Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3131302e302f32342d3234203d3e20323134393931.roa
File: 33312e32322e3131302e302f32342d3234203d3e20323134393931.roa (raw, json)
Hash identifier: vOjZjdWC1hE9h6JbEZG3iGLatE7/n3W8AescAyUg5mE=
Subject key identifier: 0F:19:3C:29:36:6B:C1:2F:C6:EE:90:D1:14:B4:D0:01:68:FE:4C:CF
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 0D6B262F8EA0F92B59EABB68AEDC0F6AC21D24D9
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3131302e302f32342d3234203d3e20323134393931.roa
Signing time: Mon 16 Dec 2024 15:03:45 +0000
ROA not before: Mon 16 Dec 2024 14:58:45 +0000
ROA not after: Mon 15 Dec 2025 15:03:45 +0000
asID: 214991
IP address blocks: 31.22.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:6b:26:2f:8e:a0:f9:2b:59:ea:bb:68:ae:dc:0f:6a:c2:1d:24:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Dec 16 14:58:45 2024 GMT
Not After : Dec 15 15:03:45 2025 GMT
Subject: CN=0F193C29366BC12FC6EE90D114B4D00168FE4CCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e4:f0:cb:4e:8d:ad:c4:6a:1c:88:cb:d6:90:
a3:84:1c:12:fd:fb:0d:89:d2:d4:72:cb:f9:5c:36:
4b:32:5a:b7:30:3d:2f:2f:f8:5f:cd:32:08:36:fc:
a8:78:61:7d:1c:a9:24:3a:18:51:48:96:48:21:39:
40:73:8d:74:62:08:39:ac:09:22:bc:4d:db:63:08:
fd:9d:c2:bc:a7:1d:4f:3f:fa:d8:3c:dd:a7:20:aa:
49:df:00:f6:ec:1b:5d:b3:a9:0f:4e:a3:72:fd:d7:
14:6c:02:a1:e4:c7:75:06:68:0e:bc:65:fb:92:a0:
a5:26:de:6c:4b:bd:0c:5b:d7:d2:85:a7:9a:48:5a:
2a:c9:8d:fc:c9:e1:19:09:83:e7:70:64:26:bb:60:
0c:2d:96:77:88:67:bf:e4:81:5f:0a:5c:41:cc:ff:
e7:ec:a8:e1:7d:aa:6c:e8:0f:aa:20:78:70:76:6e:
ef:d9:09:11:9a:40:94:c4:ba:db:df:c6:b7:fa:e2:
38:a5:69:ea:fc:20:16:fc:99:0d:fc:2a:f8:49:9e:
61:0b:95:4d:63:bd:9d:1b:19:3d:10:92:d9:b8:4f:
3a:72:20:49:89:4c:dd:01:11:fa:73:bb:02:ea:9a:
e4:f4:0d:8a:92:86:ab:0e:5b:75:ab:2e:16:51:a5:
db:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:19:3C:29:36:6B:C1:2F:C6:EE:90:D1:14:B4:D0:01:68:FE:4C:CF
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/33312e32322e3131302e302f32342d3234203d3e20323134393931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.110.0/24
Signature Algorithm: sha256WithRSAEncryption
00:bc:e1:a3:d7:46:1b:54:d8:1d:f5:da:03:c9:7b:66:cb:d5:
fd:68:a0:1a:db:8d:21:f4:94:8f:9e:f8:f4:69:32:8d:f2:7a:
5b:8e:f1:88:cc:c2:f5:ed:4c:9b:46:94:f5:45:9a:7e:b1:64:
15:08:5d:e1:9e:47:c5:84:ad:ed:5d:3b:f7:09:1e:2b:4a:31:
86:e2:21:ba:3d:e7:48:ea:c6:e0:19:35:ac:a8:fd:80:22:5b:
93:89:c6:3f:53:aa:de:97:76:ac:41:91:3b:e3:eb:b8:76:62:
2a:3e:ab:19:d3:74:4b:56:5f:05:b8:9c:38:7f:91:24:0a:71:
ab:e9:a9:ce:3c:13:8a:9f:c3:d6:9e:f8:30:88:46:ef:81:1c:
62:c6:ee:42:5a:ac:8c:c3:9e:1b:1a:97:bb:1f:8d:7b:44:72:
b2:f0:aa:9d:72:02:e9:29:8b:e0:21:df:a3:01:23:f6:d4:85:
2d:c7:49:e4:a7:52:7e:dc:c4:20:68:be:79:ea:83:dc:42:f0:
e3:37:5c:9a:90:73:ca:cf:be:08:c5:0b:03:ec:65:9d:e9:59:
b9:eb:8d:4b:ac:12:2c:95:03:a0:5f:62:13:f0:e9:a7:a5:3a:
45:f6:db:e0:35:6e:f7:20:7d:c7:b0:ba:2b:95:52:17:b4:ce:
fd:67:48:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:48:58 2025 by rpki-client