Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130352e302f32342d3234203d3e20323135303236.roa
File: 33312e32322e3130352e302f32342d3234203d3e20323135303236.roa (raw, json)
Hash identifier: 4XlIN+3Y2uvivj3jKKbdxnHiR3dRqeJ7/xmTE8uipj8=
Subject key identifier: CD:B5:E9:D5:A9:17:F4:35:F6:01:10:FC:17:EB:D9:F2:19:2A:52:79
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 7D31D05859E19A299232F783A76B4FE23ED6192B
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130352e302f32342d3234203d3e20323135303236.roa
Signing time: Tue 24 Dec 2024 15:19:27 +0000
ROA not before: Tue 24 Dec 2024 15:14:27 +0000
ROA not after: Tue 23 Dec 2025 15:19:27 +0000
asID: 215026
IP address blocks: 31.22.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:31:d0:58:59:e1:9a:29:92:32:f7:83:a7:6b:4f:e2:3e:d6:19:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Dec 24 15:14:27 2024 GMT
Not After : Dec 23 15:19:27 2025 GMT
Subject: CN=CDB5E9D5A917F435F60110FC17EBD9F2192A5279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:73:66:7b:c2:8e:e4:e3:ca:b5:93:5d:06:2e:
23:45:4b:02:f9:a3:56:9d:f9:87:15:98:96:2b:9f:
21:61:47:9a:72:01:dd:09:0e:5b:2b:5c:ef:54:14:
e7:50:59:6e:98:b6:79:99:26:79:0c:63:e3:9b:27:
ec:4e:02:a5:ee:ca:4e:58:66:e9:94:06:33:9a:4c:
95:f9:bf:40:a5:3d:0a:16:4b:40:14:be:23:ef:9e:
70:5a:6d:60:61:7b:7a:78:41:d1:50:b3:73:a9:58:
f5:e1:64:12:19:eb:7f:19:4b:1b:be:55:83:6f:fc:
8e:21:2b:02:21:6b:3f:1b:34:ba:a6:b0:eb:d2:d7:
5f:4f:12:6a:e7:2d:d8:af:10:da:aa:2f:3e:d3:bc:
e4:8a:ff:b3:31:32:d8:bc:b8:12:ad:ae:f6:ae:e9:
cc:60:ee:9b:41:aa:b6:f4:b5:31:a7:cb:06:f4:b7:
cd:c3:7e:b3:2a:a3:4e:bb:d2:ae:21:83:0b:2e:9b:
c5:30:78:aa:f1:78:25:a7:6b:b8:76:16:23:12:ff:
03:97:39:e5:19:bd:36:e2:91:49:83:6e:27:bc:c2:
5c:dd:39:5b:be:d2:02:88:a6:5c:3e:0c:b9:1a:85:
97:2a:0b:e2:be:e2:b7:6d:1e:43:d3:2c:ab:3e:9f:
2a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B5:E9:D5:A9:17:F4:35:F6:01:10:FC:17:EB:D9:F2:19:2A:52:79
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130352e302f32342d3234203d3e20323135303236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.105.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:80:81:14:a2:2f:be:41:ae:e0:6f:6d:ae:67:bd:5d:f7:69:
3b:f7:98:37:03:e5:da:a2:e0:dd:d7:2a:52:8d:92:7e:a3:d0:
29:23:52:f3:73:0b:2a:5a:22:7d:37:04:dc:cb:ea:13:d0:3b:
af:f2:2a:ad:14:46:9e:d5:f5:1c:ca:62:23:3b:1d:7a:16:ab:
f2:4c:20:1d:4a:7b:70:af:ea:87:ff:7d:bb:7d:ff:d1:d8:50:
67:6d:99:1b:47:8f:e3:e5:61:36:28:fb:16:d6:59:da:e5:77:
d9:ef:7a:5d:f6:41:cc:66:49:f0:61:4c:d9:13:7f:68:15:4d:
24:86:b0:ca:92:f1:8d:0a:01:8b:24:07:b9:38:51:a7:95:bc:
c8:cf:34:5f:35:53:e4:7b:d4:6e:61:5d:ba:10:be:ae:bb:12:
ef:9c:9d:61:d8:4e:81:92:8c:84:22:3b:e7:10:75:27:5d:4c:
da:8d:21:4c:a8:28:bc:4e:db:fb:5d:83:78:9b:4f:9a:b7:57:
33:4b:8a:6a:81:db:cc:e8:8a:b9:19:8b:02:0f:60:9a:86:57:
67:88:df:6c:c7:bc:e6:6e:94:91:29:1d:30:98:51:aa:50:2c:
33:d5:dd:17:5c:2f:cc:a2:3d:55:d0:9f:34:b3:9b:10:84:7f:
f0:ee:90:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:04:38 2025 by rpki-client