf:0e:d2:a5:1c:2a:71:5a:5d:9f:81:
45:af:e3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 04:49:04 2024 by rpki-client on console-ams.rpki-client.org