Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/3139332e3230312e37332e302f32342d3234203d3e20323036323634.roa
File: 3139332e3230312e37332e302f32342d3234203d3e20323036323634.roa (raw, json)
Hash identifier: UaKmXoR9NNc0+EzImNm8FN5YOGbqcqynjHxgUP6CTtw=
Subject key identifier: CC:F9:77:C9:63:B1:DC:70:74:95:36:9B:9D:42:0D:6B:EA:0C:D8:8A
Certificate issuer: /CN=5511f6d7def4c0ffb6e2b3b3f0c4455dcd14c160
Certificate serial: 3317D48AFDBE0ECB632B2E22BC7328A610B7381F
Authority key identifier: 55:11:F6:D7:DE:F4:C0:FF:B6:E2:B3:B3:F0:C4:45:5D:CD:14:C1:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRH21970wP-24rOz8MRFXc0UwWA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/3139332e3230312e37332e302f32342d3234203d3e20323036323634.roa
Signing time: Thu 03 Oct 2024 23:58:23 +0000
ROA not before: Thu 03 Oct 2024 23:53:23 +0000
ROA not after: Thu 02 Oct 2025 23:58:23 +0000
asID: 206264
IP address blocks: 193.201.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/5511F6D7DEF4C0FFB6E2B3B3F0C4455DCD14C160.crl
rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/5511F6D7DEF4C0FFB6E2B3B3F0C4455DCD14C160.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRH21970wP-24rOz8MRFXc0UwWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:17:d4:8a:fd:be:0e:cb:63:2b:2e:22:bc:73:28:a6:10:b7:38:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5511f6d7def4c0ffb6e2b3b3f0c4455dcd14c160
Validity
Not Before: Oct 3 23:53:23 2024 GMT
Not After : Oct 2 23:58:23 2025 GMT
Subject: CN=CCF977C963B1DC707495369B9D420D6BEA0CD88A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:cb:39:2f:84:e0:78:f0:b2:8b:48:2e:b6:95:
25:f8:96:4b:9c:23:23:f5:39:bd:50:b3:8f:80:58:
3a:69:3c:f2:79:ab:a1:1c:ab:d9:32:6c:b7:53:e0:
e4:aa:ff:a7:2b:85:93:b3:89:e3:4f:ae:12:0e:4e:
4a:9e:5f:57:f9:80:67:9c:7c:9e:b5:cf:59:95:62:
8d:40:29:7f:62:24:39:e7:e3:1e:e2:5e:2e:34:77:
ba:2f:18:cc:df:33:fa:0c:fd:c3:ee:61:3a:df:ae:
cc:5c:ae:2c:0f:e9:34:e0:8c:08:45:8d:e4:f6:c6:
7a:84:94:f8:f1:e1:5d:a3:84:40:d3:8c:48:43:82:
af:82:02:c8:47:94:81:f8:d7:36:31:23:5f:a4:b0:
6a:3b:c5:c7:3a:9f:55:d5:98:76:63:59:f9:34:64:
09:ff:7b:98:fa:81:41:b6:5c:8e:cb:67:5e:71:10:
92:db:cc:d7:35:44:e8:2a:e1:24:7e:9b:06:96:3d:
aa:d8:ca:cd:70:cf:39:61:61:83:2c:35:a3:40:63:
15:a8:23:9b:07:64:2a:01:10:7a:29:c4:a7:2d:de:
b3:24:76:b9:da:3e:ac:07:bf:1f:e6:52:10:7f:30:
bc:c3:d6:8b:a4:d5:81:fa:5b:53:4b:9f:00:91:d1:
21:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F9:77:C9:63:B1:DC:70:74:95:36:9B:9D:42:0D:6B:EA:0C:D8:8A
X509v3 Authority Key Identifier:
keyid:55:11:F6:D7:DE:F4:C0:FF:B6:E2:B3:B3:F0:C4:45:5D:CD:14:C1:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/5511F6D7DEF4C0FFB6E2B3B3F0C4455DCD14C160.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRH21970wP-24rOz8MRFXc0UwWA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/3139332e3230312e37332e302f32342d3234203d3e20323036323634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.73.0/24
Signature Algorithm: sha256WithRSAEncryption
49:18:56:24:a7:6e:0f:85:03:5a:b9:dc:60:b6:fb:e7:44:bf:
0c:c3:7f:2d:9d:f2:97:66:b8:e3:5d:ef:79:21:b2:fc:13:b9:
2b:ff:8e:af:95:8c:15:27:dd:19:d8:aa:4e:17:6d:e9:4c:65:
6d:3b:5a:3e:fd:da:c4:6f:f5:f1:07:2f:37:11:97:a9:14:44:
cd:3a:19:ee:3d:ee:7d:fc:c4:41:25:56:d0:32:49:ac:b1:24:
37:98:a0:66:d2:13:0c:c0:69:3e:30:42:cd:b1:12:bf:a4:9d:
f6:78:38:5e:a7:90:48:b3:a6:3b:17:10:19:b3:90:b2:fa:f4:
60:60:ff:e1:6a:4d:ed:58:e8:f8:20:97:e2:86:44:7a:8a:80:
22:8e:eb:e3:6b:ad:07:eb:1f:61:76:f6:3d:34:8d:1a:fc:7b:
85:68:38:6c:01:a8:83:3c:f5:f9:b0:d8:66:a4:68:41:f9:26:
da:b6:d1:3c:fa:33:a8:77:67:5a:b5:6f:dc:d6:25:21:12:b5:
a8:29:11:2e:b1:6c:83:c5:a8:16:f3:a8:fa:6e:4c:75:36:01:
b6:4d:10:bb:84:a4:ab:7a:78:1b:75:86:02:83:ee:d5:d6:2c:
ca:14:6d:4a:d9:df:7e:b6:a8:23:20:74:ce:07:13:e7:76:31:
1f:77:8c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:35:21 2024 by rpki-client on console-ams.rpki-client.org