Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e32322e3135332e302f32342d3234203d3e20323034313730.roa
File: 3139332e32322e3135332e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier: BqeCDjqL9FXWIRNySKeNmDQxgNicbzL6+DUvDNcibx4=
Subject key identifier: 75:A3:45:69:53:76:09:B9:43:DC:7C:60:66:5B:D2:11:25:9B:E0:81
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 1009F232C4037BABCAC4A02B64642D32499D86FA
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e32322e3135332e302f32342d3234203d3e20323034313730.roa
Signing time: Tue 25 Jun 2024 21:47:27 +0000
ROA not before: Tue 25 Jun 2024 21:42:27 +0000
ROA not after: Tue 24 Jun 2025 21:47:27 +0000
asID: 204170
IP address blocks: 193.22.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:09:f2:32:c4:03:7b:ab:ca:c4:a0:2b:64:64:2d:32:49:9d:86:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Jun 25 21:42:27 2024 GMT
Not After : Jun 24 21:47:27 2025 GMT
Subject: CN=75A34569537609B943DC7C60665BD211259BE081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f7:e2:bb:39:00:a6:ab:6c:a1:e2:51:13:db:
66:54:8a:65:72:c2:8b:63:a0:da:40:db:38:8e:62:
ae:ce:73:bd:85:0c:e7:a1:a7:7c:8c:d2:58:7d:cf:
95:58:68:42:d4:23:4d:f3:b5:d0:94:0d:91:1b:73:
fe:cd:98:e0:f1:29:1d:dd:fe:8e:95:18:b6:f5:44:
44:c5:e0:f0:92:bf:84:e7:ce:37:16:2a:4e:2a:7c:
06:fe:b9:5c:f0:cb:48:90:2e:2b:8d:53:64:90:41:
0e:44:48:eb:59:06:39:09:a3:54:80:63:27:53:25:
4e:28:32:b5:2b:10:a4:a6:26:14:d9:af:a0:07:5c:
2f:b3:c2:08:a6:d6:ee:a7:f3:73:12:04:fc:73:ee:
f0:ba:85:0b:96:e9:63:2f:44:a4:8b:ab:e2:fe:be:
e0:aa:5f:8d:b9:bf:08:d0:90:56:af:a2:6e:77:b5:
21:b0:1a:b4:8a:26:e8:4b:aa:ca:fa:cb:f6:5a:4a:
2f:b0:e2:b2:1a:df:59:f6:02:58:04:3b:73:67:33:
db:02:ac:d3:6f:72:64:db:18:a6:27:bf:6f:38:ad:
f0:9d:bd:6d:c9:ea:38:5d:f2:1e:75:20:a5:09:b5:
6a:14:03:57:9b:6a:6b:c7:f7:a4:ad:b1:72:a4:65:
d2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A3:45:69:53:76:09:B9:43:DC:7C:60:66:5B:D2:11:25:9B:E0:81
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e32322e3135332e302f32342d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.153.0/24
Signature Algorithm: sha256WithRSAEncryption
01:f6:d4:8c:c5:dc:b5:38:a3:aa:26:7a:41:a9:79:d0:76:0a:
d6:88:13:e1:f8:d2:47:ee:4e:f2:f0:b7:67:34:ce:6d:33:7e:
ad:6f:81:e1:a7:9d:63:a1:c5:3e:dd:62:7f:c8:c2:4d:54:cf:
85:0f:20:13:14:7a:16:fc:57:63:ed:4b:52:63:1c:55:40:a2:
23:d4:0b:2c:0c:04:63:da:0e:b7:85:b5:34:ef:5f:58:3c:89:
0f:dc:10:1f:05:b9:23:20:1b:5f:12:2d:3b:3d:88:72:1a:01:
7a:8b:02:41:88:f9:17:ba:58:92:82:ec:43:78:48:05:ae:dc:
eb:31:16:cb:f5:9d:2c:cc:f3:5f:9d:75:e8:3a:63:11:2f:a2:
5a:93:e4:10:c0:89:52:3b:aa:8b:62:3e:d1:84:fc:8a:a1:84:
f7:d7:8f:6f:e6:14:6b:f5:b1:f8:90:d3:f5:be:b4:84:e3:6f:
6b:d0:d4:5b:70:3c:d3:5b:ad:f6:b3:0f:db:5c:6d:55:c5:51:
6c:9e:b0:cf:db:78:19:ab:18:36:20:9a:73:ba:f5:2f:d2:c1:
9f:56:9a:10:7a:cc:5c:db:6b:f0:45:d2:8f:e6:0a:e7:76:b8:
99:90:10:17:71:be:0b:a0:b3:eb:62:98:72:1b:4a:c1:4f:05:
b8:16:f5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:07:02 2024 by rpki-client on console-fra.rpki-client.org