Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3138372e302f32342d3234203d3e203331313033.roa
File: 39352e3136392e3138372e302f32342d3234203d3e203331313033.roa (raw, json)
Hash identifier: pRxxiAEhlcXa5JB3ugCTwsrBJLHcR7Cx7CMDdB+PvsA=
Subject key identifier: 0E:70:D5:AF:EF:9D:57:77:F4:FF:1E:EC:1F:BD:A9:7D:8D:F3:9B:7A
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 236271B6CB25EF7BF2D371918DCDCE6508826328
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3138372e302f32342d3234203d3e203331313033.roa
Signing time: Fri 31 May 2024 09:35:31 +0000
ROA not before: Fri 31 May 2024 09:30:31 +0000
ROA not after: Fri 30 May 2025 09:35:31 +0000
asID: 31103
IP address blocks: 95.169.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 13:20:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:62:71:b6:cb:25:ef:7b:f2:d3:71:91:8d:cd:ce:65:08:82:63:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: May 31 09:30:31 2024 GMT
Not After : May 30 09:35:31 2025 GMT
Subject: CN=0E70D5AFEF9D5777F4FF1EEC1FBDA97D8DF39B7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f8:60:55:c1:2b:3e:37:0d:21:df:97:ac:25:
54:db:34:9d:8c:3c:e4:6b:11:0d:84:49:e2:75:98:
aa:c1:b2:7f:db:9c:92:c4:0c:56:2a:6e:49:32:a8:
e5:dd:e6:e8:f2:3d:ba:42:b8:bf:4d:2e:56:ba:7f:
a8:83:27:bd:6f:c9:99:b2:08:c8:64:39:b8:2c:7e:
f3:3a:44:0a:14:c7:1f:cc:63:96:46:b1:ef:d6:a7:
40:7f:37:2d:b4:60:26:bf:42:63:10:83:cd:44:15:
91:2b:3a:17:30:ec:49:5d:47:62:c8:8b:93:e5:ab:
5c:ef:5a:53:36:18:fc:db:91:4e:6f:8a:bf:17:03:
17:6b:39:2f:7b:6f:f1:3e:02:8f:05:29:16:10:62:
4f:8e:27:6a:f5:23:16:f5:ec:62:b4:67:60:47:c6:
27:bd:e4:c8:71:46:67:0a:84:0c:05:29:53:e3:95:
63:a1:64:22:66:46:07:cc:85:07:89:95:c0:52:36:
49:34:0a:d7:60:7b:f4:02:e7:26:cd:dc:d1:9a:42:
92:35:dc:c0:55:8a:1d:f0:78:d1:ae:86:15:30:31:
a2:01:5a:3f:65:01:0b:38:de:37:b6:7c:75:18:94:
73:d8:a2:4c:7c:4f:3e:5a:21:81:b8:da:3e:b6:76:
51:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:70:D5:AF:EF:9D:57:77:F4:FF:1E:EC:1F:BD:A9:7D:8D:F3:9B:7A
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/39352e3136392e3138372e302f32342d3234203d3e203331313033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.187.0/24
Signature Algorithm: sha256WithRSAEncryption
16:7f:85:36:c8:26:4c:1e:f2:67:7d:ad:19:64:43:7b:8a:15:
6a:87:6a:a6:0d:91:a8:ee:8c:97:07:bc:b2:93:19:3e:12:90:
0f:01:9d:1c:6d:70:43:50:a4:99:a6:6b:8d:4b:da:92:f7:ef:
eb:24:a9:11:e3:58:37:10:14:14:cd:cc:a6:54:7b:67:0f:e9:
26:dd:4d:ef:44:9f:d5:b1:96:5a:46:96:08:5c:37:74:56:aa:
ae:b5:fb:88:65:4d:0d:31:1e:71:9d:45:76:8f:37:25:6c:3e:
3f:00:c8:ba:d3:d8:5b:b7:35:9a:80:2b:1c:9f:7e:49:db:9f:
bc:db:04:46:18:35:45:00:c8:17:ec:2a:9f:21:64:36:98:27:
62:f4:2a:2c:52:7b:ac:13:24:57:32:01:5c:ca:31:eb:44:06:
61:e0:44:ef:24:1e:31:3b:75:7f:14:4b:78:6e:26:d7:27:61:
c1:ef:fd:02:a7:9a:d0:5e:cb:80:af:77:2d:75:db:16:2d:89:
6f:e0:d9:5b:3b:df:f3:73:4b:d1:fe:cd:2f:0f:ef:a5:5d:5f:
7b:ae:a1:30:83:ef:17:c4:bf:9c:b1:77:7c:d2:4f:ec:66:77:
ea:2d:ba:32:4d:30:c2:19:d3:8d:ac:54:69:54:9b:7a:bf:bb:
de:8b:cc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 19:07:06 2024 by rpki-client on console-ams.rpki-client.org