Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e31332e35392e302f32342d3332203d3e203531313637.roa
File: 34352e31332e35392e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: mztLPKia+3TuWthPS4dnLZPYbvoFFV2GhnA91IOeqao=
Subject key identifier: F1:2C:BD:40:68:9E:D3:E1:6B:28:1F:A0:5A:28:8E:72:A3:EE:A7:54
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 150B01FE97AC5360E4D86D90AC41CE40108C399B
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e31332e35392e302f32342d3332203d3e203531313637.roa
Signing time: Mon 26 Feb 2024 08:52:53 +0000
ROA not before: Mon 26 Feb 2024 08:47:53 +0000
ROA not after: Mon 24 Feb 2025 08:52:53 +0000
asID: 51167
IP address blocks: 45.13.59.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:0b:01:fe:97:ac:53:60:e4:d8:6d:90:ac:41:ce:40:10:8c:39:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Feb 26 08:47:53 2024 GMT
Not After : Feb 24 08:52:53 2025 GMT
Subject: CN=F12CBD40689ED3E16B281FA05A288E72A3EEA754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:31:77:82:3d:4a:9d:4b:cf:06:31:d4:86:86:
c6:19:7d:42:4f:2c:5d:4d:28:ee:6e:e0:c7:6e:f1:
ba:60:64:96:ae:6b:42:22:81:79:87:f9:3c:69:67:
ce:65:e1:91:c6:b9:d4:6c:c8:bb:74:fd:af:27:6a:
88:fb:53:4c:94:09:fa:14:c0:9b:c7:a3:78:81:b9:
c1:bb:23:13:6c:58:a7:fd:d7:09:50:f2:ef:e2:3e:
c0:d2:94:14:4b:6e:79:28:5e:81:8b:52:05:1e:12:
e5:6f:0a:e2:43:b0:c4:63:86:55:e6:d4:f5:90:ad:
7a:99:95:7f:a8:4d:57:ce:b0:e0:ec:ea:50:0c:e6:
93:3f:3d:6f:86:52:de:22:46:74:56:7b:86:f6:43:
e3:02:35:d1:d1:db:52:52:a6:f1:28:31:3c:b3:81:
6c:89:1d:02:0b:b1:70:e8:2c:35:ef:3f:b1:ff:06:
2b:a5:22:4c:24:3a:fc:0e:99:95:c0:07:b6:05:01:
41:a8:b0:15:30:c4:4b:38:f5:fe:c8:98:24:f7:a0:
74:66:fa:55:d6:33:ec:36:3c:15:d1:53:b4:32:21:
82:a1:ea:9f:f7:ea:2d:65:27:bf:e5:bb:20:39:e9:
aa:6d:85:d2:90:04:e0:db:41:eb:bc:ac:58:05:f2:
d4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2C:BD:40:68:9E:D3:E1:6B:28:1F:A0:5A:28:8E:72:A3:EE:A7:54
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e31332e35392e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.59.0/24
Signature Algorithm: sha256WithRSAEncryption
49:fb:0d:de:e2:9f:49:c1:b1:01:b8:3a:2d:3d:a0:de:ff:43:
34:ff:97:04:7a:0f:f8:c9:40:89:00:da:b9:d2:96:30:8f:25:
42:3d:65:b6:a3:12:ce:12:fd:b0:02:d5:c8:6b:ba:83:96:24:
37:3f:a0:a1:95:d1:d1:17:26:f0:83:2c:2f:53:41:f8:8e:97:
a4:81:91:c9:0d:d7:75:ac:bc:78:17:e1:e1:81:f6:04:5d:4d:
df:19:29:2c:0d:dc:af:6a:57:7b:aa:50:73:23:4c:40:d3:eb:
41:20:e0:3d:cf:61:a2:b8:0b:7d:b1:e6:3a:86:77:54:63:5e:
e0:a4:04:64:dc:4c:1a:23:56:5f:01:b9:5d:bb:5c:9d:08:b6:
ed:e2:82:2d:78:14:a8:27:7b:86:69:84:77:fc:45:01:5d:18:
ee:e1:59:fd:7b:68:53:52:ab:ad:51:ab:0f:46:d3:68:3c:e1:
07:c4:5a:ea:cc:27:c8:a7:a5:06:d4:48:3e:80:b2:cf:79:81:
3e:07:a3:f4:cb:28:e8:ed:b0:02:4f:f7:1f:c2:92:a6:a4:c5:
8e:01:ab:5a:8b:29:80:c7:e1:fc:a1:6d:f7:04:fd:27:6a:ec:
cc:95:9b:9d:34:4c:9b:e5:f2:00:eb:68:4d:72:c9:fd:bc:a4:
f9:59:1f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 14:13:08 2024 by rpki-client on console-ams.rpki-client.org