Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139342e33362e3138342e302f32332d3234203d3e203437353833.roa
File: 3139342e33362e3138342e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: mPiFw4ruKR8ud0/wox+xZtctOfJEPPIauc2QjXcxy/Y=
Subject key identifier: 33:5D:F8:92:0D:32:73:F3:0A:89:2B:82:C4:D1:3F:79:E0:7B:D2:C5
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 48ECAFFCAC0D6DAA0AB26A7D4E5167232DC4E34E
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139342e33362e3138342e302f32332d3234203d3e203437353833.roa
Signing time: Thu 04 Jul 2024 16:15:27 +0000
ROA not before: Thu 04 Jul 2024 16:10:27 +0000
ROA not after: Thu 03 Jul 2025 16:15:27 +0000
asID: 47583
IP address blocks: 194.36.184.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:ec:af:fc:ac:0d:6d:aa:0a:b2:6a:7d:4e:51:67:23:2d:c4:e3:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Jul 4 16:10:27 2024 GMT
Not After : Jul 3 16:15:27 2025 GMT
Subject: CN=335DF8920D3273F30A892B82C4D13F79E07BD2C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0a:18:ea:2a:b8:a6:a9:c7:c1:17:eb:63:c5:
f1:97:5e:f7:b7:ec:59:9f:e8:ef:20:08:23:5d:6d:
bf:be:97:43:c4:1e:ae:46:a5:9c:10:3d:5e:9f:f0:
49:fb:34:e4:f9:5e:4b:9f:99:30:1e:37:92:ba:cb:
48:60:98:56:ef:f7:8a:ea:cc:56:14:3c:fb:39:85:
68:e3:ed:ab:e3:75:cb:41:75:92:da:cd:d0:3e:7d:
56:cb:67:5c:7d:8f:07:a3:8d:94:0e:c4:22:23:92:
58:76:6d:d4:46:93:80:75:af:9c:86:b7:74:43:d0:
64:6b:87:50:ec:28:f4:ab:3b:01:50:65:ee:ad:c8:
f4:58:54:34:2f:7f:0b:76:43:3c:f1:e2:2e:2e:6c:
3e:5b:1f:7f:8b:3a:9f:d2:19:f0:28:4d:de:33:9d:
75:81:b2:86:03:76:81:68:7e:c8:df:16:da:06:84:
2e:86:ea:f0:78:f3:32:01:75:a2:3a:97:81:9c:f8:
09:0a:bf:4c:b2:70:6e:b5:74:76:56:87:7b:ef:32:
23:7c:e8:cc:ab:c1:4c:5e:03:cb:d4:d9:cb:d9:b3:
48:e6:7c:f0:be:9e:e6:db:31:d8:85:9a:76:4c:d4:
d2:38:02:a5:db:08:36:51:1d:ec:ee:c5:b6:26:80:
c8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5D:F8:92:0D:32:73:F3:0A:89:2B:82:C4:D1:3F:79:E0:7B:D2:C5
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139342e33362e3138342e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.184.0/23
Signature Algorithm: sha256WithRSAEncryption
88:a8:a5:ca:75:47:56:5e:db:64:82:61:05:26:c0:8c:c3:6a:
06:8c:88:86:51:a1:aa:c8:ca:fa:6f:6f:74:c4:c2:e4:3b:4f:
83:25:ce:7c:6a:b9:30:ba:00:e7:0d:10:67:dd:58:7e:71:53:
bc:f6:ec:f3:60:45:64:3f:95:07:d2:01:d2:47:d0:80:b6:68:
d4:2a:75:b7:64:98:90:7c:4e:49:d4:36:32:87:d5:2d:ac:e5:
9b:f7:ee:fd:5e:14:53:c8:70:02:5a:68:0d:f3:7c:64:59:fe:
3b:4a:cc:e6:b5:67:b5:13:e1:71:af:47:d5:9b:40:23:42:7c:
fc:23:aa:42:17:69:cc:96:13:81:77:81:81:54:d7:c8:d6:ca:
89:e2:da:14:f0:d3:cb:af:e1:fa:fc:d6:87:3a:6c:18:bd:7d:
49:78:d1:d8:e3:b1:b2:99:47:d2:f6:a5:f6:56:33:a9:b2:75:
62:5a:1f:a8:1c:8c:44:ed:79:11:85:80:d3:22:19:58:67:40:
5a:e0:f6:86:ba:53:39:ec:62:a0:62:56:a5:33:aa:a8:7b:d0:
8c:35:cf:82:44:4f:ed:9a:8e:27:ca:da:b3:cd:13:b4:c6:ec:
a3:36:99:bb:69:5f:a2:2d:83:82:d7:2e:8b:a3:46:98:0b:1b:
08:b7:ca:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:07:02 2024 by rpki-client on console-fra.rpki-client.org