Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e38312e372e302f32342d3234203d3e20313336373837.roa
File: 34352e38312e372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: +aL9phSKocDsfjzs+lmIC69zEp3yLFSckbN+Yi5mq5A=
Subject key identifier: AA:59:96:FE:4F:6F:52:E4:C1:79:8D:74:D1:39:18:C7:B3:F6:7C:62
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 25C95331C39F8F6D05B91FD861FC84555AB601BB
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e38312e372e302f32342d3234203d3e20313336373837.roa
Signing time: Wed 07 Feb 2024 12:33:43 +0000
ROA not before: Wed 07 Feb 2024 12:28:43 +0000
ROA not after: Wed 05 Feb 2025 12:33:43 +0000
asID: 136787
IP address blocks: 45.81.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:c9:53:31:c3:9f:8f:6d:05:b9:1f:d8:61:fc:84:55:5a:b6:01:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Feb 7 12:28:43 2024 GMT
Not After : Feb 5 12:33:43 2025 GMT
Subject: CN=AA5996FE4F6F52E4C1798D74D13918C7B3F67C62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:81:d8:70:7d:ad:40:cb:c2:54:15:31:7d:4c:
66:fa:58:67:f4:50:e1:2d:c6:4a:68:ff:c0:11:15:
2d:fb:ad:c9:6a:9c:89:20:b5:6e:a0:60:95:77:db:
98:5b:a3:f1:05:b8:53:72:ee:5c:3b:33:44:eb:cf:
63:e5:98:dd:a9:c1:c3:c0:78:32:0f:4e:d7:92:e6:
c3:23:c4:8d:da:4c:4b:27:97:b1:9d:be:c3:6f:86:
36:b4:f3:5b:41:aa:10:74:72:2a:9c:fc:41:c0:93:
c0:cc:de:49:62:f2:f8:54:ec:77:ca:fd:ca:0f:02:
b6:dd:43:dd:09:02:cb:31:6b:f5:12:c7:a8:dd:2d:
21:d5:2a:13:50:a0:61:98:8a:98:51:70:dd:53:cf:
55:44:da:d2:fb:54:88:74:d4:ae:57:74:c5:ce:4c:
c8:13:ca:5f:5a:e3:e5:d0:32:eb:d3:55:1b:b1:26:
7f:5e:ee:b2:0d:72:2c:67:c4:37:5f:93:e0:32:ef:
0a:56:89:28:a5:9a:63:2d:bb:8a:e1:80:44:f5:e1:
0f:d1:21:af:8e:c2:df:e8:d1:c6:8e:9b:6f:cf:46:
77:dc:11:b1:40:d8:34:8a:58:8c:a0:17:83:f1:1f:
0c:1d:c6:5e:66:9f:11:80:1b:7f:69:b3:af:a9:76:
75:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:59:96:FE:4F:6F:52:E4:C1:79:8D:74:D1:39:18:C7:B3:F6:7C:62
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e38312e372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.7.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:e3:d7:7b:1a:01:31:2e:4b:32:14:ec:5b:52:56:80:e1:a1:
01:32:18:e7:bc:87:d6:30:44:8c:44:21:32:6a:cc:22:d5:38:
4d:e7:4c:f5:9f:cb:60:6d:23:03:7c:de:79:b7:46:10:7e:79:
de:02:b0:c8:e7:49:77:09:f7:38:12:cd:d7:ee:fe:c9:8f:ba:
2a:77:09:f8:6e:26:e2:db:ea:3f:88:2a:ef:8f:e2:e7:cd:7a:
15:22:ca:57:5c:26:18:91:47:c4:98:e0:43:34:54:db:91:7f:
e6:46:79:81:d0:e2:6b:c4:47:09:7a:3c:f4:d2:c7:ca:f9:03:
e2:10:67:fb:af:ce:01:79:17:66:01:3b:dd:28:7a:6b:0a:16:
99:84:4d:17:fb:71:6e:67:ca:49:ce:8d:6e:5f:a3:7e:4e:72:
ec:41:32:9f:2d:0d:fc:e1:b4:f8:51:aa:e8:1f:85:e9:c9:3c:
af:1b:a4:8c:40:89:9a:dd:a0:0c:6f:5d:3c:13:75:c4:47:40:
32:48:97:09:b3:f9:c5:98:d6:68:d4:e5:26:6d:a1:2e:47:b5:
15:2f:4b:9f:cf:38:cd:54:94:29:b7:61:59:01:c7:4d:d7:94:
ea:06:ac:03:f4:72:c4:35:61:6f:0c:d4:07:05:90:66:a7:a2:
7f:2c:d1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 20:21:24 2024 by rpki-client on console-fra.rpki-client.org