Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/39332e3131352e3235302e302f32332d3234203d3e2037303239.roa
File: 39332e3131352e3235302e302f32332d3234203d3e2037303239.roa (raw, json)
Hash identifier: CNvJFqxt1Rg37YLHYmDLIdIJIOLv802ZugEnetrOzsQ=
Subject key identifier: 59:76:28:4B:73:D7:6B:1E:F2:80:25:98:BE:0F:1C:B7:9D:68:AC:A5
Certificate issuer: /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial: 236795CC7E9C3FDC764B4C3D92E59F76D54B78C7
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/39332e3131352e3235302e302f32332d3234203d3e2037303239.roa
Signing time: Mon 06 Nov 2023 10:42:27 +0000
ROA not before: Mon 06 Nov 2023 10:37:27 +0000
ROA not after: Mon 04 Nov 2024 10:42:27 +0000
asID: 7029
IP address blocks: 93.115.250.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:67:95:cc:7e:9c:3f:dc:76:4b:4c:3d:92:e5:9f:76:d5:4b:78:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Validity
Not Before: Nov 6 10:37:27 2023 GMT
Not After : Nov 4 10:42:27 2024 GMT
Subject: CN=5976284B73D76B1EF2802598BE0F1CB79D68ACA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4d:ba:76:ca:85:86:ed:07:75:d8:40:ca:14:
82:8c:26:d8:eb:65:46:a6:f6:69:77:55:5f:57:a5:
b6:23:1d:53:1b:4e:a7:7a:d2:ff:ab:b5:98:98:19:
f8:40:69:0a:ba:99:51:44:16:ee:b0:00:2b:f0:8f:
2c:9a:a6:1b:9b:67:1b:ce:65:69:b1:51:fc:36:ee:
42:01:f6:90:b1:a7:94:85:54:08:e9:14:93:fa:36:
5e:8e:88:dc:61:d7:00:10:ce:6c:10:52:e3:d7:25:
bc:c7:b5:ce:96:96:41:b5:a0:90:89:81:df:bb:c5:
f7:bb:20:cc:1a:df:17:f8:7a:c2:25:af:60:4b:ac:
cf:2b:61:1f:27:97:5f:8e:4a:10:bc:29:48:35:df:
d0:14:d1:7c:e1:76:ac:67:73:ff:eb:25:e8:d1:c4:
63:69:92:fb:59:c9:5c:0c:4d:8d:22:20:17:0b:c4:
c6:92:e0:2e:82:e7:70:40:e1:0d:f4:f6:bb:88:25:
7e:28:29:c7:e4:5e:31:03:2a:2d:6b:a8:7e:76:49:
be:cf:0f:36:f1:05:bd:2b:0f:d2:78:7c:04:64:a4:
86:ab:d4:ee:14:4c:1c:69:35:12:cb:f2:b9:c0:f8:
f2:26:ed:2e:df:c8:2a:52:67:1b:de:36:0e:3d:33:
b4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:76:28:4B:73:D7:6B:1E:F2:80:25:98:BE:0F:1C:B7:9D:68:AC:A5
X509v3 Authority Key Identifier:
keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/39332e3131352e3235302e302f32332d3234203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.250.0/23
Signature Algorithm: sha256WithRSAEncryption
07:2e:87:79:56:90:78:0b:35:f5:f1:c0:f0:f7:44:c9:da:88:
21:2d:87:78:61:d8:b8:22:69:cc:c0:bb:49:47:41:6b:8a:84:
13:ab:01:5d:ea:dd:72:97:dd:91:f6:74:d1:b1:b8:cd:92:84:
9f:cf:73:fd:71:25:1e:60:29:4e:f8:50:34:2d:eb:6d:6c:f9:
38:f6:d6:66:09:6a:81:19:8e:91:f4:0c:50:b4:84:f1:a1:b0:
cd:2f:ae:38:3f:67:af:11:92:1b:84:80:c1:35:b5:e6:97:0d:
d0:f7:95:0f:3e:34:6b:38:cb:03:25:bc:17:c1:52:a3:4d:2d:
dc:59:bf:8b:b3:30:7a:44:96:84:fb:45:b6:ab:72:fd:0e:a3:
b5:28:56:ff:5f:50:14:72:3c:90:62:70:05:80:59:f8:ad:d9:
50:29:ec:d0:f6:ff:3e:6a:3b:43:3d:80:c7:c4:40:dc:a3:b0:
f3:3e:11:8f:af:6b:22:ae:07:15:79:a9:aa:44:96:2c:13:b8:
ec:2e:b8:49:ce:e0:61:31:26:49:4c:65:25:29:b3:26:a2:7a:
2c:10:0f:d6:1d:78:fd:82:ac:a3:55:f3:15:d0:e8:08:8c:b9:
74:8a:4c:79:89:93:0a:fc:36:66:5d:cb:90:2f:1a:8f:f5:8d:
b0:aa:a7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 11:39:57 2024 by rpki-client on console-ams.rpki-client.org