Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139342e35392e3235352e302f32342d3234203d3e20313336373837.roa
File: 3139342e35392e3235352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: VeH/vTZsOwcEIxXEiNTnTric6jKKC3O2pBvshnTmCyc=
Subject key identifier: 1F:80:97:1A:F3:D6:8E:03:05:29:08:B5:8F:E2:05:4D:E8:1E:EF:54
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 2D7F1687B05A84524B647601AF04CFBF685B1DF9
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139342e35392e3235352e302f32342d3234203d3e20313336373837.roa
Signing time: Wed 07 Feb 2024 12:34:13 +0000
ROA not before: Wed 07 Feb 2024 12:29:13 +0000
ROA not after: Wed 05 Feb 2025 12:34:13 +0000
asID: 136787
IP address blocks: 194.59.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:7f:16:87:b0:5a:84:52:4b:64:76:01:af:04:cf:bf:68:5b:1d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Feb 7 12:29:13 2024 GMT
Not After : Feb 5 12:34:13 2025 GMT
Subject: CN=1F80971AF3D68E03052908B58FE2054DE81EEF54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:27:59:af:65:03:97:28:d2:90:c1:8a:75:4f:
f8:48:64:94:bd:48:7e:95:eb:70:52:48:ad:ad:07:
f3:55:94:da:6d:aa:2f:8c:28:19:67:9e:d1:49:24:
88:93:1d:54:99:f2:4b:c3:cf:4c:16:06:4e:eb:b0:
49:19:74:e0:1e:50:5d:c2:68:ea:11:23:b1:7b:60:
4e:c4:67:19:71:72:fc:f4:ec:44:7c:a7:bd:ed:cc:
8e:8d:47:1e:eb:57:00:54:d3:de:d7:64:a7:09:6d:
d9:8d:f6:57:4b:52:3c:f5:10:ab:5c:83:d0:8a:d4:
58:7e:ed:82:a2:2b:b7:8a:0d:26:c9:f9:ac:c7:8e:
78:b0:ca:e2:81:3d:0c:4a:32:02:43:44:76:0a:f5:
c0:45:68:8c:7f:37:92:da:20:77:75:6c:47:de:a8:
ac:c3:0a:21:1a:b1:90:e6:8c:69:35:fa:34:47:2e:
40:bc:7a:62:24:b8:36:be:a3:06:47:2d:7d:ec:7e:
c0:73:b4:95:5b:03:04:ab:af:8f:16:c7:0d:b8:c9:
ed:2c:6a:cb:4c:bf:ae:74:d1:46:bf:4f:c9:4d:24:
bb:e8:8a:cb:00:f0:b3:5d:7e:b1:11:65:4a:eb:42:
a2:ff:54:4b:4a:04:6d:4a:d3:ef:f1:8a:6e:6d:51:
ae:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:80:97:1A:F3:D6:8E:03:05:29:08:B5:8F:E2:05:4D:E8:1E:EF:54
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139342e35392e3235352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.255.0/24
Signature Algorithm: sha256WithRSAEncryption
94:35:12:75:5b:bf:cc:f4:76:e8:54:62:9e:ff:60:36:ad:72:
20:27:5f:bb:0f:5e:d3:cf:96:7d:09:90:fb:6e:04:0a:85:ea:
0b:02:b9:ab:28:05:72:f7:c7:e0:78:57:60:92:24:52:42:7a:
84:58:34:03:a6:81:29:9c:18:f6:5c:f6:f7:9a:3d:a3:6d:4d:
70:e4:8e:0b:ec:f3:de:01:f7:d7:2b:09:4c:f3:ca:92:fe:69:
d7:c8:b9:a8:e6:d0:ea:0d:f1:82:91:47:0a:d5:25:3d:ee:da:
c5:a8:45:81:5c:73:d7:3e:a9:7b:4a:87:f1:46:f4:93:18:94:
1c:6d:96:cd:55:b2:35:ef:f0:da:62:19:5e:06:1d:46:fd:ee:
75:90:c2:36:69:26:13:b2:60:82:f8:77:fe:6f:95:b5:1b:75:
05:06:23:a1:fe:48:4d:27:e0:88:de:9b:a3:5d:7f:9f:84:c9:
2a:9d:02:75:00:bc:a1:53:d7:db:5c:f3:9b:66:c6:b9:c3:88:
8b:1f:b7:59:f7:26:6e:6c:75:a8:d8:61:c2:18:cd:d5:d1:87:
e1:76:50:01:8f:ef:99:78:f3:62:96:d7:7c:ea:9d:a0:8c:a8:
1c:85:82:ac:b5:da:47:c5:35:68:30:b4:a7:47:99:30:ac:90:
63:61:2c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 20:21:24 2024 by rpki-client on console-fra.rpki-client.org