Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3134302e3138352e302f32342d3332203d3e203531313637.roa
File: 34352e3134302e3138352e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: 2tVTxvByJ3AXW+oU2WFCEDIoSj7nsp6t713r6G06n9A=
Subject key identifier: 1D:F4:44:56:89:1A:35:83:A9:36:67:C3:59:BC:6B:39:E4:CA:79:11
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 39D620E3565C7EFAEE19A8B45959C6DC60277580
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3134302e3138352e302f32342d3332203d3e203531313637.roa
Signing time: Mon 26 Feb 2024 08:52:50 +0000
ROA not before: Mon 26 Feb 2024 08:47:50 +0000
ROA not after: Mon 24 Feb 2025 08:52:50 +0000
asID: 51167
IP address blocks: 45.140.185.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:d6:20:e3:56:5c:7e:fa:ee:19:a8:b4:59:59:c6:dc:60:27:75:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Feb 26 08:47:50 2024 GMT
Not After : Feb 24 08:52:50 2025 GMT
Subject: CN=1DF44456891A3583A93667C359BC6B39E4CA7911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c4:76:fe:c7:d0:69:60:4b:89:bd:e7:b2:2d:
d1:8f:5f:38:a8:dc:5f:2b:d8:08:ab:5d:b1:69:d8:
a6:4a:74:c0:3f:1a:93:e0:27:92:ca:74:73:fa:e0:
cf:15:80:d6:a2:5b:f2:76:e6:b5:2e:08:ab:2d:38:
a1:78:cd:c2:7e:bb:d8:d9:6a:03:97:6e:8c:3f:2d:
92:6a:24:0a:77:8e:1d:82:21:8f:18:25:a5:0a:0f:
8d:f7:7b:15:3d:83:13:6e:d8:e2:48:24:f9:b4:f3:
26:c7:73:9b:39:dc:96:dd:81:9f:f5:84:47:72:a1:
cd:9c:7d:6e:6d:f8:58:b7:e6:4e:6c:d9:d6:4e:18:
b4:05:5e:cf:f4:f1:7f:32:55:af:a0:4b:8c:06:e2:
3f:b0:9c:e5:0b:00:5e:43:9a:d4:94:88:5e:d9:f1:
96:28:e2:1a:00:dc:83:2e:c9:f9:95:47:26:fa:f6:
0a:11:53:b0:fe:8d:50:ac:ab:9a:76:85:c1:fc:9c:
97:aa:8f:f3:99:1e:56:d6:3b:05:81:a9:b0:1e:e5:
40:d1:13:06:b1:2d:99:db:a8:0b:04:e4:a5:12:3b:
5f:6d:12:5b:a0:c5:08:4e:52:0a:40:43:5f:8f:93:
05:12:22:53:0f:88:37:20:ac:bd:b4:28:99:e2:a1:
73:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F4:44:56:89:1A:35:83:A9:36:67:C3:59:BC:6B:39:E4:CA:79:11
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3134302e3138352e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.185.0/24
Signature Algorithm: sha256WithRSAEncryption
74:af:49:1b:0e:c1:61:f7:04:d3:78:e9:05:c2:2c:b5:09:16:
8f:ca:3b:9e:3e:2a:fc:7f:fe:03:34:69:f5:f6:67:94:fd:b3:
14:c5:09:81:1d:98:9f:aa:b1:c7:ca:7c:dd:0b:3f:77:a2:d2:
7e:54:53:50:53:fb:d1:30:f4:9d:36:24:0d:a9:b2:d4:b2:a5:
bc:71:38:ca:41:4b:35:97:47:43:63:8f:d6:2d:13:e3:6e:c5:
f3:ed:c0:3d:f8:01:3f:e7:a5:bc:07:fb:59:86:a0:94:51:9f:
f9:9e:02:91:4c:31:c4:2c:c3:04:14:bd:e7:eb:f4:55:35:bb:
31:86:c8:e0:d7:c7:67:18:ae:22:b7:e1:19:1d:07:50:9e:37:
cd:69:39:d3:a9:53:d1:77:14:c3:17:bf:27:d1:a4:e2:f7:8c:
ce:b3:0b:eb:83:8f:19:74:d5:a4:0c:d5:16:a7:58:15:27:dc:
b4:05:27:0b:19:b7:b4:8f:3c:a5:33:da:e4:10:28:ce:93:29:
af:85:5e:c0:f3:67:a7:86:60:29:2f:5c:45:e4:93:0d:37:b8:
40:50:3c:c8:b7:77:ef:c6:be:8c:e8:f4:5d:75:ea:ff:b4:87:
40:e9:05:e6:ef:e0:40:c4:81:f6:05:25:43:67:2f:0f:62:d4:
6c:61:05:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 14:08:17 2024 by rpki-client on console-fra.rpki-client.org