Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/39342e3132362e3233392e302f32342d3234203d3e203438303730.roa
File: 39342e3132362e3233392e302f32342d3234203d3e203438303730.roa (raw, json)
Hash identifier: WtMw6gTmYTWCmtNsyMU8znGs+9TK96TMgDW07igAViw=
Subject key identifier: 9B:67:F0:B5:EC:FE:A5:F0:1C:A4:19:CC:3A:50:1D:43:5E:21:51:09
Certificate issuer: /CN=98a87cad5b710890a9528f166f4202393824e6b8
Certificate serial: 2E7485A1A566299216AFF8AA32AA3D7FD0757FEB
Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/39342e3132362e3233392e302f32342d3234203d3e203438303730.roa
Signing time: Tue 25 Jun 2024 15:49:18 +0000
ROA not before: Tue 25 Jun 2024 15:44:18 +0000
ROA not after: Tue 24 Jun 2025 15:49:18 +0000
asID: 48070
IP address blocks: 94.126.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:74:85:a1:a5:66:29:92:16:af:f8:aa:32:aa:3d:7f:d0:75:7f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8
Validity
Not Before: Jun 25 15:44:18 2024 GMT
Not After : Jun 24 15:49:18 2025 GMT
Subject: CN=9B67F0B5ECFEA5F01CA419CC3A501D435E215109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:08:c4:c0:c8:48:06:5f:ac:21:e0:c0:14:92:
66:32:6d:da:42:2b:a9:4c:5c:0a:eb:f9:6e:fe:be:
a8:b5:2c:71:43:9f:40:59:b4:45:2c:bd:33:d6:57:
15:0e:2f:80:ee:4e:a1:46:ab:a7:e2:e5:6a:47:43:
c0:51:3a:19:80:ff:ac:fd:d3:e4:ee:7b:2d:2c:fd:
85:05:ce:2c:3f:e0:ed:95:73:84:ff:8e:a2:f3:a0:
0c:16:6e:48:eb:c5:0e:34:48:06:a3:d6:a1:06:53:
1c:0e:30:49:5e:94:ce:43:d4:84:88:36:10:cb:80:
f6:03:81:aa:4d:5f:6b:a6:b2:5a:95:9b:63:70:88:
a3:34:a5:51:79:19:ec:8b:42:6d:44:5c:db:37:02:
a4:0d:d0:23:41:04:5a:a1:a5:50:3d:3e:78:5d:44:
8f:b9:6f:01:87:13:81:59:2b:b0:b5:d6:48:1c:1c:
12:23:01:48:1d:71:d2:71:a5:32:87:c3:58:d0:25:
82:85:d1:8d:40:3d:a0:9e:f8:cd:a8:7d:15:a4:c4:
fd:4c:b1:65:19:d2:d9:1b:01:d4:ff:10:bd:e5:eb:
68:08:c0:76:11:c3:f3:df:8e:01:2c:d5:e3:31:3d:
26:4a:33:5f:76:a6:0b:83:40:9f:5b:f1:ac:1b:b9:
55:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:67:F0:B5:EC:FE:A5:F0:1C:A4:19:CC:3A:50:1D:43:5E:21:51:09
X509v3 Authority Key Identifier:
keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/39342e3132362e3233392e302f32342d3234203d3e203438303730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.126.239.0/24
Signature Algorithm: sha256WithRSAEncryption
07:2a:af:04:10:b3:86:d9:40:05:c3:f0:43:be:6c:c4:90:0a:
1a:b6:f9:9e:7e:a1:51:e6:d2:72:3a:70:1f:72:2f:bc:e1:b1:
51:13:37:47:09:c7:49:3c:01:4f:6b:ee:13:39:76:ee:8e:5f:
