Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33392e31302e302f32342d3234203d3e203631333137.roa
File: 3139332e33392e31302e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: XjiuOfg/VSB+W7S+Rr6tA7Na8KQqW1kcpzImmCwJHBw=
Subject key identifier: B0:37:3B:50:89:82:56:A4:E2:89:E5:FE:19:CC:7C:4E:99:A5:12:24
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 7612E77E4EB57081D15CDE1F7E0CF2EADB6997FD
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33392e31302e302f32342d3234203d3e203631333137.roa
Signing time: Mon 08 Jul 2024 16:05:18 +0000
ROA not before: Mon 08 Jul 2024 16:00:18 +0000
ROA not after: Mon 07 Jul 2025 16:05:18 +0000
asID: 61317
IP address blocks: 193.39.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 05:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:12:e7:7e:4e:b5:70:81:d1:5c:de:1f:7e:0c:f2:ea:db:69:97:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Jul 8 16:00:18 2024 GMT
Not After : Jul 7 16:05:18 2025 GMT
Subject: CN=B0373B50898256A4E289E5FE19CC7C4E99A51224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f9:7e:b5:6f:79:1c:d3:cf:08:aa:95:ba:2a:
09:92:6a:2b:af:a9:44:0a:0d:6e:69:89:8f:0f:3f:
b9:2b:d6:ae:b6:9a:1e:46:5b:de:e7:da:85:1d:55:
4d:71:8d:89:33:c4:c6:09:73:83:30:c2:89:2a:43:
a8:ba:b9:09:b0:5e:77:53:ce:f3:6e:23:20:34:ad:
62:5c:35:ae:56:13:0f:2a:f6:f6:c3:ac:2c:41:86:
ea:d0:56:d8:e5:b5:6c:65:14:c7:0f:09:0b:62:f2:
a5:71:e2:2c:b7:4b:02:4e:a7:af:5f:f8:f2:31:33:
a5:e0:69:b5:01:5c:82:5c:bb:9b:f7:2b:67:97:e6:
47:19:9e:9d:3b:93:a5:9d:e7:69:1f:39:0e:14:a2:
d1:da:96:68:ec:93:bf:80:aa:5c:88:e3:bf:b1:82:
87:0c:b0:14:f4:69:1d:c2:31:e5:f2:3e:5d:d1:19:
94:7a:1d:83:4f:9d:24:e9:20:8e:3e:de:c8:b2:3b:
7b:bf:0a:35:31:2f:d4:c1:58:34:6b:c2:fd:65:bc:
ab:b4:50:04:28:50:7f:dc:12:5b:c8:01:ec:e3:fc:
7a:5e:c0:4c:eb:36:f6:00:cf:97:3b:24:bd:ae:5e:
40:c9:ba:7a:8d:7f:1b:b6:50:99:0b:3d:6a:e4:df:
08:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:37:3B:50:89:82:56:A4:E2:89:E5:FE:19:CC:7C:4E:99:A5:12:24
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/3139332e33392e31302e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.10.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:e9:18:79:80:be:99:75:5f:e2:33:5f:18:b8:ee:93:50:a8:
e1:67:c5:9d:6f:1c:8c:3d:1c:73:71:c5:14:9b:bc:0f:04:d9:
16:94:ab:2d:c6:34:aa:b4:c3:10:48:23:43:84:96:7b:86:bb:
86:06:9c:c7:d2:fb:ce:92:76:e2:2f:54:bd:fa:3d:4d:1a:84:
b5:87:45:79:c8:c9:20:99:ae:9e:0c:90:eb:dd:01:4a:9a:d6:
f6:b2:d8:f6:e8:45:15:3e:8b:fe:c7:16:8e:7c:b1:5a:49:40:
4f:f9:e0:6d:46:85:6d:72:fb:e7:82:a9:bb:a5:e3:54:0b:c0:
16:c0:31:cc:35:2e:94:88:f3:70:ec:fb:c6:aa:5c:ef:67:78:
e0:b0:b0:45:ea:71:41:8d:47:eb:be:a8:8d:e9:2c:4c:12:b5:
b8:02:27:9c:1c:85:50:dd:ff:1e:45:86:1b:36:3b:ab:10:d0:
e5:53:32:be:f6:73:40:dc:d0:33:b8:41:73:85:ef:66:83:aa:
be:fd:c0:89:26:b6:e5:03:6d:11:26:fb:8e:2e:b7:03:b6:71:
5d:5e:1f:32:f6:36:17:aa:ff:dc:a1:b8:72:02:9b:79:96:ec:
89:a5:27:60:b5:92:40:35:a8:c8:ea:99:7a:f9:2f:bc:75:b3:
2e:30:c5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:16:48 2025 by rpki-client