Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e3134322e3230332e302f32342d3234203d3e20313336373837.roa
File: 3139332e3134322e3230332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: zakRx6PUpjYXMTWRYvsIRcIVozYj0l8pz3LcoITkXsI=
Subject key identifier: 23:BE:F9:7F:33:28:DC:B8:08:2A:5C:C0:8E:1A:B0:66:C3:27:5B:67
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 789755ECA37EDE81717772479B99D1E2A95E5D9B
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e3134322e3230332e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 19 Jun 2023 16:33:46 +0000
ROA not before: Mon 19 Jun 2023 16:28:46 +0000
ROA not after: Mon 17 Jun 2024 16:33:46 +0000
asID: 136787
IP address blocks: 193.142.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 16:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:97:55:ec:a3:7e:de:81:71:77:72:47:9b:99:d1:e2:a9:5e:5d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Jun 19 16:28:46 2023 GMT
Not After : Jun 17 16:33:46 2024 GMT
Subject: CN=23BEF97F3328DCB8082A5CC08E1AB066C3275B67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:98:11:24:aa:76:2f:49:44:44:e2:85:c0:cf:
85:a3:18:6c:a7:a5:c9:8d:db:41:b4:eb:ab:51:10:
f2:fd:fc:e4:62:1d:c1:56:5f:23:97:09:aa:38:74:
8a:c4:7c:c1:ff:9e:ca:88:25:1b:68:d6:99:8e:95:
20:16:59:11:56:bb:33:74:06:28:dd:75:d2:ba:4f:
61:c0:61:45:d7:03:5d:4c:02:96:3d:35:c0:27:09:
21:0a:12:b9:af:c6:37:c9:6b:85:e9:e6:98:22:74:
f7:0b:18:f5:46:9b:95:45:45:2b:3d:3f:4b:93:ac:
68:32:4d:2d:78:bd:97:e8:2e:2a:59:d8:77:8d:b8:
25:8d:81:bd:9f:c2:ac:ba:84:9f:a2:ef:7a:8e:27:
7c:69:b7:f5:d2:c1:c7:aa:2d:e1:0e:97:31:a3:71:
78:9e:6f:62:cd:6b:86:63:0c:f3:90:a7:4b:19:75:
68:e6:8e:e9:88:47:15:93:9d:7f:32:80:52:f1:44:
78:a1:b4:27:8e:bd:49:94:04:4c:e7:12:62:38:3d:
b1:9d:ff:02:22:9d:52:83:0f:7c:3b:3a:78:91:6a:
a2:79:8b:da:49:5f:72:f6:c1:a9:0e:e5:bf:ca:b1:
2c:70:3b:5b:08:bf:a6:e1:4a:a7:ac:98:40:f0:8a:
5f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BE:F9:7F:33:28:DC:B8:08:2A:5C:C0:8E:1A:B0:66:C3:27:5B:67
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e3134322e3230332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.203.0/24
Signature Algorithm: sha256WithRSAEncryption
63:7f:6e:e4:81:88:61:ba:4b:6a:50:35:03:59:9c:95:ce:d0:
03:4e:d7:73:71:57:12:51:56:c9:43:62:2a:17:4d:22:d7:c9:
d7:4b:94:a1:0f:25:30:b7:63:3c:8c:cc:68:04:f1:ef:6a:d9:
76:c0:15:dc:13:31:dc:8d:54:f0:71:3e:26:b6:f8:0b:e8:50:
2d:8d:2b:3a:b5:7f:5b:27:15:38:50:b6:c2:f4:ec:2b:8f:67:
54:18:8b:27:50:da:7e:7f:51:2a:71:c1:70:25:09:d6:43:46:
f8:a8:a0:b3:ff:74:0b:86:77:a1:9a:9c:0f:8e:27:79:1a:c0:
e0:2a:a9:02:a1:a9:58:c1:b6:36:ed:9e:d5:0c:1e:69:0a:67:
dc:de:3a:b2:b9:ba:d1:3f:21:87:67:fe:3a:f8:72:02:57:29:
fe:f1:87:7d:eb:4d:72:78:ab:b2:66:d1:f7:da:dd:75:7b:42:
78:c9:03:7a:b9:6b:c0:82:e0:a0:f4:ad:96:ac:83:ec:e6:e8:
78:ee:a5:cf:fe:49:f6:63:11:60:5f:4d:03:1f:49:b3:07:66:
c4:f1:96:2c:70:6d:0e:89:2a:7e:47:57:f8:55:09:ec:51:6e:
4b:04:c9:01:2a:f1:fd:cd:38:56:41:eb:25:88:38:6d:21:71:
bf:04:76:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 19:21:52 2024 by rpki-client on console-ams.rpki-client.org