Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130382e302f32342d3234203d3e203432383331.roa
File: 33312e32322e3130382e302f32342d3234203d3e203432383331.roa (raw, json)
Hash identifier: y9uevaBeLo1M0NZi4w3HJOyvLkMWIaZEJFCi8snsYYY=
Subject key identifier: EF:69:D2:39:E9:A0:C6:25:4B:6D:18:C4:03:4B:FF:21:23:71:2A:10
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 745BD96B89932CF81987ADDD45C4EFF0FA00573F
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130382e302f32342d3234203d3e203432383331.roa
Signing time: Mon 16 Dec 2024 14:57:27 +0000
ROA not before: Mon 16 Dec 2024 14:52:27 +0000
ROA not after: Mon 15 Dec 2025 14:57:27 +0000
asID: 42831
IP address blocks: 31.22.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:5b:d9:6b:89:93:2c:f8:19:87:ad:dd:45:c4:ef:f0:fa:00:57:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Dec 16 14:52:27 2024 GMT
Not After : Dec 15 14:57:27 2025 GMT
Subject: CN=EF69D239E9A0C6254B6D18C4034BFF2123712A10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7e:af:cb:7a:95:8b:af:5e:57:44:c5:a4:59:
0d:9a:22:56:e0:d8:8a:61:36:65:63:db:d7:c1:d3:
f7:61:3a:18:51:1e:d0:79:5f:dc:70:41:0f:5f:db:
ac:89:00:e6:80:9e:5e:e7:e8:c6:7c:ee:7a:3a:95:
39:89:56:31:6e:13:59:f2:2a:98:a5:6b:ec:60:e9:
31:90:a9:93:05:e6:b5:88:6f:d4:d4:8b:a0:8d:72:
81:b3:31:ce:a3:99:28:c2:8c:a1:6e:ce:4c:cb:78:
ff:78:c6:ac:c9:f2:54:53:98:c3:a8:72:6f:55:cd:
77:60:b5:81:82:d0:d6:f9:b4:fd:3c:fe:b8:be:1d:
8c:4a:0d:84:d5:ba:9a:62:24:70:b8:88:01:e3:9e:
01:af:e8:17:a4:17:93:8e:ef:41:ee:2a:7d:6c:26:
d7:26:a1:0e:ad:dd:89:dc:e0:0b:3a:94:08:cf:ea:
21:69:da:d1:4f:ca:99:26:45:99:db:0b:04:1b:ba:
cf:6b:3c:a1:ae:68:56:db:51:5e:eb:a3:b1:b8:2a:
2e:5b:3c:58:14:5c:47:60:00:bd:50:34:94:35:8d:
54:c6:2e:fa:f8:61:05:f3:2b:b6:32:82:90:63:f5:
2f:84:0c:6a:56:c8:41:cb:7a:68:84:a3:03:5f:87:
e0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:69:D2:39:E9:A0:C6:25:4B:6D:18:C4:03:4B:FF:21:23:71:2A:10
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3130382e302f32342d3234203d3e203432383331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.108.0/24
Signature Algorithm: sha256WithRSAEncryption
75:79:3b:56:51:d7:bc:4d:33:2f:51:18:7f:09:0c:cc:ac:ce:
14:d2:fd:55:c9:f1:03:32:61:4a:8d:e8:3e:8d:2c:6a:f0:d0:
b8:65:c9:f2:48:1a:83:ff:1a:19:1a:94:ea:c6:35:d5:78:63:
9e:e7:86:9a:22:4a:72:04:2b:c6:07:b3:da:5c:c9:55:03:32:
86:20:15:a7:9b:70:65:ad:92:28:04:23:39:f5:23:70:e2:69:
c0:72:84:27:ff:f8:e2:15:69:46:25:80:5b:26:2a:79:97:fa:
a1:5e:11:0c:b7:25:12:cd:69:73:9c:d4:82:5f:cc:22:dd:48:
3a:66:a1:e2:0d:7b:ac:0e:9b:5c:ab:73:2d:61:39:f9:dc:9e:
b3:f0:1b:6c:98:e0:8b:2f:1c:af:52:35:8b:71:cd:1a:51:c3:
11:90:e9:7d:9b:30:b5:e4:97:c2:e3:1e:2a:57:a0:a8:96:aa:
84:26:55:8b:7d:59:ac:15:1d:46:01:77:a9:9a:9d:9b:62:76:
de:ee:0b:0d:10:57:c2:4d:fc:80:00:4f:cc:e4:f0:4c:38:86:
45:cb:c2:c4:61:de:e4:f3:d2:05:e8:ae:1f:08:e0:fe:6d:d1:
74:0a:de:25:4c:ee:6b:51:7f:ab:1c:0f:2b:e4:3e:a5:1e:96:
c8:bc:d0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:56:55 2025 by rpki-client