Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/39342e3132362e3233342e302f32342d3234203d3e203438303730.roa
File: 39342e3132362e3233342e302f32342d3234203d3e203438303730.roa (raw, json)
Hash identifier: P6VpVcg2APhRrCeqSdvJWAeWYuUD0ufb44Yi4WeNSS4=
Subject key identifier: F9:2A:EE:B9:52:EE:97:B9:63:75:DF:24:14:68:6F:85:E8:DF:80:F3
Certificate issuer: /CN=98a87cad5b710890a9528f166f4202393824e6b8
Certificate serial: 6F92A3DD8376AD668B7649295D9618A10C13BFB5
Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/39342e3132362e3233342e302f32342d3234203d3e203438303730.roa
Signing time: Tue 25 Jun 2024 15:49:17 +0000
ROA not before: Tue 25 Jun 2024 15:44:17 +0000
ROA not after: Tue 24 Jun 2025 15:49:17 +0000
asID: 48070
IP address blocks: 94.126.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:92:a3:dd:83:76:ad:66:8b:76:49:29:5d:96:18:a1:0c:13:bf:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8
Validity
Not Before: Jun 25 15:44:17 2024 GMT
Not After : Jun 24 15:49:17 2025 GMT
Subject: CN=F92AEEB952EE97B96375DF2414686F85E8DF80F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1a:83:5e:5e:6c:43:62:f7:74:86:c7:a4:9d:
3a:ec:ab:c7:7a:73:18:e7:a0:fd:28:e3:f5:15:ea:
8a:82:f7:9c:15:f4:18:e7:a0:13:9f:f3:7e:b7:e7:
a3:d2:d0:e3:d3:62:09:f3:dc:ea:9e:48:f0:f2:5b:
6c:4e:42:ae:b7:5d:cc:cc:d7:06:15:47:89:30:54:
d9:f4:2f:50:ce:f5:4e:ab:61:f9:45:f2:eb:3b:9d:
1f:07:e7:a7:05:36:77:60:e9:57:21:4a:42:97:08:
91:bb:9c:af:9c:30:44:32:34:d7:9b:b0:a2:5d:88:
f3:34:7b:af:5c:96:63:8d:79:02:7f:39:49:3d:4e:
48:10:03:d5:62:ab:91:16:19:25:17:2b:64:bf:6a:
a7:19:04:2d:37:6d:ca:21:28:1c:a8:2a:d0:ed:00:
29:d6:e6:c6:8e:49:28:5c:7a:ca:5d:9b:79:1e:0f:
03:c4:d2:44:1a:f0:d2:59:1f:17:83:65:f3:86:f9:
16:e2:62:4d:71:4c:bf:35:95:82:c4:57:11:0f:6e:
e9:fb:3b:56:ec:48:a6:ab:1c:3f:f9:f3:11:19:5f:
db:89:6a:c4:84:f9:8b:bd:c0:24:ab:72:90:a7:d3:
14:c1:d3:31:9c:87:09:8c:2b:03:dc:72:a5:ee:8b:
d8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2A:EE:B9:52:EE:97:B9:63:75:DF:24:14:68:6F:85:E8:DF:80:F3
X509v3 Authority Key Identifier:
keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/39342e3132362e3233342e302f32342d3234203d3e203438303730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.126.234.0/24
Signature Algorithm: sha256WithRSAEncryption
19:78:99:b1:2b:89:83:18:18:13:e3:0c:67:18:85:56:0b:8d:
42:bc:69:b1:aa:e8:87:bb:a2:8a:b9:73:5d:9c:bb:28:ac:30:
eb:02:be:fa:24:8d:40:2b:83:d4:5d:b1:59:5c:81:87:31:7d:
27:74:e7:71:04:52:94:05:82:81:3a:d4:75:9b:fa:f4:96:39:
a0:85:f5:4e:a6:87:63:5b:f7:f6:df:55:4f:fe:7a:26:44:6d:
d3:17:ed:0c:4b:2e:46:16:e8:ae:e1:6d:95:f7:74:12:13:cf:
32:4c:c4:b5:5f:56:1b:32:54:e6:af:96:92:ef:58:ed:08:4f:
30:1e:01:83:ce:06:68:c2:06:6e:ea:cb:45:9f:2d:06:28:24:
64:9c:a4:6e:de:29:ab:14:0b:41:84:c1:40:42:1a:e9:1f:54:
c4:84:23:29:34:df:01:86:a7:ce:79:12:dc:9b:4d:3f:7d:18:
d4:e3:7f:2d:a6:0f:9e:85:18:44:1f:ca:e0:7b:46:50:be:27:
8b:52:ba:dc:29:70:44:3c:36:fe:d4:bc:e4:6d:cf:97:f3:d8:
99:79:86:3e:55:84:cc:f9:5a:48:51:4e:04:dc:04:fa:31:32:
03:8b:74:6f:23:ef:11:f7:62:97:e8:1a:25:df:6c:b1:21:a2:
01:d9:91:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:49:09 2024 by rpki-client on console-ams.rpki-client.org