Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3138352e39372e3134342e302f32332d3234203d3e203437353833.roa
File: 3138352e39372e3134342e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: 49WBnWCtHXazFmIRkkN9VgTFMrEdobSoFzJsCB+Shhk=
Subject key identifier: 33:E8:17:EB:40:DF:0B:35:69:84:6C:F3:F5:1A:D7:6B:C1:AD:C8:FB
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 3846D1E368A67514DF181DEDA7D431B45BD40219
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3138352e39372e3134342e302f32332d3234203d3e203437353833.roa
Signing time: Thu 13 Jun 2024 10:41:28 +0000
ROA not before: Thu 13 Jun 2024 10:36:28 +0000
ROA not after: Thu 12 Jun 2025 10:41:28 +0000
asID: 47583
IP address blocks: 185.97.144.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:46:d1:e3:68:a6:75:14:df:18:1d:ed:a7:d4:31:b4:5b:d4:02:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Jun 13 10:36:28 2024 GMT
Not After : Jun 12 10:41:28 2025 GMT
Subject: CN=33E817EB40DF0B3569846CF3F51AD76BC1ADC8FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:73:cb:8d:90:2e:81:cf:f0:03:02:cb:c1:71:
ca:09:1a:a6:06:7a:b0:8c:6a:d3:32:33:d8:aa:fb:
ce:0c:da:cc:56:9d:48:c9:f1:5f:80:52:98:61:22:
06:e3:2a:84:bc:38:be:a0:1b:24:60:d0:56:57:ae:
ea:db:66:16:6f:da:20:af:81:36:cf:4e:cc:3a:66:
15:aa:05:aa:95:81:30:14:bf:47:c1:19:1f:0e:b9:
91:83:55:60:98:f8:76:8a:ee:11:20:97:c1:31:68:
14:73:84:64:9e:81:36:54:13:f7:f2:8c:4f:f2:94:
13:c0:6d:73:69:d9:97:0a:cd:29:bb:51:b4:39:43:
28:39:30:ba:01:8e:34:03:f2:d1:b9:82:be:6d:6f:
b3:53:46:19:e7:38:ae:5a:df:75:47:0a:78:1c:54:
a7:5b:58:06:7e:93:dc:8d:74:f8:d1:63:c4:22:65:
30:6a:5b:ad:b0:60:b1:d7:b7:49:42:2a:27:ad:4f:
9a:15:f6:39:d8:58:b7:7b:b5:50:f9:27:6c:f7:0c:
f3:c7:9b:28:f0:2f:c7:dd:c4:0b:8a:21:1c:2e:a8:
14:2a:06:f9:1b:f5:6b:4a:a9:05:b8:b2:57:ab:22:
0e:7c:13:22:6d:9f:63:1f:d4:c7:f8:75:98:eb:4d:
d5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E8:17:EB:40:DF:0B:35:69:84:6C:F3:F5:1A:D7:6B:C1:AD:C8:FB
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3138352e39372e3134342e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.97.144.0/23
Signature Algorithm: sha256WithRSAEncryption
30:31:ab:fc:89:d2:b9:16:68:07:55:52:f1:b2:fc:88:74:d2:
fc:fa:85:ad:04:01:18:6a:d0:89:c0:34:3c:98:e2:1c:15:46:
81:29:9e:d3:24:a8:a9:35:c9:99:94:55:8b:e7:ac:7c:52:5e:
88:77:1c:1d:b1:15:01:4e:b3:92:30:7b:71:dd:c7:64:21:85:
c5:f5:63:ed:66:0e:ff:f9:4c:44:64:68:84:b6:12:e8:d8:b6:
5e:6a:32:af:29:8f:3f:d1:2e:e5:18:04:8e:83:eb:53:61:d8:
8a:9c:38:40:50:16:b8:c4:eb:d4:13:44:3d:8a:86:49:df:2a:
82:33:95:98:43:43:a1:16:2f:67:38:c0:56:97:3c:46:81:bf:
00:e9:0d:6f:45:ef:3a:67:37:99:ca:ce:4d:93:be:b5:00:2b:
5d:ee:3e:1e:bf:0d:84:52:fd:0b:8b:53:05:a3:dd:9e:9f:e7:
9a:a5:b5:37:eb:ef:5f:22:85:91:2d:84:3c:26:6a:ba:7e:00:
12:50:63:5f:8e:70:dc:84:33:a2:4f:83:74:e0:f8:bf:5e:eb:
6b:91:0e:0d:28:8d:3b:13:fb:9c:2d:e0:f9:10:7b:50:ec:d0:
1b:63:17:e7:8e:78:65:fd:5e:de:56:42:80:4c:97:72:4d:27:
be:9e:f4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:44 2024 by rpki-client on console-ams.rpki-client.org