Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3134302e3138362e302f32342d3234203d3e20313432313436.roa
File: 34352e3134302e3138362e302f32342d3234203d3e20313432313436.roa (raw, json)
Hash identifier: mc2biSHQ0nOFiFy8dTJoI8gwAwViCE4WE8T1wdNos6I=
Subject key identifier: 8E:96:6E:60:40:97:5D:E9:03:B2:5A:C3:52:87:DA:17:B1:BC:AB:56
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 4C97D2EF965F441BF76EE873415FE5EFF84D7BF1
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3134302e3138362e302f32342d3234203d3e20313432313436.roa
Signing time: Wed 19 Jun 2024 11:21:50 +0000
ROA not before: Wed 19 Jun 2024 11:16:50 +0000
ROA not after: Wed 18 Jun 2025 11:21:50 +0000
asID: 142146
IP address blocks: 45.140.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:97:d2:ef:96:5f:44:1b:f7:6e:e8:73:41:5f:e5:ef:f8:4d:7b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Jun 19 11:16:50 2024 GMT
Not After : Jun 18 11:21:50 2025 GMT
Subject: CN=8E966E6040975DE903B25AC35287DA17B1BCAB56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:13:ef:c6:4c:02:1d:3a:91:ad:ea:b2:c4:ac:
66:d1:58:65:57:20:dc:44:36:a0:1e:d0:a0:bf:fc:
26:a6:25:41:c6:b3:2b:af:7f:24:a6:af:43:ee:28:
be:c7:4f:53:22:0a:1d:28:74:2e:04:5b:d2:06:58:
83:36:30:cb:ef:8f:4c:42:19:e6:2b:20:d3:0d:1e:
24:3e:e0:96:81:17:ff:e6:46:c7:1b:de:fb:13:14:
8f:83:96:2a:f5:81:3b:29:1c:17:6f:e8:35:af:d5:
0c:d8:1b:3d:71:ea:66:8e:ac:ca:13:7f:5d:0b:41:
bc:b4:06:e2:d8:7a:59:16:57:8f:6d:bb:ff:de:ef:
5a:f4:49:1d:be:bc:6a:e2:8b:26:e9:d7:a4:ee:94:
34:e5:be:a4:d1:f7:67:32:e6:d8:0a:a9:bd:f9:94:
8b:3d:78:e6:f4:5f:2c:cc:34:5e:0a:aa:9f:c8:da:
ac:a0:a4:12:c9:5a:b1:15:29:56:ee:e5:e6:03:20:
d1:c1:5b:af:20:c9:8a:c9:28:1d:e3:08:94:6e:c1:
b6:81:df:9e:c9:82:b0:d4:61:a1:76:7a:b1:58:d8:
d2:cf:4c:44:ba:64:bb:60:48:17:17:6b:01:e1:04:
f8:77:02:08:8d:9e:3a:b2:73:f9:a3:a5:d0:54:33:
b5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:96:6E:60:40:97:5D:E9:03:B2:5A:C3:52:87:DA:17:B1:BC:AB:56
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e3134302e3138362e302f32342d3234203d3e20313432313436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.186.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:2c:cd:6d:d7:8b:d4:12:a7:23:72:a8:a8:f1:9c:ed:7c:c5:
21:41:25:1f:03:46:17:25:77:5c:38:ab:1a:a8:38:14:a5:88:
74:e1:62:22:fa:db:45:f5:6f:87:82:9c:7c:0b:f1:86:85:aa:
83:e8:21:6c:5a:ec:09:c1:2f:5f:d7:b3:b0:83:03:84:c4:ab:
23:da:59:8b:a6:86:db:1c:b8:a8:e3:49:89:e8:1b:a4:7a:2d:
0c:94:e7:13:b6:21:b3:c3:c6:26:da:42:2a:d3:9e:dd:18:90:
81:09:ab:da:2d:0d:e9:b7:d5:94:c5:40:d9:af:90:24:d4:db:
33:97:da:81:c1:1b:19:cc:fc:77:be:64:f3:fb:62:63:29:70:
59:bf:4d:ef:15:0b:15:24:0e:fb:f9:8e:d1:ed:2f:e7:0d:0f:
96:29:45:ec:63:a4:d7:ba:14:ee:1b:10:63:f9:97:af:63:78:
53:50:b1:33:c9:7c:97:32:53:62:ab:95:6c:71:a1:6b:4d:31:
f6:18:32:59:df:1b:dc:ba:5a:ae:5b:56:9c:28:0b:df:6c:07:
5f:1d:f4:d8:73:39:bd:42:e0:af:fc:c2:bb:08:d6:d7:b3:ef:
82:06:2f:89:60:9a:8f:bd:7b:a4:8d:68:21:aa:3d:b0:f6:23:
e0:9a:ec:be
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUTJfS75ZfRBv3buhzQV/l7/hNe/EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhmYjliYTgyN2U2ZjEwYTdhZjM3NDkwODAzZGQ1YTA3
NjM5NzIzNTAeFw0yNDA2MTkxMTE2NTBaFw0yNTA2MTgxMTIxNTBaMDMxMTAvBgNV
BAMTKDhFOTY2RTYwNDA5NzVERTkwM0IyNUFDMzUyODdEQTE3QjFCQ0FCNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuE+/GTAIdOpGt6rLErGbRWGVX
INxENqAe0KC//CamJUHGsyuvfySmr0PuKL7HT1MiCh0odC4EW9IGWIM2MMvvj0xC
GeYrINMNHiQ+4JaBF//mRscb3vsTFI+Dlir1gTspHBdv6DWv1QzYGz1x6maOrMoT
f10LQby0BuLYelkWV49tu//e71r0SR2+vGriiybp16TulDTlvqTR92cy5tgKqb35
lIs9eOb0XyzMNF4Kqp/I2qygpBLJWrEVKVbu5eYDINHBW68gyYrJKB3jCJRuwbaB
357JgrDUYaF2erFY2NLPTES6ZLtgSBcXawHhBPh3AgiNnjqyc/mjpdBUM7WtAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUjpZuYECXXekDslrDUofaF7G8q1YwHwYDVR0j
BBgwFoAUCPubqCfm8Qp683SQgD3VoHY5cjUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5
OWFmLzIvMDhGQjlCQTgyN0U2RjEwQTdBRjM3NDkwODAzREQ1QTA3NjM5NzIzNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NQdWJxQ2ZtOFFwNjgzU1FnRDNWb0hZ
NWNqVS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt
NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzIvMzQzNTJlMzEzNDMwMmUzMTM4
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzMTM0MzYucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAAtjLowDQYJKoZIhvcNAQELBQADggEBAJ0szW3Xi9QSpyNyqKjxnO18xSFBJR8D
Rhcld1w4qxqoOBSliHThYiL620X1b4eCnHwL8YaFqoPoIWxa7AnBL1/Xs7CDA4TE
qyPaWYumhtscuKjjSYnoG6R6LQyU5xO2IbPDxibaQirTnt0YkIEJq9otDem31ZTF
QNmvkCTU2zOX2oHBGxnM/He+ZPP7YmMpcFm/Te8VCxUkDvv5jtHtL+cND5YpRexj
pNe6FO4bEGP5l69jeFNQsTPJfJcyU2KrlWxxoWtNMfYYMlnfG9y6Wq5bVpwoC99s
B18d9NhzOb1C4K/8wrsI1tez74IGL4lgmo+9e6SNaCGqPbD2I+Ca7L4=
-----END CERTIFICATE-----
Generated at Thu Sep 19 07:47:35 2024 by rpki-client on console-fra.rpki-client.org