Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3231322e31382e3131362e302f32342d3234203d3e203139343337.roa
File: 3231322e31382e3131362e302f32342d3234203d3e203139343337.roa (raw, json)
Hash identifier: jxLEsQ5U9DlI0m/Z9kNRLu7kGZcxJhqmeMHKdU/rCos=
Subject key identifier: 5F:60:C3:A9:E0:D7:4A:8D:5B:5D:5F:FA:7F:86:7C:49:FB:8E:9B:39
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 3DF84A15C23784904798EE557A738B87802AC434
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3231322e31382e3131362e302f32342d3234203d3e203139343337.roa
Signing time: Sun 26 Nov 2023 08:03:28 +0000
ROA not before: Sun 26 Nov 2023 07:58:28 +0000
ROA not after: Sun 24 Nov 2024 08:03:28 +0000
asID: 19437
IP address blocks: 212.18.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:f8:4a:15:c2:37:84:90:47:98:ee:55:7a:73:8b:87:80:2a:c4:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Nov 26 07:58:28 2023 GMT
Not After : Nov 24 08:03:28 2024 GMT
Subject: CN=5F60C3A9E0D74A8D5B5D5FFA7F867C49FB8E9B39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:51:a8:36:64:62:d1:3c:18:0b:a7:99:b6:a3:
01:fb:6e:35:df:6c:c1:27:6f:cd:b0:86:70:bc:3a:
b8:70:28:85:7f:c3:9c:08:99:28:bc:46:03:59:c9:
27:9f:5f:a9:72:27:5b:bd:11:c6:14:d4:7e:21:cc:
29:1f:72:56:d8:87:32:72:12:a2:0e:da:8a:81:c4:
e3:a6:bc:e4:5e:ea:eb:23:84:5c:07:39:f1:4a:02:
15:c3:ad:f9:51:31:cb:59:6f:90:46:29:3c:49:7b:
57:71:e8:40:8e:d8:6c:bf:e5:5f:8b:2b:f7:13:98:
ad:c1:f6:bd:2b:94:00:0c:04:2b:76:ac:bb:62:1e:
78:7a:fc:cf:eb:d5:ea:79:cd:80:b9:a5:7a:70:f4:
60:d6:35:7d:63:20:ff:9b:cd:eb:b9:fe:e0:44:35:
56:e1:eb:ac:3c:ab:b8:29:ce:7d:c1:3d:fe:be:b1:
e4:44:21:29:b7:b9:63:2e:91:fe:40:d9:08:dc:45:
47:a1:14:64:9a:e4:07:3d:56:11:03:05:19:30:de:
e9:a6:32:1c:b1:d8:f5:f7:5f:a2:87:05:16:12:45:
7b:e4:06:0f:4c:1a:1a:46:c8:86:9a:2f:dc:5d:48:
a9:ba:ba:35:fc:70:91:7c:8e:9c:60:a4:82:75:23:
b4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:60:C3:A9:E0:D7:4A:8D:5B:5D:5F:FA:7F:86:7C:49:FB:8E:9B:39
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3231322e31382e3131362e302f32342d3234203d3e203139343337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.18.116.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:d5:57:7d:95:f5:8b:ec:84:ba:73:8b:e4:dd:f9:5e:80:c6:
c0:cc:26:2e:0c:9a:31:a3:c3:5d:bc:f9:15:ed:cc:a1:d9:08:
50:c2:58:88:c9:10:48:3f:30:6a:87:8b:76:1f:67:4c:3b:57:
24:dd:21:b8:30:fd:02:b5:c1:48:9b:55:9d:cd:df:06:e7:47:
ce:12:52:93:7e:f6:95:6c:99:55:be:00:35:e4:20:8f:3d:ca:
62:9a:c9:1c:e7:7b:83:44:fe:fe:40:33:f6:92:49:46:d0:88:
4a:47:10:08:6b:d5:95:f3:87:1b:5b:4d:52:ed:7e:20:d7:63:
e4:59:88:5a:1a:01:75:8b:ae:38:a1:8f:23:cd:6b:05:11:e3:
fe:5d:ee:5d:1f:90:3e:be:c7:9a:ce:34:29:32:4c:01:ca:cc:
6f:a6:8b:89:6d:96:f4:50:58:e6:8e:cc:15:51:67:ea:a4:28:
73:8d:0f:f0:9f:84:49:ab:9c:3a:17:b0:5c:7b:41:61:41:30:
0f:e2:00:d6:fb:f4:27:12:4f:2d:dc:9b:fc:fb:85:18:cd:f1:
37:ab:93:fa:eb:93:d5:7f:96:ae:72:17:4f:9c:a6:a6:ac:f3:
58:b9:01:ed:cb:44:29:1b:93:94:7c:b5:c4:26:12:92:5c:84:
fb:57:0f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 21:14:45 2024 by rpki-client on console-fra.rpki-client.org