Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3139332e3234362e3136302e302f32342d3234203d3e20393936.roa
File: 3139332e3234362e3136302e302f32342d3234203d3e20393936.roa (raw, json)
Hash identifier: ouwlDZc8Sc2CcW3O3lQoakLCVGxIH3AVbef1mT8lWrc=
Subject key identifier: A8:22:8F:3E:E7:04:61:D1:67:57:21:B3:2E:75:31:24:DC:50:A7:3D
Certificate issuer: /CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Certificate serial: 4F3797BA27F6C325123FA7DBCD0D2779B94446AA
Authority key identifier: 7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3139332e3234362e3136302e302f32342d3234203d3e20393936.roa
Signing time: Wed 23 Oct 2024 18:43:25 +0000
ROA not before: Wed 23 Oct 2024 18:38:25 +0000
ROA not after: Wed 22 Oct 2025 18:43:25 +0000
asID: 996
IP address blocks: 193.246.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.mft
rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:37:97:ba:27:f6:c3:25:12:3f:a7:db:cd:0d:27:79:b9:44:46:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf63e375b0b785081b5945b1d18d9de86e0efc
Validity
Not Before: Oct 23 18:38:25 2024 GMT
Not After : Oct 22 18:43:25 2025 GMT
Subject: CN=A8228F3EE70461D1675721B32E753124DC50A73D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:73:6a:a6:c4:da:3b:9d:19:ef:b2:ca:ff:86:
c6:db:69:14:e7:bb:11:3b:ca:9a:cb:51:e0:49:87:
71:50:7e:24:62:60:58:11:0b:2b:61:11:87:c2:4f:
64:94:fa:91:c0:23:f9:99:0d:ac:72:f7:ef:97:15:
74:8f:af:74:64:b6:85:ec:75:62:04:12:72:ae:87:
02:6e:1d:9f:43:d4:a6:6a:e7:fc:e2:29:6c:cf:c6:
53:10:21:9a:d1:94:b6:b1:aa:33:4d:30:6c:a2:e5:
f9:a0:63:df:16:a9:ed:27:fc:03:03:21:9a:4a:3d:
38:57:38:05:39:19:35:25:9b:bc:6a:7d:55:bc:b5:
c3:22:34:87:63:3d:4d:53:3b:39:50:d8:fc:f8:b9:
1c:f3:ba:82:d7:ae:8b:1a:3c:17:0b:94:1b:b1:15:
7b:b0:b1:12:a1:e8:19:f4:6c:5e:ae:8e:16:07:ed:
10:78:c8:1a:70:34:0d:e6:be:fc:70:95:d0:67:a8:
90:26:54:15:1c:21:27:7e:e1:9e:dd:7f:2a:cd:41:
e9:85:59:45:4a:c4:2c:e8:9c:70:b0:2e:91:99:38:
57:b9:27:2c:70:5e:22:c3:7a:b4:ed:6c:28:58:25:
c3:bc:cc:2e:58:59:06:65:ee:96:e9:ab:46:ac:ba:
30:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:22:8F:3E:E7:04:61:D1:67:57:21:B3:2E:75:31:24:DC:50:A7:3D
X509v3 Authority Key Identifier:
keyid:7A:DF:63:E3:75:B0:B7:85:08:1B:59:45:B1:D1:8D:9D:E8:6E:0E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/7ADF63E375B0B785081B5945B1D18D9DE86E0EFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/et9j43Wwt4UIG1lFsdGNnehuDvw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aee3d58d-904a-4375-bf93-8b5f38cab002/0/3139332e3234362e3136302e302f32342d3234203d3e20393936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.160.0/24
Signature Algorithm: sha256WithRSAEncryption
20:97:84:ed:40:0a:b6:31:61:24:f4:15:a4:41:fe:8c:e8:3b:
0b:3a:e8:9f:c0:60:64:95:76:06:1b:98:88:5d:77:8b:87:2e:
ae:de:6e:46:92:e6:3d:bc:f0:98:bb:58:41:84:5e:e1:65:d6:
e7:9d:10:34:ea:49:87:0e:5e:9d:fd:5f:98:f6:eb:ce:9b:69:
fb:7b:39:48:f9:52:04:d8:5a:58:a3:e3:d6:41:7b:42:2d:8f:
54:00:cd:5a:c3:c8:56:6a:a5:66:02:b9:ac:1e:62:a1:70:12:
99:8d:56:20:d1:f2:0b:20:7e:96:4d:97:a2:3d:2d:7d:aa:d7:
a6:27:01:9b:21:bf:88:e9:2a:85:13:63:75:07:2d:ab:ac:ed:
93:d6:61:f0:2d:a9:3f:b4:96:df:23:52:a6:aa:89:1f:f9:3d:
e9:74:9d:1c:a8:60:54:33:3a:d9:b2:12:a3:a7:64:ae:51:a2:
6d:95:27:ed:9b:a1:a9:bb:76:1e:90:3e:2d:d5:18:f1:3d:4c:
5a:be:76:e9:09:b3:d5:74:33:9f:63:b4:17:ba:2c:4a:25:1e:
61:69:17:9d:ed:3f:19:80:ee:a6:51:20:c2:9f:1a:b6:94:54:
72:c4:c3:e8:a3:f2:5b:0c:4b:00:a8:d9:c1:01:1e:4e:0f:e4:
0b:7a:87:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:50:40 2024 by rpki-client on console-fra.rpki-client.org