e3:9b:37:2e:b1:b7:10:03:d4:b7:85:f3:ce:52:1f:09:d6:82:
0b:e7:bf:be:c3:c3:b8:78:9d:b0:98:36:0d:bb:dc:05:89:da:
b9:74:6c:86:4a:74:0f:f1:3d:1c:5a:fb:78:7c:4b:10:00:56:
e6:1c:db:8c:be:ad:33:7e:40:51:cf:c3:21:98:12:27:ea:53:
12:e9:07:37:15:ff:b6:e1:18:8d:0e:1c:7f:e7:40:30:fb:d2:
61:f2:0d:85:b7:b1:7d:f9:f6:e0:0e:89:d4:be:5a:99:79:84:
a0:6e:2b:d2:f7:db:7c:a6:fe:f3:e9:c6:1b:50:68:69:e8:b3:
4b:54:2d:06:b2:56:74:f0:bf:2c:37:af:87:21:d4:1c:73:90:
4c:36:29:4b:21:01:60:26:40:7c:ab:e4:0d:3d:59:f8:ae:99:
6e:82:f3:94:0e:97:76:03:7e:11:cd:d4:17:1f:99:d4:76:c4:
f0:b9:f8:3d:d1:30:f5:7d:30:51:7a:17:cf:0a:8b:67:a1:63:
03:0e:e7:07
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIULnSFoaVmKZIWr/iqMqo9f9B1f+swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOThhODdjYWQ1YjcxMDg5MGE5NTI4ZjE2NmY0MjAyMzkz
ODI0ZTZiODAeFw0yNDA2MjUxNTQ0MThaFw0yNTA2MjQxNTQ5MThaMDMxMTAvBgNV
BAMTKDlCNjdGMEI1RUNGRUE1RjAxQ0E0MTlDQzNBNTAxRDQzNUUyMTUxMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+CMTAyEgGX6wh4MAUkmYybdpC
K6lMXArr+W7+vqi1LHFDn0BZtEUsvTPWVxUOL4DuTqFGq6fi5WpHQ8BROhmA/6z9
0+Tuey0s/YUFziw/4O2Vc4T/jqLzoAwWbkjrxQ40SAaj1qEGUxwOMElelM5D1ISI
NhDLgPYDgapNX2umslqVm2NwiKM0pVF5GeyLQm1EXNs3AqQN0CNBBFqhpVA9Pnhd
RI+5bwGHE4FZK7C11kgcHBIjAUgdcdJxpTKHw1jQJYKF0Y1APaCe+M2ofRWkxP1M
sWUZ0tkbAdT/EL3l62gIwHYRw/PfjgEs1eMxPSZKM192pguDQJ9b8awbuVUrAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUm2fwtez+pfAcpBnMOlAdQ14hUQkwHwYDVR0j
BBgwFoAUmKh8rVtxCJCpUo8Wb0ICOTgk5rgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGNlMTk2ZmUtNGIxYS00NmVhLTljOTUtNGFmMTI5NjRh
NDlkLzAvOThBODdDQUQ1QjcxMDg5MEE5NTI4RjE2NkY0MjAyMzkzODI0RTZCOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL21LaDhyVnR4Q0pDcFVvOFdiMElDT1Rn
azVyZy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZGNlMTk2ZmUt
NGIxYS00NmVhLTljOTUtNGFmMTI5NjRhNDlkLzAvMzkzNDJlMzEzMjM2MmUzMjMz
MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzAzNzMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
Xn7vMA0GCSqGSIb3DQEBCwUAA4IBAQAHKq8EELOG2UAFw/BDvmzEkAoatvmefqFR
5tJyOnAfci+84bFREzdHCcdJPAFPa+4TOXbujl/jmzcusbcQA9S3hfPOUh8J1oIL
57++w8O4eJ2wmDYNu9wFidq5dGyGSnQP8T0cWvt4fEsQAFbmHNuMvq0zfkBRz8Mh
mBIn6lMS6Qc3Ff+24RiNDhx/50Aw+9Jh8g2Ft7F9+fbgDonUvlqZeYSgbivS99t8
pv7z6cYbUGhp6LNLVC0GslZ08L8sN6+HIdQcc5BMNilLIQFgJkB8q+QNPVn4rplu
gvOUDpd2A34RzdQXH5nUdsTwufg90TD1fTBRehfPCotnoWMDDucH
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:49:49 2024 by rpki-client on console-fra.rpki-client.org