Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/38302e37352e3232312e302f32342d3234203d3e203438393235.roa
File: 38302e37352e3232312e302f32342d3234203d3e203438393235.roa (raw, json)
Hash identifier: 0b6sszxsKulqMcqV3D3Yqcg5IxC3pSU5gc82mTsDYlA=
Subject key identifier: 99:AE:33:C4:F4:FF:B3:70:78:41:48:FD:62:A3:E0:33:85:E0:3E:96
Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608
Certificate serial: 5EDDAD8E5FB32CBAD336EBE3FD0813E0BFDEA944
Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/38302e37352e3232312e302f32342d3234203d3e203438393235.roa
Signing time: Mon 11 Nov 2024 17:57:02 +0000
ROA not before: Mon 11 Nov 2024 17:52:02 +0000
ROA not after: Mon 10 Nov 2025 17:57:02 +0000
asID: 48925
IP address blocks: 80.75.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl
rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft
rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:dd:ad:8e:5f:b3:2c:ba:d3:36:eb:e3:fd:08:13:e0:bf:de:a9:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608
Validity
Not Before: Nov 11 17:52:02 2024 GMT
Not After : Nov 10 17:57:02 2025 GMT
Subject: CN=99AE33C4F4FFB370784148FD62A3E03385E03E96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:68:dd:dd:c5:80:ce:14:db:88:22:1c:e2:75:
99:28:53:77:15:f5:9f:dc:2a:2b:96:eb:72:bc:d6:
61:fe:59:11:56:87:97:30:06:bb:1a:f2:c3:bb:0b:
ca:75:e1:43:c5:cf:e9:2e:c8:45:b8:15:09:16:60:
16:e9:45:f9:5f:6f:48:56:8e:5e:6f:76:bd:3c:16:
4e:f9:8d:72:fc:be:a4:f6:59:e9:00:08:26:96:5e:
1d:e3:c4:fe:bd:1c:52:aa:fc:0c:8d:01:55:b8:45:
45:81:1f:37:f8:3a:cc:bb:b2:6b:ad:b5:98:20:e5:
6e:e4:b0:a8:5d:e0:0b:a0:cf:b2:64:e8:18:9d:c4:
df:9c:56:f0:ac:63:eb:ea:71:61:2a:20:ae:e0:0b:
84:9a:28:cd:af:7b:43:6c:a6:f3:95:69:f4:c9:29:
2e:11:03:9e:07:92:0a:06:61:f2:fb:39:ce:d6:5e:
b3:01:93:7a:b6:4f:78:c8:ee:ac:d3:bb:1f:5a:f4:
a8:bc:72:27:23:ef:79:4d:0f:17:ee:d0:e1:69:8c:
5d:26:4b:18:cb:47:dc:58:95:38:6c:13:65:3a:16:
0f:cb:bc:3d:0e:0d:46:80:c4:45:17:d9:40:c8:4a:
9b:d6:51:05:dc:59:e2:56:10:58:aa:a8:5f:09:9f:
5d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AE:33:C4:F4:FF:B3:70:78:41:48:FD:62:A3:E0:33:85:E0:3E:96
X509v3 Authority Key Identifier:
keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/38302e37352e3232312e302f32342d3234203d3e203438393235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.221.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:19:c4:f0:a7:d9:7a:52:c6:2e:90:9b:43:84:61:9e:13:c4:
0a:2d:18:58:ba:99:6d:1f:f1:9e:c3:3c:b4:ad:fd:32:52:01:
90:70:3a:78:22:0e:5c:a4:27:ae:43:40:44:c1:fa:ec:bb:8d:
5d:29:e6:11:c2:88:a3:ad:20:02:e4:c7:01:7d:24:e8:04:31:
50:27:3f:1c:f0:3a:54:5c:13:07:f5:35:80:67:5a:95:94:f0:
0c:3a:1c:21:74:05:31:d5:2e:d7:39:78:ad:06:b0:b2:72:5f:
9f:eb:4d:8c:00:76:87:cf:94:ef:1a:52:42:20:55:3b:6a:89:
92:05:c2:c3:1e:41:dc:d3:3e:66:52:41:53:5c:fd:64:70:e7:
08:ff:89:55:5b:b3:9f:61:42:7e:b9:8b:6c:67:20:4c:2a:3c:
37:be:04:36:9e:04:0b:c4:38:c5:ff:6c:fd:9f:ed:e3:fa:81:
ab:20:c7:f1:e2:b8:4d:ff:9d:cb:b4:de:fc:79:39:1b:7c:fe:
5f:9f:e5:5c:f2:05:f3:c1:90:d2:23:d4:73:56:f0:76:f3:c3:
d2:39:36:38:95:76:ad:20:d3:a0:e2:dc:a1:eb:27:45:17:64:
5f:ed:07:bb:f5:49:9b:90:86:d5:74:55:02:8a:f8:04:2f:2c:
2d:7c:5c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:41:51 2024 by rpki-client on console-ams.rpki-client.org