Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e3138372e3132392e302f32342d3332203d3e203531313637.roa
File: 3139332e3138372e3132392e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: CHy3CEz/R88dnaI5tVV1ANADJ54hQxTshMfjo8wweXM=
Subject key identifier: 86:D6:D4:6B:28:F6:8C:50:5C:D2:0B:DC:DD:25:06:A1:15:4E:EB:77
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 74930096A9402DE7F72D78705541172A98C2D08C
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e3138372e3132392e302f32342d3332203d3e203531313637.roa
Signing time: Mon 26 Feb 2024 08:52:47 +0000
ROA not before: Mon 26 Feb 2024 08:47:47 +0000
ROA not after: Mon 24 Feb 2025 08:52:47 +0000
asID: 51167
IP address blocks: 193.187.129.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:93:00:96:a9:40:2d:e7:f7:2d:78:70:55:41:17:2a:98:c2:d0:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Feb 26 08:47:47 2024 GMT
Not After : Feb 24 08:52:47 2025 GMT
Subject: CN=86D6D46B28F68C505CD20BDCDD2506A1154EEB77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:93:96:f5:3b:0c:73:20:ae:ca:29:a8:02:c2:
37:88:f8:c8:3c:6b:77:8e:f3:15:eb:ad:0d:8e:5e:
f0:17:98:bc:8b:6b:88:17:9a:b3:77:d5:3d:b5:8b:
0f:92:8f:94:26:b9:db:dc:a3:26:1f:cd:b8:a1:8a:
f7:19:f5:cd:5a:9e:7c:52:ef:98:05:95:d6:bc:73:
80:8e:aa:68:c6:e0:85:24:39:fa:c6:b8:b2:d5:71:
84:62:70:7f:6b:9e:c3:f3:8f:b8:ca:78:87:ac:2a:
3c:b1:20:b5:a3:31:fc:8b:b5:20:01:01:19:0a:16:
50:46:be:0e:a2:c9:02:68:42:79:2a:d5:d0:f1:41:
a9:38:33:ff:3e:bc:b3:d6:87:27:fb:ad:1f:e9:1e:
83:b4:d1:8d:8b:c0:40:7f:4e:1a:c7:fe:b9:db:df:
98:f3:14:57:36:52:e0:7b:7c:ab:c2:37:5c:4d:46:
b8:40:28:22:6a:90:da:ab:ad:10:7c:d2:eb:92:91:
c4:52:68:61:df:27:09:7d:47:07:5a:64:ac:3b:92:
66:20:20:be:27:be:4d:1a:6c:8f:f0:e7:16:43:32:
c5:99:95:26:bf:c4:03:0a:1e:c8:79:a9:53:fd:b3:
c4:17:b4:81:7b:97:8c:31:fe:bb:91:ae:89:b1:11:
b5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D6:D4:6B:28:F6:8C:50:5C:D2:0B:DC:DD:25:06:A1:15:4E:EB:77
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e3138372e3132392e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.129.0/24
Signature Algorithm: sha256WithRSAEncryption
99:fa:96:2d:11:1b:f3:76:37:35:25:83:e3:95:e5:04:11:96:
29:bb:f3:5f:d0:2b:9b:da:b4:eb:b6:2c:ed:13:e0:c3:fc:a8:
bf:70:74:ef:6f:95:e0:3b:1b:02:e9:d9:3f:51:39:91:30:d3:
58:1a:89:34:0c:41:97:34:6e:a9:7c:3f:50:ad:c3:78:ad:fd:
6a:c8:f2:a3:9b:e0:f7:54:29:10:8b:f0:c3:5a:4c:da:d9:5f:
5e:98:4f:09:43:85:58:9e:0c:18:a6:b6:89:f2:3a:6f:f6:f5:
83:be:49:41:40:ca:8f:17:e6:01:ae:b7:a3:18:4c:e9:84:ee:
78:d9:36:1a:c6:74:8f:75:b5:bf:4e:e7:05:db:2c:9a:21:25:
ec:e9:98:88:58:2b:c4:56:f7:06:94:7e:e3:23:04:5d:94:53:
e6:aa:9f:70:36:a2:f3:47:89:d9:07:ad:ac:3e:55:8c:2f:dd:
a4:44:87:f8:86:b3:72:f1:74:c2:94:42:01:c7:43:81:9c:74:
b1:ce:15:28:54:be:7f:29:07:c2:8a:3f:84:7f:06:e3:7f:f9:
e3:73:49:6f:0b:bb:9b:12:c1:b4:72:29:d0:2c:45:4b:52:62:
67:99:5b:3d:c0:85:32:67:fb:f0:1f:5a:05:f1:d9:2a:46:c5:
27:32:0a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 08:54:17 2024 by rpki-client on console-ams.rpki-client.org