Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3231322e3130332e36312e302f32342d3234203d3e20313336373837.roa
File: 3231322e3130332e36312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: yhKeiFjgJaXo146GRHJ3zTanWuq99V3EzR7iYEjpjYc=
Subject key identifier: 03:E3:29:AC:E1:DB:EA:4A:BC:07:66:A2:81:AB:8C:C1:A0:0E:8E:01
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 3BFDFD7697508207220D7A076EAEFC7EB0E408B9
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3231322e3130332e36312e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 01 Apr 2024 14:03:19 +0000
ROA not before: Mon 01 Apr 2024 13:58:19 +0000
ROA not after: Mon 31 Mar 2025 14:03:19 +0000
asID: 136787
IP address blocks: 212.103.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:fd:fd:76:97:50:82:07:22:0d:7a:07:6e:ae:fc:7e:b0:e4:08:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Apr 1 13:58:19 2024 GMT
Not After : Mar 31 14:03:19 2025 GMT
Subject: CN=03E329ACE1DBEA4ABC0766A281AB8CC1A00E8E01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:17:bb:df:d3:1e:fe:b4:aa:b0:c8:6f:1a:cf:
07:cd:95:94:f1:6f:bf:68:3a:11:5c:34:a4:b4:19:
bc:4d:3a:ac:08:97:4a:7c:bb:97:56:bb:11:6b:38:
66:97:13:73:b1:19:a0:9c:1a:5e:3e:95:9f:ea:58:
07:75:da:76:4e:86:9c:07:d8:64:33:a4:1f:af:08:
e1:c2:8f:72:35:0b:f9:26:01:83:b7:14:94:3e:7f:
48:df:9d:11:e9:c8:1b:b6:e4:7d:ff:f1:f0:34:b8:
77:c8:53:5f:f5:db:be:5c:53:f8:43:50:df:57:6e:
b2:5b:46:e5:ae:fc:ff:08:17:d8:97:17:72:82:dc:
ce:0e:4e:0a:90:14:27:69:84:33:04:5b:82:87:03:
d6:72:19:c0:90:16:4f:fc:f3:7b:00:8d:57:f0:2c:
48:54:b2:0b:dd:50:99:bb:56:7c:ee:da:03:c5:82:
65:46:a5:bc:ae:64:57:df:9e:f3:bf:4a:30:4c:ed:
df:93:53:be:a8:35:b9:7c:9d:95:5c:0b:78:22:55:
2a:b2:98:b1:af:40:75:78:54:56:3a:6d:44:5e:e0:
b7:99:fd:1a:83:9b:ca:44:43:c2:0e:4d:99:a6:14:
95:0c:71:e6:79:60:7d:81:18:85:42:9e:9c:62:52:
16:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E3:29:AC:E1:DB:EA:4A:BC:07:66:A2:81:AB:8C:C1:A0:0E:8E:01
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3231322e3130332e36312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.103.61.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:26:e7:5c:1c:36:fc:a7:8e:c6:c2:eb:14:bd:8d:7e:20:b6:
c1:c0:83:ba:b7:12:67:d1:38:03:58:fd:d3:fa:c9:70:69:58:
ce:81:6a:29:7f:a5:37:26:cf:ba:61:4f:fe:ba:a4:a2:f2:16:
18:21:d8:47:fe:9e:4c:c7:eb:7b:fc:3b:ab:7b:f3:04:66:92:
1f:92:52:ef:a8:28:6c:4d:d8:69:32:07:a9:ab:b3:9c:2d:05:
96:a8:f3:88:05:82:b8:df:0d:74:9e:73:7f:63:6a:83:97:60:
b6:44:d6:41:04:f5:e5:c0:7c:4c:97:b6:ef:20:32:c7:ef:28:
0f:8e:0f:8a:54:15:ef:2e:93:5b:20:9b:a9:64:c6:ca:09:35:
d9:47:5a:ef:eb:96:d2:69:26:c0:e7:a8:e0:37:6b:f0:45:44:
cc:e3:6a:aa:97:0c:9a:e4:a5:52:cc:68:2e:8d:23:dc:25:92:
81:4b:ff:a7:91:a7:cc:c7:41:7b:c0:d5:68:28:6f:5a:df:6b:
20:5f:3a:ac:8c:99:65:4f:70:97:74:2d:96:dc:ce:22:68:e8:
dd:4a:e7:fc:cb:52:60:41:4f:ee:58:3f:96:1c:0b:ea:5b:12:
d0:57:8c:c0:ae:30:3a:98:95:a6:d3:6b:fa:62:96:0e:3b:87:
f6:cf:89:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 11:54:22 2024 by rpki-client on console-fra.rpki-client.org