Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137382e302f32332d3233203d3e2035353131.roa
File: 3130392e3131302e3137382e302f32332d3233203d3e2035353131.roa (raw, json)
Hash identifier: Zo7g26F4oopcaUUigDU5c4g4wY296Uqx4A6Iyp4YtEI=
Subject key identifier: 9B:95:81:44:43:7A:D2:BE:8C:8B:E2:12:83:4D:B7:36:96:13:16:6E
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 7DD0207DC492A14EE20ACF01AD444DD83CA64B45
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137382e302f32332d3233203d3e2035353131.roa
Signing time: Thu 08 Aug 2024 17:41:24 +0000
ROA not before: Thu 08 Aug 2024 17:36:24 +0000
ROA not after: Thu 07 Aug 2025 17:41:24 +0000
asID: 5511
IP address blocks: 109.110.178.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:d0:20:7d:c4:92:a1:4e:e2:0a:cf:01:ad:44:4d:d8:3c:a6:4b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Aug 8 17:36:24 2024 GMT
Not After : Aug 7 17:41:24 2025 GMT
Subject: CN=9B958144437AD2BE8C8BE212834DB7369613166E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:39:76:03:3a:e0:72:c8:d4:a6:15:46:64:e0:
24:69:d7:5c:0f:07:c2:7f:7d:50:e4:23:1d:c7:40:
8d:b5:97:eb:57:b5:8c:96:ca:ce:0b:c4:03:95:d8:
d6:f2:11:9d:0b:6e:1c:ea:f6:9f:35:ba:4c:5c:a3:
05:f3:99:40:3f:dd:22:06:40:0f:06:34:70:c2:e8:
e7:04:9b:ef:8f:42:4e:3c:3d:7b:24:49:ad:05:4f:
48:da:c6:ce:10:98:4b:b1:bc:25:76:49:67:24:d9:
53:db:79:b0:a7:33:10:cb:8a:fd:2f:3b:31:84:98:
e0:70:54:8e:a1:27:4d:75:b9:ac:be:7f:2f:8a:c8:
07:40:63:8c:42:51:ac:15:f2:f9:30:8b:08:77:51:
d4:87:37:8d:32:0b:38:d0:98:9a:fb:3f:b6:ed:0c:
01:14:bf:ad:8f:44:45:0e:35:1a:02:04:4a:58:ec:
e5:26:7a:8e:35:e1:1b:4b:91:f0:fa:91:88:d2:29:
42:d6:77:f9:d3:80:21:2c:e0:52:0c:69:41:7b:45:
f9:3b:9e:20:e4:8d:8e:4f:76:71:17:1e:de:32:74:
d9:04:c4:d1:c3:2a:05:8a:2b:9c:ed:0a:4c:22:b7:
cd:b2:ae:8e:55:db:56:94:cf:04:a8:3e:97:7f:9e:
fb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:95:81:44:43:7A:D2:BE:8C:8B:E2:12:83:4D:B7:36:96:13:16:6E
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3137382e302f32332d3233203d3e2035353131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.178.0/23
Signature Algorithm: sha256WithRSAEncryption
91:a6:ca:1e:a9:ea:22:75:c9:85:30:6e:62:64:08:73:63:bb:
71:0b:d2:24:9b:3e:0e:d3:12:69:16:2e:62:e9:91:b4:7f:a9:
53:a8:fb:ff:ef:bc:6a:46:34:58:89:01:77:4d:f2:58:18:76:
d8:ee:3b:4a:6a:de:13:26:6f:ed:76:bb:6d:3e:1e:f9:21:74:
37:f1:1d:26:db:21:dc:30:e8:a4:14:ff:b1:ce:cc:89:f8:c3:
24:44:e1:2a:7b:2f:f6:0b:a3:4d:c9:e3:4b:08:36:7c:58:4b:
26:cb:ca:5a:ba:96:b9:b9:6a:e3:34:72:f7:6e:35:37:ea:3b:
61:0c:5e:16:8b:40:32:cc:7a:46:86:dc:1a:8f:84:cf:67:3b:
a4:7f:1f:55:fe:83:49:71:5f:05:0c:fe:04:4b:c6:f1:95:bf:
a9:1d:17:3d:18:b4:95:8d:33:ab:05:e2:a1:14:e9:a4:0e:1e:
bf:70:05:14:6c:29:35:9c:0a:c1:24:20:0e:da:79:bc:f4:f8:
94:66:9c:23:f8:24:68:67:e5:27:fa:9a:81:78:ae:4b:49:2f:
67:71:d3:2d:7a:2c:b8:f3:16:3e:c2:ee:4c:40:05:62:47:6c:
82:37:4b:a6:1d:33:18:db:88:a4:e5:d9:c8:85:90:e9:82:27:
52:5c:ae:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:58:16 2024 by rpki-client on console-ams.rpki-client.org