Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3231322e32342e3132372e302f32342d3234203d3e20323039323432.roa
File: 3231322e32342e3132372e302f32342d3234203d3e20323039323432.roa (raw, json)
Hash identifier: nu/JiP0rtG0U02DP4xScS3DPtP7WeG4aO1UTaRbM8/I=
Subject key identifier: 8B:C5:E7:FC:2C:2A:D7:08:E1:DD:3A:7E:90:61:B6:11:A1:FD:7D:51
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 5CB7D8090083916CB18D8647C4910123D76D84C5
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3231322e32342e3132372e302f32342d3234203d3e20323039323432.roa
Signing time: Sun 27 Oct 2024 08:43:25 +0000
ROA not before: Sun 27 Oct 2024 08:38:25 +0000
ROA not after: Sun 26 Oct 2025 08:43:25 +0000
asID: 209242
IP address blocks: 212.24.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:b7:d8:09:00:83:91:6c:b1:8d:86:47:c4:91:01:23:d7:6d:84:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Oct 27 08:38:25 2024 GMT
Not After : Oct 26 08:43:25 2025 GMT
Subject: CN=8BC5E7FC2C2AD708E1DD3A7E9061B611A1FD7D51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:27:02:93:43:23:4e:25:a6:a1:79:b5:2b:22:
20:7c:b6:cd:c1:76:de:2d:07:19:01:89:07:89:f1:
6d:bf:fd:d8:62:2e:74:db:b6:31:e2:20:71:73:f7:
be:48:61:d0:bb:c2:49:0d:15:bd:a8:1a:c1:b2:c3:
b1:3d:4a:66:44:5d:05:28:24:ed:18:64:6e:45:ce:
1e:de:ea:fa:23:16:6d:48:3c:26:c3:60:a2:3b:c6:
76:96:39:a4:27:6f:9c:2d:5c:e8:25:a4:83:33:c4:
cb:79:17:bc:45:c8:f8:d1:9e:13:af:ab:cc:09:b7:
8b:93:73:2a:14:ea:42:a5:c5:19:b4:fc:fd:98:95:
4b:b5:54:81:52:1f:45:83:44:fa:53:eb:97:5d:d4:
6a:f8:55:12:74:0e:70:b8:07:c4:55:57:ab:da:86:
bd:08:06:99:d9:e7:3a:7a:65:b4:58:8c:c3:f2:f0:
f7:7b:d7:9e:4b:f7:3c:ae:a2:da:cd:78:3c:85:7d:
99:3e:e2:fb:ad:f9:8b:e2:86:cf:ba:15:f0:a0:13:
73:19:3f:d0:74:7e:68:7d:ad:44:31:3a:d8:00:ec:
37:d8:2c:cc:74:82:d5:80:d3:3b:87:a7:eb:92:0d:
06:33:1b:76:a0:cb:6d:83:7e:d3:b8:58:e5:d3:f2:
3b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C5:E7:FC:2C:2A:D7:08:E1:DD:3A:7E:90:61:B6:11:A1:FD:7D:51
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3231322e32342e3132372e302f32342d3234203d3e20323039323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.24.127.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:08:5b:5a:99:c0:4f:c2:e4:86:12:90:a5:18:d6:48:73:54:
62:3d:17:99:96:a2:f4:ca:c6:ad:04:5b:a4:c6:de:da:78:4d:
79:46:fc:bf:85:d9:72:50:82:34:f5:0b:0f:4a:37:ef:e1:c2:
34:c3:4b:fd:36:e5:c9:a4:6c:5f:f9:64:bb:3d:a0:16:c1:a7:
b8:71:f7:c9:04:18:90:21:c1:98:6e:66:a9:c9:7c:7c:13:21:
3b:f3:78:1f:e6:c3:0d:5e:a5:53:b3:4a:52:f1:ca:37:72:ab:
f8:4c:ec:9f:cd:a4:9b:57:e2:d1:ee:ab:77:85:0c:06:b0:7f:
b4:1b:d3:db:98:69:85:f9:3e:57:2e:a3:c5:42:fc:cb:72:bf:
11:26:bc:85:e2:d3:90:13:e3:05:c2:b9:ec:75:b0:3d:a5:b1:
b6:d2:66:26:84:8f:49:2d:b3:c9:01:8e:e4:42:57:8b:82:6f:
02:08:07:7a:1f:5f:e5:7f:15:a3:c5:20:dc:56:4c:4a:ae:13:
2c:d5:e1:f8:3c:a7:c9:ea:54:6f:c9:ce:40:c8:c7:9f:00:0a:
7c:56:eb:63:2d:7b:45:ea:6c:61:83:19:dd:d7:01:14:1f:b9:
28:dc:6e:65:39:02:a4:55:b7:a8:fb:85:67:dd:16:40:02:3b:
9b:d2:d9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:46:58 2024 by rpki-client on console-fra.rpki-client.org