Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/39332e3131352e3235302e302f32332d3234203d3e203630373831.roa
File: 39332e3131352e3235302e302f32332d3234203d3e203630373831.roa (raw, json)
Hash identifier: sn49KCFEqPth+VcDZuHcumaLi6GqQKyTcSawvMbvCWk=
Subject key identifier: 46:C9:FD:FB:34:5F:BE:A3:F8:FD:1B:41:A4:A3:AA:06:4C:E5:63:8C
Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial: 31CAAB8E9974F7046737DC14039DDDB576B0268E
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/39332e3131352e3235302e302f32332d3234203d3e203630373831.roa
Signing time: Sat 26 Oct 2024 07:13:04 +0000
ROA not before: Sat 26 Oct 2024 07:08:04 +0000
ROA not after: Sat 25 Oct 2025 07:13:04 +0000
asID: 60781
IP address blocks: 93.115.250.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:ca:ab:8e:99:74:f7:04:67:37:dc:14:03:9d:dd:b5:76:b0:26:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Validity
Not Before: Oct 26 07:08:04 2024 GMT
Not After : Oct 25 07:13:04 2025 GMT
Subject: CN=46C9FDFB345FBEA3F8FD1B41A4A3AA064CE5638C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1e:f3:d6:20:e8:21:13:75:d1:c5:dc:43:1f:
b3:cc:19:c7:dc:87:4d:c4:19:cd:ab:e5:17:fa:dc:
25:c8:33:e3:66:46:03:e1:1b:bd:9e:8d:20:cb:d7:
4c:db:6c:cc:ef:7c:b4:3a:fc:1e:a5:0d:38:e8:f3:
9b:ef:0a:55:b3:61:73:0e:d2:63:5b:ff:c1:d7:98:
cb:e1:f0:a9:67:75:f6:3a:e0:89:55:93:33:9f:51:
14:8b:68:33:af:14:73:c7:07:b8:76:f2:4a:ee:98:
08:2f:7b:c4:49:96:48:9a:25:35:77:a4:11:ff:44:
3b:65:e2:9a:44:c1:18:2b:8d:9d:c3:47:30:73:6c:
3d:7c:49:52:fb:30:fd:bf:85:5c:28:99:44:4c:41:
13:90:a9:f7:9e:8b:a4:8c:c2:ff:74:a3:13:53:4a:
0f:47:a8:08:a8:5a:9a:f2:60:e3:8c:76:8c:db:73:
d1:21:4f:97:6c:72:5b:2e:dc:bf:71:a3:27:bc:fc:
af:1d:d3:10:2b:20:b6:4a:8c:b9:2d:9a:ee:7e:02:
23:72:c6:e2:bc:0f:00:15:96:95:59:9e:1c:cb:c8:
61:65:7a:46:37:67:91:d3:cf:fe:a2:dd:88:cc:2b:
14:9a:39:a6:a1:9f:b9:e0:80:46:00:89:c2:2a:56:
3f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C9:FD:FB:34:5F:BE:A3:F8:FD:1B:41:A4:A3:AA:06:4C:E5:63:8C
X509v3 Authority Key Identifier:
keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/39332e3131352e3235302e302f32332d3234203d3e203630373831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.250.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:f3:46:50:93:df:68:21:a8:c9:a5:0b:39:ae:d7:33:20:2c:
2f:4f:05:77:7e:a4:db:fa:1f:b0:e1:84:fb:a1:fa:bb:c5:3d:
20:d9:49:24:34:26:d0:04:0e:d5:6a:7d:84:ec:07:b7:a0:49:
fe:06:56:0f:d9:39:62:05:a0:a8:fd:0e:5c:aa:20:f3:4e:8f:
1e:92:5e:f7:ca:33:6f:ea:5b:88:c5:05:46:b9:92:e9:82:0a:
c0:dd:6a:d7:80:c1:eb:0c:59:78:80:f4:ce:f1:05:1e:ac:69:
d2:05:e1:a2:18:19:6a:4c:46:d3:54:80:04:14:71:48:fa:a6:
c2:6e:4d:73:ce:e8:ef:93:ef:00:b4:44:e9:68:01:fe:32:22:
c7:15:7d:4c:e7:cc:18:7b:09:0e:49:05:d0:41:4e:90:01:96:
9e:b7:35:d1:97:44:d9:e6:b4:5c:71:8c:c4:9b:e6:b6:84:65:
a9:33:db:41:cd:12:05:b9:03:87:3f:02:a5:2a:71:42:df:7b:
a1:36:5c:d4:6a:2b:4d:64:c1:0b:34:ed:e2:95:fb:52:47:4a:
a8:69:4e:ab:99:14:87:ad:6e:3a:92:63:17:5e:c7:4c:3b:4d:
bb:51:58:53:bd:bd:c5:07:4c:48:17:22:a9:72:6d:c7:01:db:
9e:fb:ae:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:58:17 2024 by rpki-client on console-ams.rpki-client.org