Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3231322e32342e3132372e302f32342d3234203d3e20323039323432.roa
File: 3231322e32342e3132372e302f32342d3234203d3e20323039323432.roa (raw, json)
Hash identifier: rE8pH4sPv+a5TyngguxTqc6aAZdtfKsEtZGXe0DstcM=
Subject key identifier: 5D:E8:96:0D:5B:F2:10:DD:3E:5F:D8:34:B7:FD:87:0C:37:0B:D0:49
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 21D907BB9E8446679393B741521AFE48F8EE4BB6
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3231322e32342e3132372e302f32342d3234203d3e20323039323432.roa
Signing time: Sun 26 Nov 2023 08:09:03 +0000
ROA not before: Sun 26 Nov 2023 08:04:03 +0000
ROA not after: Sun 24 Nov 2024 08:09:03 +0000
asID: 209242
IP address blocks: 212.24.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:d9:07:bb:9e:84:46:67:93:93:b7:41:52:1a:fe:48:f8:ee:4b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Nov 26 08:04:03 2023 GMT
Not After : Nov 24 08:09:03 2024 GMT
Subject: CN=5DE8960D5BF210DD3E5FD834B7FD870C370BD049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2e:2a:e6:a5:bc:91:92:59:d3:54:5b:5f:bd:
17:c8:ea:8c:8d:9b:0a:92:2a:e5:a1:34:15:7f:c3:
fe:26:14:10:04:8b:6a:9c:11:13:cb:84:38:1d:d1:
c3:9d:a1:dc:5c:63:2a:ee:03:04:3c:a7:57:7a:3e:
61:c6:23:f0:66:3a:52:a8:1a:16:dd:35:d0:51:3d:
e2:65:61:5d:f8:85:1f:f0:77:95:c8:aa:33:cc:11:
49:9e:01:ff:a4:55:a7:ed:f4:a9:34:c2:d3:f2:53:
b2:fe:ad:9e:79:4e:08:17:36:41:40:5a:bc:69:30:
7b:5b:5b:c4:73:1d:68:da:54:89:0c:cc:fb:b0:af:
df:c6:30:18:77:f2:42:d0:4e:a9:77:db:55:d0:37:
60:e0:c6:a1:76:1c:34:fe:3f:fe:a5:be:71:97:6a:
14:58:1e:4c:ad:fe:fe:67:f7:97:a9:23:b7:df:cf:
c8:6d:a8:e1:e9:27:a2:0d:3d:97:ad:1a:1d:f6:7f:
8f:ac:b5:2f:50:1e:05:f6:f7:23:3c:b1:e2:6a:75:
7c:55:3c:97:b0:86:99:f4:1c:27:e1:25:ea:77:d1:
9c:04:b4:54:c4:ce:62:35:45:3a:ab:5a:e0:47:68:
e8:96:b8:e8:f7:0b:91:3c:a5:99:67:23:c0:c9:7a:
a3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E8:96:0D:5B:F2:10:DD:3E:5F:D8:34:B7:FD:87:0C:37:0B:D0:49
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3231322e32342e3132372e302f32342d3234203d3e20323039323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.24.127.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:2d:c7:85:e4:07:7d:b7:7e:00:0b:8f:05:aa:71:32:05:b0:
c3:db:12:fa:39:6b:45:58:37:03:9a:11:3d:81:eb:a3:f5:f0:
aa:97:7c:9c:17:f9:94:e2:cd:f3:56:02:0a:ce:e3:e0:05:73:
ce:ec:f7:d3:03:70:e2:17:32:26:0e:ae:bf:71:ce:7e:f3:1e:
cf:34:81:7e:ae:a4:a7:f8:8b:56:ab:2e:b1:f2:0b:47:c5:27:
92:9d:10:1e:d2:ed:c9:02:da:a2:77:21:b4:74:b9:04:68:a3:
e0:00:30:12:74:d0:5a:8e:6d:77:e6:8e:24:08:44:f6:0d:0a:
c1:58:d5:d0:a7:54:60:68:fd:85:20:0a:9e:ab:98:db:23:02:
71:7c:92:65:29:cb:66:c1:c1:25:21:53:29:d6:3d:9a:a9:f0:
9b:a2:22:4f:d1:2f:d1:b4:67:b0:97:70:52:e0:d8:b5:31:f0:
fe:02:75:7d:91:63:d7:da:94:4f:8d:2f:1c:ed:8b:5e:0e:64:
98:73:91:67:c9:fe:27:05:9d:6b:ba:fb:4e:08:6b:45:c7:a1:
0b:ab:ac:80:93:2f:aa:bc:24:f5:5f:3f:40:7e:1d:5e:e1:91:
9b:57:d5:fb:97:de:3f:ac:e4:da:01:a6:e2:fe:1f:5d:49:5e:
ba:f6:72:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 11:42:52 2024 by rpki-client on console-fra.rpki-client.org