Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e39302e3232322e302f32342d3234203d3e20333936303733.roa
File: 34352e39302e3232322e302f32342d3234203d3e20333936303733.roa (raw, json)
Hash identifier: JpORC0R0YibSz9MNDKUxlKvEk9yFetNEanEregcvgx0=
Subject key identifier: 24:C6:F0:11:03:D0:1B:B8:C5:74:FF:3A:D7:74:06:87:C4:96:1A:FA
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 25D2A2F187EA811461C79FCC808D336D8D0DC2A1
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e39302e3232322e302f32342d3234203d3e20333936303733.roa
Signing time: Mon 26 Feb 2024 08:52:57 +0000
ROA not before: Mon 26 Feb 2024 08:47:57 +0000
ROA not after: Mon 24 Feb 2025 08:52:57 +0000
asID: 396073
IP address blocks: 45.90.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:d2:a2:f1:87:ea:81:14:61:c7:9f:cc:80:8d:33:6d:8d:0d:c2:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Feb 26 08:47:57 2024 GMT
Not After : Feb 24 08:52:57 2025 GMT
Subject: CN=24C6F01103D01BB8C574FF3AD7740687C4961AFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9b:bc:95:0c:c2:54:16:8c:22:fc:cc:b3:53:
1b:13:fe:46:7e:56:5b:01:2d:37:59:78:6c:60:ba:
69:d1:20:06:70:42:03:2a:1d:24:d3:ca:6c:9b:f3:
25:91:27:a4:da:33:47:93:a7:4b:66:53:2a:f4:bb:
72:80:09:b6:59:88:ec:8c:ad:7b:77:b1:c7:68:06:
d5:a5:0c:97:61:22:9f:22:02:f7:7b:2d:99:bb:3b:
db:a9:ec:69:2e:d2:ce:57:ea:12:b5:7e:29:bc:0c:
95:ab:48:fb:ad:91:09:c6:2a:4c:1e:b0:54:58:12:
76:ee:f7:7e:2e:97:25:fe:50:9d:ac:e2:dc:bc:37:
3f:25:9b:09:3c:56:b4:6e:8c:1b:0e:9d:32:ea:8b:
f1:e0:df:61:95:f9:96:46:9b:79:5e:c8:49:c2:f3:
af:b7:98:c6:ca:b5:a3:e9:1b:08:a6:87:39:62:79:
0b:f2:90:e3:3f:d6:3c:8a:e2:0a:59:79:6e:19:ca:
d1:a2:99:78:89:35:83:69:cb:1b:3e:9c:4f:05:ef:
90:fa:0b:e5:10:bc:d3:23:a7:98:b2:1d:fe:35:71:
4e:4f:26:f6:b8:a6:be:88:8f:75:9b:c5:14:ab:bd:
84:1d:cb:48:c3:6e:ba:34:09:e3:cf:5e:fd:a1:2e:
8f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C6:F0:11:03:D0:1B:B8:C5:74:FF:3A:D7:74:06:87:C4:96:1A:FA
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/34352e39302e3232322e302f32342d3234203d3e20333936303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.222.0/24
Signature Algorithm: sha256WithRSAEncryption
88:65:dc:8c:94:28:7f:40:47:b5:9d:c8:0e:3a:a8:e2:46:f6:
67:4a:3d:bf:d2:a8:7b:bc:c3:da:ad:71:7e:9d:0d:8e:f3:bd:
d4:3a:70:b7:f7:1f:23:c9:e3:a0:c6:31:15:f1:11:b2:e4:de:
19:49:78:03:87:f6:5c:06:56:84:c4:bc:0c:f9:ff:00:1f:31:
27:34:90:f8:65:73:1d:b7:bc:5f:48:47:07:c1:66:41:9e:b1:
57:cb:e7:98:55:8f:b5:60:20:fc:c7:25:26:06:32:ac:23:00:
6a:90:82:5e:e4:43:ea:d7:3e:b7:2e:04:49:27:1b:16:48:20:
a8:b0:f0:70:80:1f:4c:7e:e6:94:c9:10:37:b5:66:49:51:fe:
25:c9:96:54:c2:04:c4:c8:4a:c0:bd:97:f7:b8:bd:5e:65:93:
73:9c:c7:50:fc:5e:5a:64:a0:d7:d0:32:22:58:a4:67:e2:01:
6a:8e:c7:fb:ad:fe:f5:bc:3f:e5:21:0e:ce:22:34:14:6a:e7:
84:10:f5:83:b5:52:05:77:b9:b3:d3:3b:97:cd:96:5b:86:cd:
24:d8:af:05:fd:0d:b8:2d:38:2a:7a:5d:c7:36:85:26:63:2d:
63:03:97:59:d1:05:eb:a7:46:cb:c1:1e:a9:c8:2d:c1:9a:61:
a6:1f:e3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 05:01:40 2024 by rpki-client on console-fra.rpki-client.org