Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e32302e302f32342d3234203d3e2035353131.roa
File: 39332e39322e32302e302f32342d3234203d3e2035353131.roa (raw, json)
Hash identifier: Anw+Ot0jzMET4Sk6hQNdmMLNf7QzBxX2vhTMbwb0Hp4=
Subject key identifier: 3D:C2:1C:F1:66:A6:BB:64:95:A8:37:A3:D7:22:34:50:EA:07:C5:87
Certificate issuer: /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Certificate serial: 445C5ADCC29594B0137AFB2B05036183A433C7D4
Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e32302e302f32342d3234203d3e2035353131.roa
Signing time: Fri 08 Nov 2024 14:48:54 +0000
ROA not before: Fri 08 Nov 2024 14:43:54 +0000
ROA not after: Fri 07 Nov 2025 14:48:54 +0000
asID: 5511
IP address blocks: 93.92.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl
rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft
rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:5c:5a:dc:c2:95:94:b0:13:7a:fb:2b:05:03:61:83:a4:33:c7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Validity
Not Before: Nov 8 14:43:54 2024 GMT
Not After : Nov 7 14:48:54 2025 GMT
Subject: CN=3DC21CF166A6BB6495A837A3D7223450EA07C587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c9:34:25:6b:52:e5:6d:9e:a3:f7:62:d6:95:
0e:07:55:e1:18:02:44:09:77:56:27:fc:13:c7:55:
91:ff:31:78:54:8c:b8:78:e8:ac:32:53:3b:6c:27:
7e:5d:45:76:f3:50:a4:fb:d5:34:00:7e:f0:5c:17:
c3:c1:d4:be:70:a1:1d:1a:99:38:29:91:ef:3c:1c:
06:cb:21:8c:a5:18:d0:2a:89:ac:3b:59:05:01:e4:
58:e2:0e:f2:2f:0f:2e:dd:34:e8:f0:a9:35:7c:fc:
53:23:91:62:ff:e1:44:58:1d:81:4e:08:9e:36:4d:
5c:f4:a2:2c:9e:e6:6d:b9:0b:5f:7b:80:de:87:d1:
d8:0c:1e:dc:07:d9:da:c8:42:bc:27:dc:33:e8:98:
27:b3:ec:35:a2:fa:fe:d3:b3:63:a3:b0:1e:7b:9f:
49:7e:bc:3a:28:40:ea:64:ad:69:16:cf:11:01:98:
38:20:f7:88:96:71:b4:12:43:57:0c:88:d8:c4:e4:
63:41:83:9c:ac:ff:c5:95:ea:9c:d6:16:62:d9:90:
1b:73:93:40:49:71:21:44:e3:26:51:b1:d2:e3:c4:
84:90:11:8d:2c:e0:6f:90:b0:94:5b:06:66:91:c3:
a0:ba:79:12:24:37:45:81:1c:e6:7a:27:a3:64:a5:
8c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C2:1C:F1:66:A6:BB:64:95:A8:37:A3:D7:22:34:50:EA:07:C5:87
X509v3 Authority Key Identifier:
keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e32302e302f32342d3234203d3e2035353131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.20.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:71:59:dc:c4:ac:09:72:ba:92:cd:c9:bd:04:1d:8d:88:78:
50:2c:51:72:d0:fb:1f:9e:5e:0b:62:b4:b3:e9:10:b4:b9:c5:
b3:a3:a0:6c:46:0e:fa:f2:a8:17:12:5a:f7:4b:e8:f5:6a:29:
4c:2c:74:1c:2c:a5:3c:05:f0:b2:ff:2a:e4:7d:e2:26:71:6e:
4c:8c:f4:16:dd:4c:eb:c9:d2:11:70:c8:c3:2c:4c:82:0b:2c:
9d:8f:b6:c8:f8:69:94:1b:98:4f:02:24:bf:db:67:d4:58:82:
e1:dd:59:53:fb:7c:44:e7:32:9e:f6:fe:ba:64:b6:44:ff:b0:
0a:5d:df:29:cc:31:72:25:e3:fb:ae:33:c7:03:99:13:5b:28:
25:ee:3b:12:f8:53:43:b4:0c:14:79:64:f6:d2:dc:15:c7:ea:
6b:d2:b9:b3:4a:e8:d5:ee:ce:53:0f:9a:f9:72:a4:24:68:ef:
3a:f6:bd:4e:dd:68:6a:a7:40:97:ee:62:f8:82:02:bf:11:b6:
2e:d2:33:d4:c1:36:cc:33:be:54:ad:ca:ab:2d:35:a6:ab:84:
c8:2a:52:08:b1:c7:a7:88:25:1c:9d:7e:b3:9b:95:4c:c8:20:
27:ae:a9:8b:93:1b:3d:f4:ba:44:1e:7e:54:d2:d9:a2:d5:89:
af:78:2a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 04:49:04 2024 by rpki-client on console-ams.rpki-client.org