Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3134362e31392e35332e302f32342d3234203d3e203633303233.roa
File: 3134362e31392e35332e302f32342d3234203d3e203633303233.roa (raw, json)
Hash identifier: lkEVkKc4eXSY3QZhzmP5cXAKGT9cvIlC4Q0AKtEHATE=
Subject key identifier: 30:B5:4F:CD:EA:55:F2:B3:14:0D:61:69:F3:11:5E:13:3D:F9:24:47
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 6327351CC416AA2895CE2A3A186E5CBAEF6EA55C
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3134362e31392e35332e302f32342d3234203d3e203633303233.roa
Signing time: Wed 06 Nov 2024 08:43:27 +0000
ROA not before: Wed 06 Nov 2024 08:38:27 +0000
ROA not after: Wed 05 Nov 2025 08:43:27 +0000
asID: 63023
IP address blocks: 146.19.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:27:35:1c:c4:16:aa:28:95:ce:2a:3a:18:6e:5c:ba:ef:6e:a5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Nov 6 08:38:27 2024 GMT
Not After : Nov 5 08:43:27 2025 GMT
Subject: CN=30B54FCDEA55F2B3140D6169F3115E133DF92447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8c:32:4d:a8:eb:21:91:cd:72:db:e2:7d:b1:
8a:80:a2:d1:13:9a:38:83:f5:26:d9:2d:5b:ed:ff:
8e:18:40:88:c4:23:b1:6d:94:80:0a:3f:87:94:79:
0b:3b:d4:74:f0:e7:67:4d:79:23:59:2f:d4:65:91:
3f:3c:0c:81:a6:9e:c7:ff:f0:b0:7d:4d:5b:66:8a:
17:97:2d:9a:48:9c:d7:ab:0c:da:f4:0b:be:80:5b:
3a:6d:36:91:48:de:6b:d4:91:05:c6:d8:18:d7:40:
11:d9:7f:e6:f1:b9:8d:58:32:34:48:b5:4b:ca:66:
fc:b9:ca:d2:0b:49:a8:f6:b8:a0:a6:da:a9:1f:ff:
4f:78:d4:fb:ea:63:6e:a4:1f:84:3c:01:97:1e:2c:
fa:9c:f2:ed:dd:7f:55:64:2b:2e:bf:55:60:28:89:
76:bc:e8:c8:68:91:11:51:75:b6:5d:64:46:41:87:
3c:cc:03:3f:78:e4:a4:8e:cc:bc:a2:98:e7:2a:61:
fe:1f:18:1d:34:a2:4b:ae:57:2c:5b:2c:82:28:1c:
3a:7f:2f:f5:ec:50:df:11:49:73:aa:d1:65:8f:2a:
ba:29:e2:5b:9b:b1:ae:98:db:43:44:9c:3a:30:b1:
60:96:1a:a2:16:63:eb:a6:3d:65:92:2a:e3:b8:c0:
f5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B5:4F:CD:EA:55:F2:B3:14:0D:61:69:F3:11:5E:13:3D:F9:24:47
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3134362e31392e35332e302f32342d3234203d3e203633303233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.53.0/24
Signature Algorithm: sha256WithRSAEncryption
07:59:06:1b:b3:8a:ed:75:44:97:06:ea:e7:2b:c8:4f:a6:53:
9a:24:31:12:8e:1d:6d:f9:11:8b:93:14:4a:c4:3d:c4:16:be:
29:06:c5:0e:5d:31:85:ff:42:7d:20:29:42:ce:7f:2f:b4:38:
b9:53:60:21:b9:1e:50:89:4f:f0:99:3c:b6:31:30:b1:25:a3:
8b:ff:cd:53:64:c7:cc:ef:a8:03:3d:53:6e:32:5e:75:18:aa:
01:bd:8b:09:09:62:8c:bf:b8:2e:17:91:41:43:2a:16:17:5f:
9e:e7:13:32:b7:5a:77:90:a1:39:ae:03:1e:15:ce:6f:d5:6a:
6f:63:88:b9:39:11:72:81:cc:0b:b6:93:5b:c7:99:01:36:56:
22:f6:b2:f8:90:49:fd:1e:22:51:92:b4:a2:07:91:e6:20:a8:
04:14:91:14:87:e6:75:87:ce:a7:e3:35:99:fc:af:e2:a0:74:
b0:e1:0b:b8:5c:9d:95:78:04:94:c8:75:4d:66:98:24:60:6b:
d2:11:b4:19:1e:4e:04:40:6f:cb:9f:36:55:fd:95:2a:42:06:
76:fc:2a:14:b7:69:6c:ac:f5:84:02:07:a7:17:75:bd:05:cd:
87:81:32:27:c3:a2:a7:19:cd:6a:a9:fa:fe:09:e1:3e:2a:46:
79:fb:60:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:59:20 2024 by rpki-client on console-fra.rpki-client.org