Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e31322e38312e302f32342d3234203d3e20323036343436.roa
File: 34352e31322e38312e302f32342d3234203d3e20323036343436.roa (raw, json)
Hash identifier: kl02tRRJk44Yj5Oohl1b6uj6U5ukpJck7dimdaDb1JU=
Subject key identifier: 84:1F:22:73:15:B9:AC:5A:DC:B1:FE:DA:B7:7A:1B:DB:34:D2:FB:58
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 478FCB2B5802DCFCC5D4FEEF8A50EDB95E22970C
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e31322e38312e302f32342d3234203d3e20323036343436.roa
Signing time: Sun 07 Jan 2024 18:40:39 +0000
ROA not before: Sun 07 Jan 2024 18:35:39 +0000
ROA not after: Sun 05 Jan 2025 18:40:39 +0000
asID: 206446
IP address blocks: 45.12.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:8f:cb:2b:58:02:dc:fc:c5:d4:fe:ef:8a:50:ed:b9:5e:22:97:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Jan 7 18:35:39 2024 GMT
Not After : Jan 5 18:40:39 2025 GMT
Subject: CN=841F227315B9AC5ADCB1FEDAB77A1BDB34D2FB58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:5f:c8:41:6f:86:d5:88:4d:98:26:76:95:0d:
2a:1d:27:79:0d:f9:fc:83:cd:89:5f:21:a0:62:67:
8b:46:19:de:19:45:41:2a:c6:3a:90:7b:90:66:08:
24:61:a9:99:aa:95:43:2b:f5:de:bd:cb:9f:ff:99:
9b:21:0f:fd:a9:23:92:08:bf:ca:8f:df:fc:46:c1:
4e:05:c0:80:10:f1:05:cd:87:e7:44:b7:a0:b6:10:
2b:3b:1b:4c:0a:4f:a0:d4:92:c5:12:00:a5:52:24:
75:b5:a3:c7:ec:be:5f:01:c1:9b:49:3c:94:1a:9d:
d0:d6:ea:60:62:98:bd:35:97:c3:9d:f1:9d:4c:b3:
19:48:18:65:1e:14:92:9d:6c:ee:c4:25:6c:bf:97:
29:99:b1:c6:b4:d0:ff:ab:8e:74:bd:0f:d7:fb:33:
91:7c:f3:7f:b7:b5:45:7f:1c:c6:9c:4d:12:91:47:
3b:8d:9d:ea:70:08:5b:97:c1:b4:a3:91:24:6d:a2:
81:ff:69:19:db:23:25:ba:2c:7a:02:92:6e:64:d8:
55:fd:ae:14:50:5e:5a:07:af:92:cd:d2:ac:b8:e2:
64:08:be:4a:ce:2c:82:1b:70:fc:62:6c:3a:01:02:
fa:ca:53:d5:2f:de:2a:34:66:b7:0e:37:99:66:27:
86:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1F:22:73:15:B9:AC:5A:DC:B1:FE:DA:B7:7A:1B:DB:34:D2:FB:58
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e31322e38312e302f32342d3234203d3e20323036343436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.81.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:45:71:b4:7e:ad:72:2c:9b:76:fe:6e:24:97:2d:8c:41:ca:
93:db:78:a5:d0:a0:8a:1f:07:2e:d5:f4:e8:d1:9a:97:a0:ff:
24:4d:35:d6:b4:46:8b:ec:cd:80:01:3b:02:5b:a3:9a:e6:2b:
19:82:2b:68:64:43:27:8d:aa:49:98:e3:84:1f:b0:fb:67:e5:
5f:4c:0b:7b:72:51:0a:f8:a6:15:82:20:c1:43:28:c2:4c:18:
ea:53:01:7d:d5:35:4c:a1:e3:4a:81:6d:23:9c:b0:6e:e2:ea:
f0:37:66:8e:48:da:4e:14:a9:72:77:62:2b:19:ad:b5:eb:79:
ed:1f:b5:29:ac:82:a9:a5:39:aa:32:54:4e:43:cb:af:d9:76:
61:c0:48:c7:7b:af:98:a7:a4:e7:72:57:b8:a1:2d:b8:99:8e:
99:a7:f1:a4:72:35:14:b1:68:d0:36:81:0f:96:cc:ba:a8:9b:
57:ad:45:ce:ec:42:94:8d:d1:01:6b:8e:8c:38:18:02:46:0f:
a9:60:ea:37:ef:f2:cb:8f:46:06:1b:22:a4:7e:ba:f9:7a:74:
1b:74:88:73:c3:0c:9b:42:ec:c6:1c:85:ac:9e:9c:8f:0d:d2:
48:0b:d1:72:64:ca:66:40:6d:f3:f9:6b:3a:8c:17:f9:cb:b5:
81:c8:27:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 09:30:06 2024 by rpki-client on console-ams.rpki-client.org