Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231322e322e3233372e302f32342d3234203d3e20323135313031.roa
File: 3231322e322e3233372e302f32342d3234203d3e20323135313031.roa (raw, json)
Hash identifier: 8zyEhe3DzR4wvw89yPA3zilN7HikzN3Zq+DDXwD14vA=
Subject key identifier: CD:89:50:26:38:B4:52:7F:00:88:93:FF:E1:59:DD:C4:6B:2F:FD:C7
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 0BFDC63A3106F2DA215D99768C32FD10318B13A3
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231322e322e3233372e302f32342d3234203d3e20323135313031.roa
Signing time: Wed 14 Aug 2024 14:57:41 +0000
ROA not before: Wed 14 Aug 2024 14:52:41 +0000
ROA not after: Wed 13 Aug 2025 14:57:41 +0000
asID: 215101
IP address blocks: 212.2.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:fd:c6:3a:31:06:f2:da:21:5d:99:76:8c:32:fd:10:31:8b:13:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Aug 14 14:52:41 2024 GMT
Not After : Aug 13 14:57:41 2025 GMT
Subject: CN=CD89502638B4527F008893FFE159DDC46B2FFDC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:46:e7:7d:ca:00:c7:7b:7a:21:75:51:c6:2d:
e0:9e:d4:25:3b:a4:81:b7:b9:54:c9:6f:2d:d1:87:
77:63:61:b0:7e:a6:0a:98:b8:df:e1:cd:86:d1:94:
94:35:08:7f:a6:03:38:aa:17:e0:0e:18:e1:ae:10:
02:60:fe:9c:fc:a2:a3:43:67:a7:fd:50:68:bc:de:
6f:c3:6e:31:17:8d:4e:22:21:05:95:4a:fc:3b:27:
77:46:1e:57:8c:70:f6:b7:32:56:49:97:8c:d1:42:
28:79:c7:54:b4:0f:22:9f:92:3f:e4:70:6b:e8:19:
bc:34:36:10:17:54:ae:8b:d5:07:0c:9b:49:2c:8c:
78:cc:e5:e7:02:2e:7f:00:de:80:f5:ae:81:35:b2:
fe:88:20:54:83:1d:3f:a2:0d:ed:72:29:50:a9:2f:
ca:2e:ef:c5:1c:20:e0:9e:ca:22:2c:11:d5:41:46:
30:8d:85:2f:63:b3:84:2f:18:45:4c:31:f6:c7:82:
14:a8:ba:3f:6f:73:99:05:66:81:f3:de:f3:41:26:
c8:01:da:99:00:58:d1:41:50:a8:35:a4:91:a5:a1:
ae:5e:1c:4f:b8:cb:98:94:b6:bb:89:24:78:a0:e8:
d8:2a:43:89:f1:f9:4b:25:af:e7:45:9c:68:7e:0b:
9f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:89:50:26:38:B4:52:7F:00:88:93:FF:E1:59:DD:C4:6B:2F:FD:C7
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/3231322e322e3233372e302f32342d3234203d3e20323135313031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.2.237.0/24
Signature Algorithm: sha256WithRSAEncryption
04:51:dc:6d:bc:32:1a:16:c8:4e:63:52:dd:58:0d:a8:1d:79:
b2:30:f1:f5:28:e3:b7:2a:96:25:82:62:5f:c9:1d:d3:8e:10:
3e:b5:bd:f7:a8:42:6d:33:cf:9b:0e:d9:75:a9:63:ad:6d:a5:
cc:da:5b:0f:28:70:5d:bc:91:ec:e2:26:b9:c6:c7:03:e4:d8:
08:b1:4d:41:7c:5f:4d:15:0f:96:9f:99:22:30:c8:b2:04:f8:
db:15:ab:b6:d6:bd:f7:6d:7b:ed:00:e4:eb:74:da:9f:e8:67:
44:8c:6a:f5:dd:6d:d4:9e:d2:e5:de:c6:27:3e:4b:92:ca:6b:
f2:ff:c3:06:5f:cd:56:28:34:79:61:8a:c4:90:66:73:ed:39:
72:5e:74:49:37:bf:1a:1f:01:e8:05:ad:5f:d1:98:a3:e8:9d:
80:90:23:5d:8a:56:60:61:19:ce:41:04:4b:06:ce:3a:fd:0c:
0e:51:73:9f:b0:1e:4b:79:79:48:74:5a:9e:82:85:12:85:c9:
a8:12:7f:13:cf:75:fb:81:65:7d:0d:15:7a:2a:93:1f:69:bb:
69:d0:52:7a:c7:00:0f:c9:84:36:7b:db:e5:a9:07:2d:c4:ed:
f4:0f:20:8e:8a:d6:96:f5:6a:ac:7b:9a:47:22:aa:8f:79:a7:
07:a6:1f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:03:46 2024 by rpki-client on console-fra.rpki-client.org