Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/38352e3230392e39322e302f32332d3234203d3e203437353833.roa
File: 38352e3230392e39322e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: 3krCitRkczg+cFjHtfHamYkgbk3GIIxcbcMSeALd6cg=
Subject key identifier: 13:91:07:54:76:24:F8:B6:FD:CF:41:21:DE:26:18:9B:40:26:21:48
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 0111799826991DF83065A3DDF0E328264386F2B2
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/38352e3230392e39322e302f32332d3234203d3e203437353833.roa
Signing time: Thu 13 Jun 2024 10:41:37 +0000
ROA not before: Thu 13 Jun 2024 10:36:37 +0000
ROA not after: Thu 12 Jun 2025 10:41:37 +0000
asID: 47583
IP address blocks: 85.209.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:11:79:98:26:99:1d:f8:30:65:a3:dd:f0:e3:28:26:43:86:f2:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Jun 13 10:36:37 2024 GMT
Not After : Jun 12 10:41:37 2025 GMT
Subject: CN=139107547624F8B6FDCF4121DE26189B40262148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d6:07:d2:a3:02:fc:22:57:44:ab:b3:83:e5:
65:be:0a:c3:c6:8c:24:10:f4:97:5a:be:29:48:19:
5e:ce:9b:c6:fa:b4:ba:6c:ae:6b:ab:9f:66:27:d7:
3a:e8:61:a5:dc:f7:20:42:78:9d:fa:3f:57:0c:36:
40:cb:a3:47:a1:a6:6b:57:ec:b7:02:d2:7b:62:c1:
1a:b0:a8:5a:54:b1:40:1b:0b:16:c5:0f:8d:77:a4:
0d:19:a9:60:52:ef:7c:29:44:b1:de:38:98:6b:16:
73:69:95:1b:d5:3d:b7:8e:ab:b1:36:c1:02:59:d2:
e1:9b:36:25:cc:48:61:bf:2b:4f:d5:10:9f:59:5d:
be:1b:2b:c0:27:93:dd:1b:95:c8:87:e7:39:07:08:
ae:01:84:ed:0d:a7:68:ef:20:b0:e5:ce:6a:21:5b:
a1:02:a3:17:0e:83:39:d0:f9:42:75:3a:2a:bb:bd:
79:06:99:e9:38:d4:7a:2c:e3:1a:80:91:e1:53:a1:
68:cc:1a:b0:af:a2:8e:3d:3b:08:da:53:a0:b6:d8:
a2:89:92:78:97:e9:6c:16:73:10:62:ac:23:8b:40:
69:13:56:4a:61:f9:a2:f2:b7:24:b1:89:72:2c:10:
a9:e0:f1:fe:7c:e8:91:b6:ce:2e:4b:95:96:a8:78:
4f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:91:07:54:76:24:F8:B6:FD:CF:41:21:DE:26:18:9B:40:26:21:48
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/38352e3230392e39322e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.92.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:30:ba:9b:89:94:f9:32:94:a4:62:31:25:55:ca:d2:72:ba:
f4:5d:9d:08:78:7c:41:95:c8:ef:8a:16:bc:a0:4d:7d:e6:f6:
b2:e9:5c:4c:f7:a3:4f:16:52:26:95:70:b6:df:e8:f8:ee:af:
0b:03:b6:79:a8:eb:4e:29:ae:aa:aa:49:ae:c3:61:bb:31:2f:
4f:4d:c2:14:8b:88:c2:cc:aa:ba:d8:f0:e7:be:61:5f:3a:95:
1d:2a:d5:b9:45:e4:01:37:32:14:20:f5:80:99:26:84:f0:bc:
11:2f:2b:1d:5c:7e:1f:70:10:44:7a:b3:36:10:e6:ee:4d:3c:
8f:1b:11:48:89:0d:7d:e5:5d:61:24:20:a1:36:96:8f:1b:1b:
cc:f8:9e:ce:a3:ea:7f:49:ee:28:29:e4:6b:76:ed:f4:48:b4:
c4:ff:b0:ff:89:13:64:98:43:8f:e0:36:90:ef:c7:33:36:45:
60:24:d8:bc:f0:bb:db:8e:ee:e1:00:18:13:f7:b9:ee:55:d1:
8c:e4:fe:6c:a1:80:ad:5d:b5:39:99:1d:71:79:69:8a:97:1b:
80:77:f4:91:1d:9d:f4:45:d7:ac:5a:41:11:46:cd:e8:c4:62:
0a:6d:49:7f:aa:66:04:c0:9f:06:51:59:14:25:c8:eb:fe:c2:
8e:2c:da:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:44 2024 by rpki-client on console-ams.rpki-client.org