Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39372e302f32342d3234203d3e203434383033.roa
File: 34352e3133322e39372e302f32342d3234203d3e203434383033.roa (raw, json)
Hash identifier: 0LFgwl/e7Rmd5qoYgiiZAm6YUY/8xI+9Ni8jGH6tNRQ=
Subject key identifier: 03:81:1C:8F:7A:92:83:DF:4C:C0:A1:EE:B9:B0:BA:3E:82:C3:09:15
Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial: 51DB3F216A36506647D47EF58B595605FBE249AF
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39372e302f32342d3234203d3e203434383033.roa
Signing time: Sun 03 Mar 2024 08:43:38 +0000
ROA not before: Sun 03 Mar 2024 08:38:38 +0000
ROA not after: Sun 02 Mar 2025 08:43:38 +0000
asID: 44803
IP address blocks: 45.132.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:db:3f:21:6a:36:50:66:47:d4:7e:f5:8b:59:56:05:fb:e2:49:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
Validity
Not Before: Mar 3 08:38:38 2024 GMT
Not After : Mar 2 08:43:38 2025 GMT
Subject: CN=03811C8F7A9283DF4CC0A1EEB9B0BA3E82C30915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b4:ac:24:8d:bb:e9:af:e3:18:01:56:f6:12:
8a:0d:ba:c5:b3:ad:b4:b9:3f:07:3f:87:2f:64:5c:
17:e9:5f:aa:96:01:3b:b0:53:d3:55:57:f0:1d:75:
66:a0:cb:01:06:5d:5d:a1:70:e5:62:3b:3e:f7:3c:
23:6f:a0:35:8c:bd:00:6d:b9:95:0f:b9:69:1a:49:
92:27:54:da:9a:53:85:14:60:9f:3b:25:81:45:37:
20:6b:cb:e3:18:21:70:ee:bd:20:58:14:69:3b:90:
7b:20:75:eb:5e:f0:13:b8:78:87:1b:1d:b5:41:f7:
e8:47:92:8a:5b:9d:b7:77:f4:97:67:34:b2:fb:ce:
77:e2:24:33:4a:6a:88:0d:96:1d:7b:e6:5d:8d:7b:
c9:86:97:98:85:9f:6f:e2:a0:6f:ac:87:22:6c:f5:
2a:15:70:59:0f:51:c2:12:79:d2:73:52:06:01:9b:
da:99:a3:54:da:05:75:3d:07:6b:8f:bc:e4:47:54:
c3:5b:51:df:2e:d6:c7:70:1f:44:10:be:1e:8e:99:
45:0d:02:e9:bd:f0:a2:b2:ff:b4:b2:6f:4a:da:cf:
ff:41:66:89:69:3d:81:76:a0:53:4c:a5:d6:9a:6a:
be:20:ff:43:ec:83:5b:c7:df:7f:bf:5e:6d:a9:fb:
a1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:81:1C:8F:7A:92:83:DF:4C:C0:A1:EE:B9:B0:BA:3E:82:C3:09:15
X509v3 Authority Key Identifier:
keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3133322e39372e302f32342d3234203d3e203434383033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.97.0/24
Signature Algorithm: sha256WithRSAEncryption
02:c7:73:35:b2:a3:1d:df:01:3e:d4:64:6a:4d:c7:10:2a:28:
57:e1:2b:38:5c:61:b6:91:9f:79:d4:4a:d8:73:f6:3a:08:fa:
70:dd:62:bd:0c:08:78:1e:77:08:d2:49:1e:26:d5:1f:c0:27:
23:98:2e:9f:29:ee:cb:93:ec:7c:6e:9f:2e:1f:3b:8c:02:df:
be:a2:1c:57:d6:2e:57:53:28:b4:ba:3f:ff:b0:9e:24:de:04:
0b:26:34:58:97:dc:e8:50:af:05:46:7c:52:ce:e3:8f:50:01:
38:7c:e7:fd:d9:e8:ee:e5:4e:44:05:41:98:c8:b9:37:fe:1a:
72:97:d8:f0:85:3a:b5:3a:a5:1d:97:b3:b2:5d:a1:9c:35:ca:
08:1f:c3:cf:bc:7e:3b:b7:7d:15:44:02:e2:73:17:ac:84:cf:
95:21:7f:a6:3e:2d:cb:24:b6:b5:f5:4d:7e:2d:b9:37:83:b0:
8e:b4:bb:6d:43:5e:05:08:12:39:49:6a:ca:ca:d0:2a:e5:a4:
d3:31:ae:5d:36:4e:c1:68:8e:9c:04:09:33:10:37:f2:a4:28:
25:32:0a:3e:8f:b8:0d:dd:34:57:e9:e3:73:73:5a:0f:42:a6:
da:81:eb:df:fa:dc:0b:17:35:4f:e3:a2:e7:0d:b3:3d:e8:3b:
d3:0f:4f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 08:34:13 2024 by rpki-client on console-fra.rpki-client.org