Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/37372e38312e3133382e302f32342d3234203d3e20383334.roa
File: 37372e38312e3133382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 1SXBXimSUKC12LtwhiVKPGybEr8NUiXE2YtV/X2qsyQ=
Subject key identifier: 93:A6:6F:A8:52:29:CE:D7:3D:EA:AF:B9:AB:13:FB:20:3A:35:B6:F8
Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial: 23D1D5C2644A4EBA55F0A8B24678A2D2CEB5EB46
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/37372e38312e3133382e302f32342d3234203d3e20383334.roa
Signing time: Fri 17 May 2024 00:01:32 +0000
ROA not before: Thu 16 May 2024 23:56:32 +0000
ROA not after: Fri 16 May 2025 00:01:32 +0000
asID: 834
IP address blocks: 77.81.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:d1:d5:c2:64:4a:4e:ba:55:f0:a8:b2:46:78:a2:d2:ce:b5:eb:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Validity
Not Before: May 16 23:56:32 2024 GMT
Not After : May 16 00:01:32 2025 GMT
Subject: CN=93A66FA85229CED73DEAAFB9AB13FB203A35B6F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:80:cf:9f:86:41:df:2b:35:53:83:d3:91:c7:
bf:90:3d:26:1d:af:a7:51:01:3f:a2:7f:13:76:91:
76:44:df:36:cd:01:5d:e5:45:07:07:8e:55:08:20:
75:81:bf:33:c1:96:5d:53:8f:87:0f:3a:7c:02:ab:
e8:58:43:c3:b7:f6:e2:29:25:27:8f:a3:19:d2:5c:
f1:81:2c:f2:f6:10:4c:96:27:4d:e9:c9:1e:1a:d1:
01:11:41:97:9a:ed:9f:c8:66:2a:44:6a:8f:30:0c:
f2:27:9c:91:9f:ce:3a:6b:a2:55:4c:00:de:22:cb:
73:20:49:4f:ea:2b:69:d9:62:e6:f4:94:e6:d7:86:
b3:06:2a:21:27:0e:f0:ea:5b:e6:b8:ae:69:75:4d:
bc:4f:99:eb:2a:03:b7:18:87:80:6f:ba:ab:2a:01:
65:26:24:2f:8c:a7:2b:db:f3:77:d0:8e:8e:a9:01:
4a:13:f4:a9:c4:64:5c:3e:71:b9:a9:c9:07:63:a4:
6c:34:d8:1c:2b:fb:1c:62:b8:01:52:8a:19:ba:60:
6a:d9:15:bf:8f:a3:f6:04:6e:af:cb:e0:28:fe:f1:
96:0a:10:14:16:e6:0d:0b:92:10:7c:c9:b3:57:72:
68:bd:22:04:d4:55:c3:74:78:5f:cb:c6:ce:8d:04:
a0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A6:6F:A8:52:29:CE:D7:3D:EA:AF:B9:AB:13:FB:20:3A:35:B6:F8
X509v3 Authority Key Identifier:
keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/37372e38312e3133382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.138.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:ea:25:6f:7f:f1:1c:e6:72:b6:2f:ff:6b:0d:1c:58:d6:af:
46:51:f2:25:fb:89:a5:f7:70:6d:4b:46:2d:ce:6d:2d:cc:1c:
0b:9d:8e:25:f1:26:7e:60:8b:76:f3:89:85:c6:3c:84:be:4c:
dc:08:ef:69:6e:c5:7f:6d:82:21:c9:e7:bc:76:96:fc:a2:6c:
b0:8d:c7:ad:22:4f:b8:a0:3c:5a:f3:3f:5b:8b:ed:08:9f:a4:
be:e3:59:2f:1e:14:49:9d:68:13:f4:87:98:b0:97:e5:21:45:
c1:51:f7:dc:50:e2:27:23:06:9a:2d:2d:d4:da:ad:eb:a3:01:
45:8d:9f:76:65:f4:ee:5c:79:5a:66:7f:be:d4:47:fe:eb:6e:
69:42:eb:4d:e6:0d:fb:a5:f6:0a:cd:0c:c1:b2:14:9b:5f:a2:
3f:d1:b6:4a:f3:7b:a3:2c:56:87:50:3b:ac:72:92:28:e2:56:
ff:80:75:66:4b:51:63:99:88:fd:cd:9d:15:04:ed:4e:85:5d:
3e:81:5c:79:e3:da:6b:65:00:48:be:71:7c:1e:fc:9d:aa:6a:
d3:58:08:15:1e:72:78:6a:68:1c:e6:a6:ab:ba:d9:63:eb:47:
b6:79:94:fb:04:9a:72:10:e3:c1:99:e2:f0:bb:bf:50:ba:87:
db:10:a2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 10:21:39 2024 by rpki-client on console-fra.rpki-client.org