Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3134362e31392e3231362e302f32342d3234203d3e20313334363737.roa
File: 3134362e31392e3231362e302f32342d3234203d3e20313334363737.roa (raw, json)
Hash identifier: HkphqP9od5I6cgosV1wv4ZV0YjQA96l2cTfDfo5nVNc=
Subject key identifier: E8:02:81:D7:56:51:71:8C:98:C3:D2:DA:22:DA:0D:9F:C2:9C:98:F7
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 60639F7AD99A6AE93E899993EAB7213ED186085C
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3134362e31392e3231362e302f32342d3234203d3e20313334363737.roa
Signing time: Tue 01 Oct 2024 07:56:02 +0000
ROA not before: Tue 01 Oct 2024 07:51:02 +0000
ROA not after: Tue 30 Sep 2025 07:56:02 +0000
asID: 134677
IP address blocks: 146.19.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:63:9f:7a:d9:9a:6a:e9:3e:89:99:93:ea:b7:21:3e:d1:86:08:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Oct 1 07:51:02 2024 GMT
Not After : Sep 30 07:56:02 2025 GMT
Subject: CN=E80281D75651718C98C3D2DA22DA0D9FC29C98F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:be:aa:fc:06:13:d5:27:2c:db:d9:42:3b:73:
c4:3b:dc:05:54:9a:16:98:88:a0:10:02:13:3f:e8:
60:d4:7a:42:60:fa:d3:24:d5:9e:2c:e1:a8:26:57:
86:f4:9e:83:50:eb:42:6e:2f:dd:3c:dc:cf:f8:09:
26:49:f0:b6:53:37:31:1f:42:2b:87:be:90:8a:ff:
f1:7b:0c:91:a0:bb:e0:81:ad:e8:d6:e6:75:31:5a:
d9:73:ba:97:b6:3d:30:7c:8b:17:d2:cc:9e:4d:80:
0d:1f:a7:ba:f4:bc:4c:19:5d:ad:e9:8c:7a:39:6b:
a5:70:29:d4:7c:7e:cd:c8:d3:45:0f:ca:5c:64:3f:
92:5b:3b:88:c6:97:76:65:86:c5:c8:dd:11:da:b5:
28:68:82:64:1d:a4:32:59:7a:2b:ec:fa:8f:c7:1e:
29:b6:22:ef:1c:ad:99:74:97:f2:0a:96:fb:98:f1:
23:ce:ec:0e:d7:db:37:fa:8e:b3:82:68:78:2b:54:
65:3c:a9:c1:2f:77:4d:d5:45:88:7c:80:eb:58:cd:
6c:48:56:81:81:31:ad:16:3f:ea:6d:68:31:26:e1:
be:f8:8d:eb:17:51:88:88:f5:22:68:5c:68:e0:62:
7a:7b:da:f5:df:57:63:3d:3f:f1:eb:96:84:1c:7c:
9c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:02:81:D7:56:51:71:8C:98:C3:D2:DA:22:DA:0D:9F:C2:9C:98:F7
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3134362e31392e3231362e302f32342d3234203d3e20313334363737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.216.0/24
Signature Algorithm: sha256WithRSAEncryption
44:67:ed:26:08:58:b0:49:39:2f:a5:e1:dc:41:b7:9e:95:14:
ea:51:ff:bb:5c:f5:5d:aa:8d:51:ba:15:45:87:7c:4c:4d:44:
5d:c1:8e:69:02:b4:84:b7:51:0b:6a:c2:f9:64:4a:d7:dc:26:
58:74:12:47:16:f9:55:56:4b:db:2b:55:1e:11:de:f6:3a:c7:
0a:db:f9:7a:2d:a9:5d:34:a2:15:41:a7:00:42:38:a8:d4:f0:
4d:2d:da:ed:b8:69:03:f5:be:75:13:38:ed:1b:62:6c:90:a5:
81:09:64:e5:30:8b:bd:14:5b:9e:25:3c:8d:d5:8f:99:aa:09:
ee:8a:7d:91:ba:1b:09:80:e0:09:45:b6:b0:ea:fa:a4:5c:cb:
8d:e3:24:d8:8e:a0:50:15:e2:12:e0:89:1a:14:8d:01:77:71:
d4:9d:c7:82:13:c4:d5:44:41:ce:cc:2c:79:db:18:df:b0:4a:
70:e8:4a:8a:e8:70:a9:b8:32:c2:5d:ba:97:82:1f:a8:da:6d:
1b:91:5d:a9:71:3d:7d:74:d7:76:29:51:b7:6e:25:82:83:86:
72:93:c5:a4:38:4d:12:3c:16:cd:c2:23:c5:71:be:10:01:36:
a9:31:f1:7f:23:32:ae:0f:da:bc:2a:69:2f:6e:b5:59:6d:cd:
c3:c2:81:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:46:58 2024 by rpki-client on console-fra.rpki-client.org