Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138372e302f32342d3234203d3e20323039303433.roa
File: 3130392e3131302e3138372e302f32342d3234203d3e20323039303433.roa (raw, json)
Hash identifier: bDkWjcN43/+yfC0xef2b9lVjUVXlGEsr/JjlLamcXM4=
Subject key identifier: 9C:9E:00:5C:33:3E:EA:6F:54:AF:D2:37:9E:43:93:04:35:6F:DB:BD
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 70CC007E7CD9E45422AEEBE3A8CF292464CD4018
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138372e302f32342d3234203d3e20323039303433.roa
Signing time: Thu 04 Jul 2024 08:20:38 +0000
ROA not before: Thu 04 Jul 2024 08:15:38 +0000
ROA not after: Thu 03 Jul 2025 08:20:38 +0000
asID: 209043
IP address blocks: 109.110.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:cc:00:7e:7c:d9:e4:54:22:ae:eb:e3:a8:cf:29:24:64:cd:40:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Jul 4 08:15:38 2024 GMT
Not After : Jul 3 08:20:38 2025 GMT
Subject: CN=9C9E005C333EEA6F54AFD2379E439304356FDBBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cb:dc:d7:ef:8a:94:c8:99:28:db:92:ad:cc:
62:e6:6d:4b:bd:7c:45:87:84:83:cc:1c:5f:11:0b:
e7:1d:53:78:3b:87:be:ff:42:53:9e:13:f3:a1:45:
5d:01:a6:f5:2c:6b:d1:07:cb:ad:39:fc:bb:a0:1a:
18:02:13:39:48:2e:5f:27:38:d4:2f:1e:31:00:46:
67:19:00:3a:5d:e4:40:b3:4d:d7:6c:c8:f3:aa:d2:
83:8e:c3:a5:67:8d:b1:3a:2f:1e:b5:f3:85:28:12:
69:f0:67:f6:28:a2:0c:7d:ad:49:38:41:79:32:a2:
f8:ad:b5:38:db:81:df:68:c0:cb:d2:22:13:e5:92:
60:1e:a0:d8:35:7f:2d:5a:5f:a7:a0:13:7c:87:36:
cb:b1:d4:0b:5c:24:ff:97:58:b2:90:8b:72:42:a6:
b2:20:c0:e3:88:1c:4e:1f:86:17:d4:18:a1:9d:0a:
ae:9f:d1:6a:6d:7f:39:66:59:da:0a:33:5f:64:7d:
20:33:c8:67:42:e4:ce:4f:0d:89:b9:9c:a3:7d:c7:
5d:71:01:96:98:e9:74:91:2c:ed:2e:f7:bf:7b:30:
06:c0:87:4c:5c:44:0c:35:cc:1d:80:be:81:22:87:
c5:93:5d:8b:59:41:ef:69:22:7a:4b:86:34:44:10:
a5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:9E:00:5C:33:3E:EA:6F:54:AF:D2:37:9E:43:93:04:35:6F:DB:BD
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3130392e3131302e3138372e302f32342d3234203d3e20323039303433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.110.187.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:27:b7:eb:c9:29:ad:24:71:c3:e1:b8:82:e4:22:0c:c4:8f:
81:26:b9:fa:90:9f:3a:58:9b:53:5a:a7:82:71:c9:15:13:74:
b2:ad:bf:51:1d:43:93:50:36:fb:32:d7:cb:94:59:12:fc:7b:
26:f4:6f:0c:ca:9d:ed:56:a7:2d:59:a9:a1:89:73:ff:6f:7d:
49:33:9a:83:f4:60:42:76:fc:35:95:68:26:49:23:6b:0b:3f:
55:90:6d:05:1d:55:93:0c:72:6f:42:20:4b:3c:22:50:ea:b0:
86:07:16:61:1b:1a:04:99:23:3d:db:58:2a:d6:e6:39:d8:5f:
31:aa:b3:a4:25:8a:02:27:6c:3c:fe:57:5f:f9:37:07:f1:10:
28:fa:86:c0:57:7c:c9:88:dd:bb:18:77:a3:4d:ac:c6:01:b1:
01:f1:c8:ff:20:b2:6c:af:88:af:4f:ab:c2:c2:56:f7:bf:e8:
dc:29:0f:2b:3f:5f:e4:03:3d:a1:c1:e3:3d:52:41:01:69:5b:
0c:34:e8:d5:84:a4:27:f0:dc:36:9f:9a:ef:35:03:43:75:90:
f1:85:3c:a5:0d:46:20:30:f8:26:a5:0d:fe:c4:40:a6:14:b6:
0f:35:fd:f6:49:d2:76:0e:4a:0b:e6:a8:52:9d:2a:d2:27:ba:
d5:bb:e1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:54:59 2024 by rpki-client on console-ams.rpki-client.org