Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/38392e33362e32312e302f32342d3234203d3e203339373538.roa
File: 38392e33362e32312e302f32342d3234203d3e203339373538.roa (raw, json)
Hash identifier: 20are6G7cOa4yTn77PEZt0o/ZgFrwhpy3fJHAxeiEIo=
Subject key identifier: B4:35:3E:7B:01:7A:5D:E5:45:E2:25:30:D3:7C:C0:15:DC:A1:EB:88
Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial: 31E01BB44B61369616FD9EA7503A235BE3865377
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/38392e33362e32312e302f32342d3234203d3e203339373538.roa
Signing time: Wed 24 Jul 2024 12:05:19 +0000
ROA not before: Wed 24 Jul 2024 12:00:19 +0000
ROA not after: Wed 23 Jul 2025 12:05:19 +0000
asID: 39758
IP address blocks: 89.36.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:e0:1b:b4:4b:61:36:96:16:fd:9e:a7:50:3a:23:5b:e3:86:53:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Validity
Not Before: Jul 24 12:00:19 2024 GMT
Not After : Jul 23 12:05:19 2025 GMT
Subject: CN=B4353E7B017A5DE545E22530D37CC015DCA1EB88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:23:1c:5d:c9:d4:5b:7a:3f:3c:ca:5f:2c:2b:
82:3b:b8:a7:f3:47:6c:a4:bf:01:50:a8:ab:10:01:
58:42:38:42:90:af:7a:e2:62:f7:f8:d0:5a:da:6a:
28:76:39:13:b2:d6:35:19:41:56:fa:3d:04:8b:63:
88:0b:ef:51:a7:73:27:2f:f3:d0:af:67:57:dd:79:
cc:74:ed:85:af:91:42:19:c3:77:4e:62:8b:0a:ee:
72:37:2a:61:57:af:b9:98:45:c5:4b:77:d3:78:43:
1c:4e:f3:4b:87:bb:e8:80:d1:84:e6:5f:37:6b:2d:
d0:b6:20:d8:4c:52:a2:6b:ea:31:40:48:33:c8:f7:
01:a4:65:12:16:66:ff:03:7c:27:a5:59:8c:1f:64:
58:44:81:7d:bc:d2:7a:c4:c4:6c:53:4a:ad:86:39:
e2:83:89:ce:07:21:88:25:4a:4a:f3:05:ab:d3:87:
7e:4c:90:c6:ae:3c:d1:d2:81:52:b9:27:30:c2:8c:
9f:d3:e2:bf:76:a0:fe:39:6f:8a:58:3b:17:4d:23:
5f:25:c0:c7:91:65:3b:4c:32:da:f3:67:ec:25:70:
7d:eb:c4:19:bd:54:17:2f:69:05:1a:26:01:33:66:
b4:9d:04:b1:12:2c:74:1d:ed:05:2c:63:bd:12:92:
42:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:35:3E:7B:01:7A:5D:E5:45:E2:25:30:D3:7C:C0:15:DC:A1:EB:88
X509v3 Authority Key Identifier:
keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/38392e33362e32312e302f32342d3234203d3e203339373538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.21.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:ca:f3:d9:ec:97:85:66:cf:c9:dd:b3:66:d7:37:1a:c6:4a:
dc:3b:72:d1:ae:95:ef:34:51:18:e9:06:89:79:ab:25:05:36:
2d:6a:5b:72:4d:44:5c:ab:22:c9:ad:c1:b3:e3:4d:c0:c1:77:
bd:07:3f:20:6a:43:7e:e0:41:97:f7:0c:e8:f3:c9:95:3a:e4:
b6:43:cf:ef:2b:d0:93:1a:6b:cc:3e:2f:34:b2:d5:d1:72:fb:
f3:88:5f:ac:95:51:ec:8f:a8:e5:cd:24:72:6f:60:ba:75:29:
36:d5:ef:69:98:20:f7:12:f7:6f:fe:d2:20:e4:54:ff:e2:93:
f6:c2:06:8f:71:04:0f:ce:8d:fb:c8:e1:64:33:24:1a:01:23:
58:3a:b7:09:54:49:fd:bc:01:3e:ff:38:eb:28:06:6a:d4:4b:
bc:28:d5:0e:02:e5:a5:60:9d:c9:63:84:f5:fd:ce:ca:c1:eb:
80:90:30:ff:24:c2:b9:33:60:7e:d3:e2:63:8b:9a:fa:1b:a9:
7b:57:e1:e4:22:f6:d0:24:60:ed:14:d6:1e:53:35:7e:08:ec:
3c:19:6a:4e:a5:77:65:f5:c0:2e:ec:be:19:dd:26:58:a2:c3:
4b:70:0d:d8:9e:e3:36:ca:2d:f7:42:38:b6:e8:66:85:72:7f:
12:eb:a9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:58:17 2024 by rpki-client on console-ams.rpki-client.org