Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3231322e31382e3131352e302f32342d3234203d3e20323135323234.roa
File: 3231322e31382e3131352e302f32342d3234203d3e20323135323234.roa (raw, json)
Hash identifier: b6QOnb8pm8L4AqerB98d//tmBtqXvlExZKGUK6qKkcA=
Subject key identifier: 3A:17:54:D8:C3:C4:07:EC:74:D9:D1:FB:8E:2F:E3:CF:10:DB:7A:15
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 42D43662B724C8C047E3E938944A51F9BB18D965
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3231322e31382e3131352e302f32342d3234203d3e20323135323234.roa
Signing time: Tue 08 Oct 2024 09:08:00 +0000
ROA not before: Tue 08 Oct 2024 09:03:00 +0000
ROA not after: Tue 07 Oct 2025 09:08:00 +0000
asID: 215224
IP address blocks: 212.18.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:d4:36:62:b7:24:c8:c0:47:e3:e9:38:94:4a:51:f9:bb:18:d9:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Oct 8 09:03:00 2024 GMT
Not After : Oct 7 09:08:00 2025 GMT
Subject: CN=3A1754D8C3C407EC74D9D1FB8E2FE3CF10DB7A15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:26:ab:45:e1:ba:43:40:e7:75:b3:8b:4b:42:
76:f0:b9:49:87:27:31:45:18:8a:f8:59:17:58:89:
2b:e4:90:6b:3f:f9:07:d6:cd:fb:5b:89:a1:24:b3:
f7:09:cb:5c:de:ac:1e:ea:d4:1b:7a:4b:99:7b:55:
2b:12:97:f5:41:95:2d:66:4b:f3:e3:47:31:c3:7d:
02:e2:f7:7e:10:80:21:07:8f:d5:1b:a4:e5:a8:89:
e2:39:63:2f:a1:59:df:3d:90:7f:30:b5:dd:a9:da:
22:5f:ca:96:33:62:1e:c2:2a:0a:a4:9d:a2:7e:e8:
da:0e:e1:ca:de:20:a1:06:82:a0:5e:67:ee:0b:4e:
fa:e8:c7:71:af:bc:67:5d:20:aa:f3:49:68:81:8c:
5e:7b:17:76:d8:e9:c6:f7:3d:e3:b0:a3:e6:d7:d5:
2b:71:ef:ab:3d:21:69:ef:50:7b:3f:69:17:dc:2e:
e3:e3:04:c1:7a:9e:b4:88:8d:e3:c6:9c:31:dd:24:
99:63:45:82:7d:2c:14:0d:30:de:a2:10:b8:57:9b:
91:d2:60:c5:ab:45:2c:57:a0:22:8d:2e:20:44:a4:
db:7e:06:1d:b3:1a:5a:02:d2:11:87:17:44:0c:42:
7f:85:28:96:e0:cf:3c:52:6d:27:e2:95:76:09:8e:
5c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:17:54:D8:C3:C4:07:EC:74:D9:D1:FB:8E:2F:E3:CF:10:DB:7A:15
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3231322e31382e3131352e302f32342d3234203d3e20323135323234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.115.0/24
Signature Algorithm: sha256WithRSAEncryption
73:35:8a:38:46:65:b2:37:3a:d5:63:90:8d:98:60:6d:3d:68:
ff:15:1c:da:6a:55:6a:4b:f3:52:a5:e0:2a:cf:92:bd:ce:f2:
93:c6:92:34:7e:eb:1d:6a:d3:aa:b8:7a:05:1c:42:76:a8:12:
96:90:e8:b0:18:41:0e:7b:c1:60:9c:ce:35:13:ac:86:14:b8:
94:ea:1d:e1:51:f1:b6:9f:ca:2f:1a:d9:ea:f5:5c:01:dc:91:
45:8a:d3:d3:15:71:4d:60:ec:6c:49:60:52:ce:7c:12:8d:48:
3e:e3:33:fb:3b:62:8e:7b:40:06:36:3b:cd:d1:84:d5:bb:88:
d1:fb:9a:31:50:eb:73:d0:a5:78:23:c0:e1:34:09:6c:69:25:
15:cb:b1:5a:f5:b1:c1:25:07:c8:6e:0e:b5:37:36:eb:d0:a6:
98:49:51:8a:74:08:43:63:9c:3a:cc:28:b0:31:37:25:85:14:
2e:c2:00:f5:56:8c:3f:08:7a:93:9a:03:a3:ac:8d:1e:ab:23:
4d:ca:05:c6:0d:c3:24:36:3c:4e:0b:96:17:96:e3:ba:01:07:
c9:f5:17:4f:a5:7b:36:52:dd:7e:4d:c0:c4:53:95:ae:7d:db:
fa:49:7e:ea:e9:1c:be:f0:d9:10:81:63:f6:9d:4b:32:67:e5:
a9:89:f6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:59:20 2024 by rpki-client on console-fra.rpki-client.org