Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136372e38382e33362e302f32322d3234203d3e203437353833.roa
File: 3136372e38382e33362e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: pceyeN81MQMwjWJIIjbFX1Ur22aasj3Dxrfj7nJWBXo=
Subject key identifier: 60:45:C9:59:7C:89:4A:AE:F0:D8:46:A6:B2:69:80:6B:33:23:7A:19
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 2FFF7E9F318C1ADFBEE0F3EA1D83E53740695463
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136372e38382e33362e302f32322d3234203d3e203437353833.roa
Signing time: Thu 20 Jun 2024 16:00:41 +0000
ROA not before: Thu 20 Jun 2024 15:55:41 +0000
ROA not after: Thu 19 Jun 2025 16:00:41 +0000
asID: 47583
IP address blocks: 167.88.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:ff:7e:9f:31:8c:1a:df:be:e0:f3:ea:1d:83:e5:37:40:69:54:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Jun 20 15:55:41 2024 GMT
Not After : Jun 19 16:00:41 2025 GMT
Subject: CN=6045C9597C894AAEF0D846A6B269806B33237A19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:08:9a:19:c1:6b:e1:eb:d4:63:09:37:12:e6:
48:29:0f:24:ef:8a:59:e9:3d:e1:2d:dd:d2:ab:ec:
5e:07:bf:79:69:9c:ed:7a:cf:86:f9:99:cc:ef:79:
95:5a:ac:90:2b:41:a0:5d:a7:9a:79:1a:08:60:4a:
bf:15:12:83:12:85:fe:6b:a1:d2:64:cf:76:d1:cc:
eb:19:47:10:56:ad:22:60:53:83:b8:2d:ff:ed:94:
6b:2b:38:07:00:71:ae:e7:3d:16:ee:51:c8:a5:d4:
95:5e:1f:5e:ab:7a:c4:b8:5b:b3:dd:a6:b0:18:10:
00:5e:08:67:8f:5d:7c:79:0c:0a:ea:1f:50:d7:ed:
19:0f:26:f5:12:43:4b:73:c5:b7:bf:1e:9d:72:93:
d4:e3:1e:4d:47:02:94:48:67:3b:83:f3:ec:e2:55:
44:40:7b:cb:4a:de:b6:06:cf:d1:24:f5:3f:ce:eb:
70:7c:92:aa:11:f4:04:23:3a:cf:3d:85:5a:ee:83:
40:77:e3:c6:db:e4:1b:07:f9:98:b8:8b:5a:48:99:
ee:15:2f:61:06:3c:c7:de:38:fd:a6:f1:77:15:39:
ad:94:dd:59:47:20:14:c2:11:f7:bb:0b:be:29:f0:
8d:1f:af:1f:ef:6e:8e:8f:3f:34:c4:85:13:af:06:
47:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:45:C9:59:7C:89:4A:AE:F0:D8:46:A6:B2:69:80:6B:33:23:7A:19
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3136372e38382e33362e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.88.36.0/22
Signature Algorithm: sha256WithRSAEncryption
d1:a5:1a:8e:6d:ad:85:00:a5:99:5c:be:cb:99:a7:7a:55:27:
11:a3:c5:25:91:df:11:66:64:24:cb:1e:bc:d3:73:ad:e3:8e:
57:b9:e3:0a:90:7f:09:17:33:4f:f1:f7:06:af:fc:8e:b7:5e:
23:ad:2c:ea:b7:aa:97:b1:42:ea:11:4a:80:3a:d1:54:13:fe:
0d:48:98:fa:2d:1b:d3:0b:ae:bc:1d:0e:56:54:ed:8d:23:b7:
24:97:fa:22:34:18:0c:f3:63:d7:e7:b8:26:40:ef:f8:b1:7d:
b2:6b:77:81:3d:d8:58:9d:51:1b:e4:e0:45:1a:9c:41:d5:84:
04:50:21:18:8d:53:94:75:ac:fd:d7:ec:06:b3:61:52:f0:ee:
e9:a6:79:29:44:29:a1:f1:d6:d1:3c:e8:fc:f9:65:38:46:09:
cf:f6:b4:43:66:f4:fc:59:bb:78:8c:86:74:17:d4:0d:c0:ea:
6b:dd:0d:59:bb:bb:de:51:af:cb:02:7b:41:81:de:0f:37:f3:
70:21:dc:4b:6e:37:34:d6:2a:e8:c3:49:e4:94:e4:20:bc:1f:
1a:99:03:14:28:ab:9c:09:33:2d:76:b0:ac:9a:55:b5:80:d4:
c3:3d:d9:a3:c9:23:af:d8:95:91:73:69:f9:57:e7:89:7b:05:
56:f1:4f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:44 2024 by rpki-client on console-ams.rpki-client.org