Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133372e302f32342d3234203d3e20323730333533.roa
File: 34352e39312e3133372e302f32342d3234203d3e20323730333533.roa (raw, json)
Hash identifier: TaAc8WFqXfRkykh47wt/kGE9F6DhnqCP1JCwwCd4CZY=
Subject key identifier: F0:76:5D:98:83:59:9D:8B:A8:76:A8:0F:21:53:BE:10:73:AC:91:38
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 300974FC15955FDCE2083A43187703CA77A6F765
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133372e302f32342d3234203d3e20323730333533.roa
Signing time: Thu 28 Dec 2023 12:20:39 +0000
ROA not before: Thu 28 Dec 2023 12:15:39 +0000
ROA not after: Thu 26 Dec 2024 12:20:39 +0000
asID: 270353
IP address blocks: 45.91.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:09:74:fc:15:95:5f:dc:e2:08:3a:43:18:77:03:ca:77:a6:f7:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Dec 28 12:15:39 2023 GMT
Not After : Dec 26 12:20:39 2024 GMT
Subject: CN=F0765D9883599D8BA876A80F2153BE1073AC9138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4e:3d:47:f7:fe:92:6d:de:76:4e:da:ba:9b:
4d:96:65:8d:c7:7d:e6:50:36:14:04:1e:3a:07:38:
ad:07:77:20:18:31:7d:81:d5:7f:bf:19:62:47:2a:
98:e0:85:82:49:58:34:29:7b:74:ae:d9:01:b1:42:
3b:25:a1:99:87:e6:c2:82:98:fb:af:9b:8c:c6:30:
8b:74:d2:cf:8c:6d:4c:29:c1:2e:40:4c:ee:50:a3:
af:26:09:ba:05:ce:00:21:4a:d0:12:d4:f5:de:14:
ff:69:f9:c9:7f:e9:89:62:c9:da:81:e1:36:e8:8d:
07:43:ea:a1:99:9b:9e:32:8b:f1:f0:61:ec:89:99:
77:f6:dc:37:9e:3e:d0:77:67:18:be:55:df:74:c5:
d9:bd:1c:59:10:0a:84:a9:d4:1c:a4:75:0b:1c:24:
a5:e7:31:a9:71:84:c3:f4:34:66:f2:bd:96:d9:e6:
69:c1:6b:88:52:55:62:ea:8b:a8:1f:3e:57:ed:21:
33:06:3c:f7:45:e3:55:5a:1b:2b:56:e8:16:8d:49:
ba:d2:6a:48:cc:06:1c:84:f8:fb:4d:c5:a9:b8:69:
b4:20:e9:84:40:20:8b:1b:99:aa:a3:28:bc:61:40:
ee:33:37:3a:40:7a:f0:d2:18:9b:53:56:3a:29:a9:
34:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:76:5D:98:83:59:9D:8B:A8:76:A8:0F:21:53:BE:10:73:AC:91:38
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e39312e3133372e302f32342d3234203d3e20323730333533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.137.0/24
Signature Algorithm: sha256WithRSAEncryption
07:dc:13:71:b4:c2:9c:bd:eb:b9:99:07:61:c7:59:20:4e:a9:
bc:73:f1:b5:8b:ac:bf:73:d8:31:1f:7f:ef:5c:19:e4:19:0c:
85:38:f8:e2:55:23:13:ca:4a:f1:e2:8d:7c:a2:b9:34:8d:b1:
a0:36:db:86:96:45:e8:24:e1:db:5a:9d:05:59:f0:8a:84:8f:
ec:d2:c4:83:9e:53:ac:82:68:8f:12:c5:82:d9:67:e9:b9:8a:
56:ff:36:b9:1b:aa:d8:56:17:59:5d:3c:5c:d5:47:87:59:71:
22:76:a7:68:d9:cc:53:ea:e8:f4:1a:22:1d:16:90:49:2e:ec:
c8:36:14:7a:5f:46:95:50:3c:0a:5c:18:ad:4a:85:59:9c:9a:
a9:8f:22:4d:2d:14:4e:51:d6:f7:8a:4e:68:29:2f:df:4a:26:
36:e9:90:95:af:6b:e3:52:cd:91:5f:54:51:12:10:9a:de:b5:
4a:d8:56:77:63:45:c4:32:ae:38:2c:77:93:02:86:a8:9d:00:
82:94:ed:26:84:dc:24:7f:ef:ea:6d:68:12:9b:2a:cf:82:c4:
de:95:d5:98:7c:b0:48:e9:93:91:37:7b:5f:81:73:26:78:17:
2a:f9:f1:26:d2:f7:f8:00:71:b5:9b:15:03:b5:c6:f3:f2:50:
73:e6:4c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 17:21:54 2024 by rpki-client on console-ams.rpki-client.org