Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e382e3135302e302f32332d3332203d3e203531313637.roa
File: 34352e382e3135302e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: ozD1FbqbvKHc1pyaXDJNxZ+uXs3CYp9xAI/r77fFeaQ=
Subject key identifier: 1E:C3:3B:3C:B7:8A:8C:83:1C:6B:92:52:53:93:CD:CD:A8:AA:8D:27
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 4BDDE2B373A10590A1122078A5AC598AA0ABC2E0
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e382e3135302e302f32332d3332203d3e203531313637.roa
Signing time: Thu 30 May 2024 20:39:05 +0000
ROA not before: Thu 30 May 2024 20:34:05 +0000
ROA not after: Thu 29 May 2025 20:39:05 +0000
asID: 51167
IP address blocks: 45.8.150.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:42:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:dd:e2:b3:73:a1:05:90:a1:12:20:78:a5:ac:59:8a:a0:ab:c2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: May 30 20:34:05 2024 GMT
Not After : May 29 20:39:05 2025 GMT
Subject: CN=1EC33B3CB78A8C831C6B92525393CDCDA8AA8D27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:47:48:1e:12:ac:07:0c:e9:52:c0:17:97:31:
b9:ac:b7:44:f1:e2:5d:5a:47:07:98:4b:be:09:cc:
dd:93:d3:1d:07:c1:53:c8:4a:e2:b8:24:f0:de:be:
15:e5:88:6d:23:8b:50:91:87:ff:1a:47:86:36:43:
23:06:ca:c0:14:73:52:e2:cf:c6:20:36:68:1a:ec:
65:aa:da:c2:b4:af:8c:6e:d1:ab:e2:a4:01:80:70:
75:6c:db:bf:41:8c:24:cd:6c:41:ca:a7:db:3b:c2:
af:2c:ff:c6:dc:73:17:2b:16:c4:16:64:59:93:0a:
96:d3:c5:d4:1e:2e:ed:12:d0:35:b2:6c:d9:ab:c9:
72:cc:27:7c:8e:f2:9b:a1:68:6e:ee:07:21:86:dc:
b6:d1:d1:5c:c3:f0:01:97:a6:d9:db:8d:02:44:7e:
49:fd:d5:99:96:b4:88:ce:64:4b:d9:4a:ac:27:8b:
ae:92:ff:ef:bb:88:e1:64:00:48:e3:ae:0d:02:68:
6b:5c:49:c5:b7:4b:87:f4:f5:ef:1a:97:a5:22:69:
93:27:9b:47:69:df:d7:f7:d2:73:e9:f2:0b:df:35:
ef:f0:58:0c:56:cd:81:b4:4e:d9:33:13:d8:db:f8:
74:a0:ca:eb:53:fb:2c:44:35:f2:4a:b6:7d:bf:37:
80:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C3:3B:3C:B7:8A:8C:83:1C:6B:92:52:53:93:CD:CD:A8:AA:8D:27
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e382e3135302e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.150.0/23
Signature Algorithm: sha256WithRSAEncryption
99:b0:f5:8e:b6:d6:f2:99:90:0f:31:0f:57:6a:22:c1:f9:13:
f8:85:38:3e:68:17:46:87:25:a6:62:c9:f4:df:bd:ec:b8:31:
a1:8e:6c:8c:cc:90:e9:ad:f2:7c:ce:6b:2e:05:9b:33:a2:79:
19:3a:98:ae:10:75:16:c2:fb:47:4f:fe:ae:64:99:f8:1e:7c:
3b:eb:3b:d0:36:dc:37:cf:52:ce:d8:1f:1e:bd:3e:0d:34:c1:
33:16:4e:33:3b:89:8f:ea:65:b3:21:72:92:48:e7:5e:d6:18:
9d:5d:31:8b:75:05:6f:2c:9c:86:95:4a:4f:ef:03:b3:a8:63:
75:ef:98:57:94:45:9d:1c:39:db:9e:49:2d:6c:e1:38:e1:c4:
02:a4:8c:3e:01:67:dd:45:5d:f1:32:36:40:2e:b6:2a:47:5b:
60:78:84:14:67:03:5a:d9:f8:88:a4:fb:0d:98:8e:3d:e5:d3:
23:db:6f:a8:81:2d:59:5e:74:86:c2:ae:ae:6c:5f:a0:50:68:
7e:0d:a9:f3:d1:77:21:e6:cb:3d:13:55:97:76:50:f0:0a:64:
21:ee:f4:0d:6d:51:89:2f:f7:7d:f1:de:9c:cf:11:24:0b:ab:
6f:f7:f5:55:8d:a0:9a:b0:e2:c3:68:06:88:06:38:53:50:43:
77:9a:a9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:44:10 2024 by rpki-client on console-fra.rpki-client.org