Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/39342e3132362e3233382e302f32342d3234203d3e203438303730.roa
File: 39342e3132362e3233382e302f32342d3234203d3e203438303730.roa (raw, json)
Hash identifier: XD3V5dJXTVRCxQzxxC2QHwrcf2NvhNrbOoV/LwRhC+0=
Subject key identifier: 65:1E:39:6F:45:57:3B:22:95:4E:24:CC:28:A4:64:97:A4:42:4A:36
Certificate issuer: /CN=98a87cad5b710890a9528f166f4202393824e6b8
Certificate serial: 612F943310425F5683F64AF0C6C79A405D71213A
Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/39342e3132362e3233382e302f32342d3234203d3e203438303730.roa
Signing time: Tue 25 Jun 2024 15:49:18 +0000
ROA not before: Tue 25 Jun 2024 15:44:18 +0000
ROA not after: Tue 24 Jun 2025 15:49:18 +0000
asID: 48070
IP address blocks: 94.126.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Nov 2024 15:27:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:2f:94:33:10:42:5f:56:83:f6:4a:f0:c6:c7:9a:40:5d:71:21:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8
Validity
Not Before: Jun 25 15:44:18 2024 GMT
Not After : Jun 24 15:49:18 2025 GMT
Subject: CN=651E396F45573B22954E24CC28A46497A4424A36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1e:d3:d7:f1:8a:7b:f3:e7:41:96:24:b8:06:
53:41:ed:8a:99:ad:1e:e6:44:4e:8c:38:75:b2:88:
4a:d5:da:8c:b9:04:7d:5d:53:fa:87:92:c9:0c:ab:
dc:d0:33:aa:d2:bb:f9:c7:56:63:d1:ea:0c:04:a6:
43:a9:2b:48:a6:43:02:21:9f:49:6c:72:99:32:ff:
71:be:5e:07:e1:4f:32:74:76:a7:8a:f5:91:86:3a:
6f:37:4b:c7:24:d8:4a:71:4d:00:e1:39:b8:b1:29:
36:b1:ac:ed:f1:9e:61:d2:e7:54:82:06:91:5a:13:
b0:82:d3:2a:99:4d:88:99:18:f1:f0:55:bb:1f:d5:
5f:86:19:86:b6:54:3a:ff:cd:bc:07:91:5d:3a:53:
11:d4:13:d0:78:fd:eb:74:af:b2:b3:a3:ab:47:78:
e5:3f:4f:04:5b:6a:25:6b:08:41:9c:21:b7:64:85:
c9:86:57:bd:cc:39:1c:0a:46:49:8a:01:de:30:8b:
66:98:24:d0:0c:88:00:ec:3a:71:60:74:2f:c8:f2:
ea:60:b2:6b:d3:f5:3c:a1:20:2e:57:fa:f7:60:dc:
5a:49:3e:b2:5c:01:65:87:d9:cc:a7:bd:e7:f3:fd:
a5:7d:06:ac:f0:ba:09:5d:da:bb:d3:bd:37:43:d8:
7c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1E:39:6F:45:57:3B:22:95:4E:24:CC:28:A4:64:97:A4:42:4A:36
X509v3 Authority Key Identifier:
keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/39342e3132362e3233382e302f32342d3234203d3e203438303730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.126.238.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:77:39:b9:db:4c:6e:af:22:35:88:4d:78:c3:4e:aa:5a:02:
f4:30:d1:b4:8e:d7:09:cf:6d:a0:d5:04:5e:67:30:ae:8e:d6:
63:fd:55:8f:fc:59:2c:bf:dc:1b:c8:4c:17:e0:08:b5:b3:78:
d8:e4:38:02:37:f8:17:d1:0a:26:f0:41:96:0d:0a:89:60:12:
10:d1:5d:88:d1:9f:9d:0c:72:12:42:ea:0e:5e:08:a1:8c:27:
b1:d6:a0:c8:6e:84:dd:00:ef:89:27:22:7b:ff:52:31:c0:b9:
fc:be:76:fa:f0:c9:c6:97:e1:32:13:3f:fa:d8:fe:36:c6:ae:
f5:2c:9d:a6:9c:50:ef:62:41:d3:21:96:71:a6:e0:4a:08:e3:
8b:56:32:34:c7:af:18:b0:35:0b:43:db:c4:1c:6f:61:61:b3:
08:5d:35:99:94:4f:f6:bd:5c:b8:1f:31:7c:19:a5:91:39:22:
ee:7a:8c:a5:ac:c8:42:67:10:b8:d8:06:11:6e:fc:52:20:16:
e4:c1:63:76:3c:7a:21:29:9a:cb:92:80:1d:96:aa:f1:1e:6f:
1d:67:91:13:d1:ac:d6:4c:ea:4f:61:61:d9:60:56:5a:dd:7e:
9d:37:6d:4f:c6:82:e8:e8:52:55:cc:53:2d:ff:ad:3b:1e:64:
e3:23:a6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:46:08 2024 by rpki-client on console-fra.rpki-client.org