Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e32322e32362e302f32342d3234203d3e20313336373837.roa
File: 3139332e32322e32362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 5UPEEBO1KTOqD/jRhEJbbn1vVU03y1evvDfOwpE51UM=
Subject key identifier: 75:D0:A8:8C:2C:BD:25:FF:9F:F1:66:BE:15:BB:D4:A3:09:6B:B9:BC
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 42BBA662836147E4C15AF619EFA9440C2B4D39ED
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e32322e32362e302f32342d3234203d3e20313336373837.roa
Signing time: Sat 02 Mar 2024 21:54:38 +0000
ROA not before: Sat 02 Mar 2024 21:49:38 +0000
ROA not after: Sat 01 Mar 2025 21:54:38 +0000
asID: 136787
IP address blocks: 193.22.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 16:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:bb:a6:62:83:61:47:e4:c1:5a:f6:19:ef:a9:44:0c:2b:4d:39:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Mar 2 21:49:38 2024 GMT
Not After : Mar 1 21:54:38 2025 GMT
Subject: CN=75D0A88C2CBD25FF9FF166BE15BBD4A3096BB9BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c5:54:66:b7:1c:8d:64:4a:1a:4a:48:82:00:
04:b3:26:78:e4:66:cf:ac:3c:73:df:1a:1e:7f:2e:
10:4b:fb:ee:80:ca:aa:01:48:58:f1:8d:76:aa:e5:
a2:5d:65:4b:fb:d4:c3:09:b5:2f:57:52:e8:fc:cd:
53:76:84:46:c0:f2:a1:26:6f:b0:47:45:78:fe:58:
d3:da:67:ff:9a:c3:1e:6d:c4:1b:fd:29:8f:e2:3e:
01:15:80:bd:91:ec:1f:69:50:49:fc:b5:ad:f1:8b:
d5:b0:bb:38:68:79:30:76:fb:dd:d1:80:88:9e:43:
de:da:2e:0d:ad:2b:ad:5d:db:55:23:3e:cf:c0:e7:
7d:0c:a3:3b:e3:7e:9f:06:ea:6d:6c:2e:a3:e6:e3:
3f:76:4f:88:55:c1:8d:d7:c3:c9:4f:d7:5f:4b:2f:
75:97:d5:b8:43:6e:42:19:3e:ac:40:dd:07:c5:15:
ce:f1:df:74:8c:47:8c:e7:aa:2a:d1:aa:dd:05:ca:
5a:17:7a:b0:27:cf:65:26:44:99:c2:46:ec:b8:25:
5e:e1:1a:2c:8d:d7:c1:26:b8:26:e1:34:6c:d8:6d:
b5:50:df:86:dd:3b:b7:4f:fd:75:13:96:20:6a:41:
be:4b:57:6d:66:c1:9c:71:9b:a3:3d:70:26:01:ba:
a2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D0:A8:8C:2C:BD:25:FF:9F:F1:66:BE:15:BB:D4:A3:09:6B:B9:BC
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e32322e32362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.26.0/24
Signature Algorithm: sha256WithRSAEncryption
63:fb:76:86:d2:31:98:dc:9e:92:6b:5a:5c:11:ff:35:76:6c:
37:5e:6a:4c:ed:f5:61:cd:c8:9a:20:48:1b:aa:58:63:58:6a:
3f:3f:c2:93:27:2a:ca:bd:53:75:71:02:42:ba:af:04:eb:fa:
7a:c9:a6:7b:17:aa:75:2d:99:5d:be:5f:3e:f0:c0:34:fb:dc:
04:2f:b9:98:1c:03:63:e4:df:cf:63:79:88:ac:8f:c6:c5:01:
7c:11:09:a2:6c:20:59:8c:5b:af:45:80:e7:f9:82:02:41:0a:
d1:d0:18:6f:73:7b:c3:b0:8d:0f:b5:d0:7b:7b:41:e5:08:bb:
ab:55:f7:1a:e2:7b:54:32:4f:7c:31:37:c5:bc:64:40:ac:2f:
87:ab:a8:e1:d8:a3:10:96:96:9d:17:d6:56:2b:ea:54:08:f8:
4d:87:7d:92:50:2a:ad:c4:66:d3:ab:68:a7:9a:56:13:07:db:
6f:db:fb:aa:6d:a7:69:18:70:81:c6:b0:f4:12:81:9b:10:aa:
9a:4a:e2:62:17:cc:9c:9e:d9:8d:dd:59:80:ff:06:f7:ff:39:
be:1e:ab:d1:d2:e9:e5:f4:fe:56:29:57:d3:ca:72:37:f8:d8:
9f:54:b9:f9:16:fb:15:30:8a:83:c7:f9:93:6b:7f:2d:4e:b6:
f8:3f:4e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 19:21:52 2024 by rpki-client on console-ams.rpki-client.org