Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e38352e3134352e302f32342d3234203d3e203632323430.roa
File: 34352e38352e3134352e302f32342d3234203d3e203632323430.roa (raw, json)
Hash identifier: 3wmvcQ/pfIPm9nfGmUAPzX8LmZX4frkzilqUfG7AgX4=
Subject key identifier: 79:18:B9:97:A2:4B:04:D6:0C:8B:54:F2:A2:23:66:8A:31:BF:78:F6
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 67B9BA22C9C78BB8F0CDB839D06C6895540E6AF5
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e38352e3134352e302f32342d3234203d3e203632323430.roa
Signing time: Mon 26 Feb 2024 08:52:52 +0000
ROA not before: Mon 26 Feb 2024 08:47:52 +0000
ROA not after: Mon 24 Feb 2025 08:52:52 +0000
asID: 62240
IP address blocks: 45.85.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:b9:ba:22:c9:c7:8b:b8:f0:cd:b8:39:d0:6c:68:95:54:0e:6a:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Feb 26 08:47:52 2024 GMT
Not After : Feb 24 08:52:52 2025 GMT
Subject: CN=7918B997A24B04D60C8B54F2A223668A31BF78F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:54:5f:ba:3e:6a:75:78:da:af:e8:0f:bd:f9:
b6:51:e9:e3:3c:2d:b2:22:3d:5e:b5:ae:e5:4e:b0:
38:59:4c:c7:2b:b8:c0:f1:06:11:bd:96:67:d7:f9:
41:0f:4f:a3:94:4d:de:79:b7:07:32:ef:db:56:09:
a8:da:6d:dd:e3:97:d6:68:04:73:9c:f2:fb:77:c1:
0b:0a:e1:f9:39:d4:76:00:31:1a:71:a5:16:52:2a:
3d:f1:af:96:98:f6:0b:14:cb:84:0a:24:65:3b:a6:
a8:e6:4f:7f:63:43:eb:70:33:ba:d4:c1:bd:c8:6e:
5d:1c:c1:df:ac:72:84:22:da:82:f0:77:09:06:16:
cd:94:bc:7b:3f:d6:ec:89:4d:e4:7e:fe:e7:af:d5:
7d:65:3c:f6:0a:62:22:df:37:e3:4e:26:5a:ed:f8:
3d:6e:38:93:44:43:e9:8e:78:43:a7:ba:99:a8:e8:
80:05:d2:b6:4c:cf:3a:bc:8f:63:94:db:73:6a:18:
c1:0c:dd:d8:fd:91:76:67:56:f4:42:16:d7:70:b0:
e8:10:eb:4b:06:73:a3:63:cb:de:81:de:3b:1d:9c:
21:48:79:ec:26:1d:5a:c2:a8:40:c1:fc:75:e6:68:
06:5c:b0:f8:c4:8d:98:3d:97:7a:67:95:7a:bb:07:
fe:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:18:B9:97:A2:4B:04:D6:0C:8B:54:F2:A2:23:66:8A:31:BF:78:F6
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e38352e3134352e302f32342d3234203d3e203632323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.145.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:8b:be:16:71:ac:e9:ed:42:06:f8:df:97:f8:90:6c:b3:c0:
25:c1:7c:30:ea:5c:6d:73:64:42:03:12:fb:dd:12:6f:8a:f6:
c7:04:43:7d:d7:d5:c8:ec:5a:3f:7c:42:50:10:c1:74:25:39:
b2:d1:01:b8:05:10:a0:ce:ce:0f:c4:3c:cd:e2:73:b2:4e:21:
b9:74:c9:22:e3:25:bb:88:dd:ef:09:92:de:9c:4e:ce:73:cc:
b5:59:07:a6:75:e6:7a:37:00:82:a2:e3:54:bb:a6:de:48:4f:
45:d2:d1:6c:cc:d0:95:dd:0c:39:ca:95:ea:ea:83:cc:c0:59:
11:b9:e2:0f:97:6f:a0:ea:2d:50:53:a0:87:01:37:ad:f1:c2:
2f:73:72:4f:8f:0c:c0:60:54:5b:46:79:dd:1b:1d:8e:9e:dd:
10:91:e3:06:0d:94:67:0d:02:d0:27:b0:fa:c1:fa:b6:10:c6:
27:c6:54:93:61:96:d5:a3:7e:87:91:9c:6e:ac:bf:4d:41:22:
37:59:93:9f:a5:c3:da:66:9d:93:60:7c:b5:54:c1:4b:28:59:
1c:40:e6:2d:8a:2c:81:1a:f0:ed:0a:10:89:b1:5e:6a:13:f2:
fc:a3:bf:43:c3:43:04:68:43:ee:e3:b0:55:98:34:dc:58:93:
cf:60:8a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 21:26:33 2024 by rpki-client on console-fra.rpki-client.org