Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3134362e31392e3231362e302f32342d3234203d3e20323033343432.roa
File: 3134362e31392e3231362e302f32342d3234203d3e20323033343432.roa (raw, json)
Hash identifier: 5MhTg3WNQopkLd26dHEraA0JmRHvDmnTnoXzkQXt7q8=
Subject key identifier: B4:7B:89:EF:E0:75:43:D6:79:13:C9:72:7A:1E:8F:AB:0F:25:9F:B1
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 745C8C1CE6844612CBFA0C2368247D3E94BF6F27
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3134362e31392e3231362e302f32342d3234203d3e20323033343432.roa
Signing time: Wed 14 Feb 2024 13:12:42 +0000
ROA not before: Wed 14 Feb 2024 13:07:42 +0000
ROA not after: Wed 12 Feb 2025 13:12:42 +0000
asID: 203442
IP address blocks: 146.19.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:5c:8c:1c:e6:84:46:12:cb:fa:0c:23:68:24:7d:3e:94:bf:6f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Feb 14 13:07:42 2024 GMT
Not After : Feb 12 13:12:42 2025 GMT
Subject: CN=B47B89EFE07543D67913C9727A1E8FAB0F259FB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a8:21:b3:63:cc:15:bc:c6:14:9b:ad:c3:4c:
3c:ae:5d:60:6a:5f:01:91:4b:fa:7e:99:a8:ce:e4:
86:3f:b1:b9:f9:98:2d:1d:28:e8:60:1f:63:71:c5:
64:ea:48:df:1b:27:df:86:2b:19:bd:65:1a:12:c9:
3c:20:ed:8e:7a:a5:3b:5f:0a:bd:fd:24:5f:63:d7:
cf:24:02:4e:47:87:b7:43:40:ea:93:47:8c:a0:b4:
3e:f3:57:86:65:4a:eb:31:a4:5f:df:2f:f8:05:13:
38:ab:5b:29:13:ae:42:59:b0:59:c1:20:8c:26:62:
cc:ed:b6:c6:36:c1:49:66:3d:2c:d6:d4:7f:64:61:
76:06:3b:75:ac:62:6e:fd:e4:b6:29:b3:0f:a5:6c:
b8:bf:7a:c1:09:a4:3e:69:fe:00:23:04:00:79:75:
f3:00:f4:d0:ab:f6:fa:96:fa:89:eb:27:a1:a6:1e:
a4:62:30:38:1b:3c:9f:d5:71:e5:9f:7f:57:34:c4:
4e:b9:2c:b9:b6:14:2f:4e:70:f5:1c:60:f5:bc:83:
5b:3c:f0:00:7e:7c:75:b4:6a:05:d6:8d:81:d5:1a:
d1:51:48:38:f9:bd:d7:93:ad:28:64:94:17:8a:af:
5b:c3:eb:bd:3c:6f:46:04:b5:c8:b4:54:6a:66:54:
fd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7B:89:EF:E0:75:43:D6:79:13:C9:72:7A:1E:8F:AB:0F:25:9F:B1
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3134362e31392e3231362e302f32342d3234203d3e20323033343432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.216.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:32:ce:98:3f:b9:f3:d8:94:04:cc:72:c1:3b:bd:1b:28:28:
c4:4b:49:40:85:6c:c7:7a:81:c7:f0:86:05:fb:3e:ae:aa:3d:
04:a4:72:8e:23:08:4d:e4:d1:60:52:5a:ab:dc:f7:a1:5e:36:
b6:f0:a6:f4:01:0a:ef:9b:c7:e6:38:db:80:10:df:89:01:63:
c3:7f:c2:8e:4e:33:eb:72:37:49:92:df:8d:a8:2a:a6:a9:13:
d5:ad:5e:04:f3:8e:c2:4b:9a:93:d7:57:b4:06:bf:cd:0a:6c:
dd:83:41:81:3f:b7:d0:c7:b1:84:5e:78:2c:51:d1:67:e2:fd:
2b:38:03:77:a9:f4:54:90:3c:84:f2:a7:9a:77:55:bc:28:3f:
0b:d6:aa:24:22:0f:e6:e7:a9:2e:79:b6:24:8b:69:5e:66:fc:
8d:b7:b3:2c:4f:d3:21:78:c1:1f:5c:da:04:97:92:f2:d3:81:
3c:d2:e9:be:eb:88:2a:76:93:90:df:bd:75:99:4d:25:31:36:
41:a3:34:35:59:75:ef:25:9b:47:0f:8e:3a:d5:2b:4b:13:82:
96:22:f6:e5:20:0d:d0:91:05:6f:87:dd:1c:64:59:9f:88:37:
ff:be:7e:67:22:b0:c2:35:3e:cd:be:b3:07:7e:e6:39:1e:08:
9c:41:b1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 12:32:23 2024 by rpki-client on console-fra.rpki-client.org