Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136332e302f32342d3234203d3e20323030323630.roa
File: 3130392e3131302e3136332e302f32342d3234203d3e20323030323630.roa (raw, json)
Hash identifier: 8pnpFd/lgDPqhx01vx5CAkzWwYTfe2DdoSss/k4FUtE=
Subject key identifier: D4:62:AC:48:66:4E:09:C9:EA:9B:5F:5B:70:BA:51:52:B8:A0:E0:B5
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 03EBAD1682CB1F2D04527BB274283CF7903493FA
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136332e302f32342d3234203d3e20323030323630.roa
Signing time: Fri 08 Nov 2024 20:43:51 +0000
ROA not before: Fri 08 Nov 2024 20:38:51 +0000
ROA not after: Fri 07 Nov 2025 20:43:51 +0000
asID: 200260
IP address blocks: 109.110.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:eb:ad:16:82:cb:1f:2d:04:52:7b:b2:74:28:3c:f7:90:34:93:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Nov 8 20:38:51 2024 GMT
Not After : Nov 7 20:43:51 2025 GMT
Subject: CN=D462AC48664E09C9EA9B5F5B70BA5152B8A0E0B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ce:e2:ad:88:6c:15:ef:67:f4:ee:dd:6a:e8:
bf:42:4d:e0:0a:a0:88:ba:bd:65:32:e3:bb:54:1b:
c7:d6:20:45:00:d2:54:6f:49:6b:03:26:1d:09:c1:
ff:c9:db:f6:83:d3:de:1a:f4:76:35:2b:be:1d:0a:
81:b4:cb:08:6c:8c:ef:4c:86:97:8b:63:d1:5f:95:
29:00:9f:d0:b9:a1:39:62:8e:9e:b5:cf:d5:79:ae:
5c:3b:6c:a2:b8:23:e0:42:79:50:28:b2:09:f6:0b:
79:a5:44:54:1d:ee:a8:3f:5e:0b:c4:dc:8b:94:e4:
2f:e3:68:f3:dd:fc:b3:a5:9d:9b:05:53:bd:39:d0:
95:89:1a:77:69:e6:11:dc:09:e3:e8:aa:4f:f2:c7:
19:a8:73:cb:2b:fd:8b:42:b5:61:94:8b:c2:82:a8:
ca:6a:e0:01:df:d1:69:48:b3:4b:52:2c:0d:cc:5b:
ed:c9:a8:b7:0f:43:da:02:aa:a7:04:07:a2:f7:c9:
8f:56:24:e6:58:e4:23:7a:e1:88:7c:c1:6a:6b:42:
ae:65:0b:95:6f:a5:3e:00:eb:2b:aa:28:e9:89:44:
1b:b1:c8:ea:a7:c5:8b:24:ee:b1:c1:89:e3:e4:c8:
42:27:97:16:1c:2a:40:51:80:f3:9d:ef:53:85:7b:
0d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:62:AC:48:66:4E:09:C9:EA:9B:5F:5B:70:BA:51:52:B8:A0:E0:B5
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3136332e302f32342d3234203d3e20323030323630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.163.0/24
Signature Algorithm: sha256WithRSAEncryption
87:ec:39:c2:a9:13:a3:93:9a:4e:37:be:f7:b7:11:d4:47:80:
7e:1e:31:d9:ae:11:8e:84:f9:8a:72:63:28:c7:50:0c:c3:a7:
28:09:ae:d2:65:50:ba:32:db:a4:9a:49:ae:f8:b6:6d:2d:29:
91:a0:63:6e:8c:7f:3c:1a:07:b9:fa:50:b9:de:5c:62:ca:37:
7c:e4:0e:f4:80:a8:83:1c:a4:78:7e:35:0c:c7:8a:e5:fc:cb:
a9:a9:46:a5:ca:bc:cd:39:fe:45:c8:8e:f1:46:43:fe:10:f5:
4f:a1:1c:5f:73:44:5d:b5:77:b3:59:dd:22:75:42:8b:a6:f3:
f4:c5:2d:14:5b:9c:64:6a:56:10:c7:84:f5:ae:e4:cb:c6:ed:
f8:74:1e:de:f6:ff:b3:b4:67:1e:18:54:b5:34:e7:7e:ef:f2:
0b:2f:29:be:ff:de:1b:37:90:28:30:72:79:0f:f4:39:f9:fa:
d8:1d:57:5c:a6:05:87:d9:42:03:96:32:b5:f4:d7:45:4c:be:
ae:47:30:95:c3:e7:7d:89:d9:2d:3d:46:5e:08:94:93:ee:03:
90:0e:bc:6a:2f:64:31:0b:76:37:9a:a1:6d:14:51:09:b9:a8:
64:e9:8b:84:1d:ec:91:e2:83:27:47:3f:f8:83:37:56:ca:89:
f0:48:f1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:50:40 2024 by rpki-client on console-fra.rpki-client.org