Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/38352e3230392e39342e302f32332d3234203d3e203437353833.roa
File: 38352e3230392e39342e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: 9tk41M8UnuE4bWg7LFa7sMSgaqyFoAN7f96VUhTuyos=
Subject key identifier: BD:47:35:BB:DF:24:7F:AA:84:F6:76:A0:CB:96:9F:C9:BA:93:2C:69
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 722ABBD605812A050A1040186227C6BB5EB46B56
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/38352e3230392e39342e302f32332d3234203d3e203437353833.roa
Signing time: Thu 13 Jun 2024 10:41:39 +0000
ROA not before: Thu 13 Jun 2024 10:36:39 +0000
ROA not after: Thu 12 Jun 2025 10:41:39 +0000
asID: 47583
IP address blocks: 85.209.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:2a:bb:d6:05:81:2a:05:0a:10:40:18:62:27:c6:bb:5e:b4:6b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Jun 13 10:36:39 2024 GMT
Not After : Jun 12 10:41:39 2025 GMT
Subject: CN=BD4735BBDF247FAA84F676A0CB969FC9BA932C69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:90:c0:cc:fc:12:2f:37:82:91:c3:8c:36:2f:
2a:3f:f6:de:9c:be:0c:6a:5e:87:cb:03:ed:12:9d:
a4:a4:45:28:9d:6f:01:d0:bf:c1:4a:b3:eb:65:e9:
67:e1:95:50:06:f5:b2:6b:05:5c:c2:9c:d1:0a:be:
f8:75:38:e7:32:81:a1:1d:16:f1:32:f8:a3:cd:93:
19:12:91:f5:76:48:dc:e4:8f:91:1f:1e:72:27:40:
8a:cb:ac:51:c5:c0:bc:81:81:6d:e9:72:59:91:89:
59:60:f8:f7:b1:bd:c8:a3:a9:d8:e9:ad:c6:9f:9a:
26:b2:6d:80:e1:b0:a0:69:5e:15:53:c6:e7:65:bd:
72:f0:04:1f:7e:d5:8b:4b:c7:df:62:02:70:c1:73:
ec:65:c5:04:27:33:0e:b8:3b:18:0e:dd:57:a2:1d:
97:72:28:50:44:18:45:76:46:f4:b7:2c:ae:83:b5:
af:9c:7e:68:27:a8:7f:0d:53:3b:d0:fa:85:e2:5f:
5e:54:32:9e:12:a6:ac:d4:45:fb:3a:c1:71:68:a8:
63:20:fc:f2:7c:dc:e6:54:8a:8b:57:57:dc:eb:bf:
f9:be:af:fd:a4:91:ad:62:b1:30:ae:90:ee:ce:61:
c1:15:b8:66:d5:4e:34:18:72:c1:1d:60:9f:7b:e7:
27:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:47:35:BB:DF:24:7F:AA:84:F6:76:A0:CB:96:9F:C9:BA:93:2C:69
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/38352e3230392e39342e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.94.0/23
Signature Algorithm: sha256WithRSAEncryption
96:52:88:53:1f:66:05:86:23:6c:2d:39:d6:c9:ea:bf:4d:9b:
58:ef:80:9f:08:4b:53:5f:69:43:ba:93:d9:5c:9b:7a:a3:68:
44:19:83:f8:ac:58:23:da:b6:df:d5:c4:14:7f:23:81:6c:6e:
b5:9b:54:c8:ee:cc:d5:28:72:30:c6:d1:ef:8a:17:14:3b:ec:
f2:95:fc:9b:39:c2:a7:77:dd:63:0c:7a:8f:6b:2d:6b:bf:9e:
0e:f2:65:6e:70:48:af:5e:0c:35:e6:09:8f:60:1d:16:98:c5:
e7:79:38:ec:2d:53:4f:74:2c:ca:7e:c8:27:9b:30:80:81:0e:
a7:ab:f1:24:49:8b:ee:57:6d:b0:95:25:2b:12:ae:1d:7a:ed:
70:c6:09:9f:c9:ee:af:1f:9c:3c:96:11:c2:12:4e:f5:95:8c:
14:76:2b:c6:15:24:f3:60:f1:47:78:df:03:bb:fe:69:7b:ba:
cb:91:b1:29:b4:48:64:1c:87:65:46:e7:c6:12:14:79:e9:c3:
0e:4f:a5:ad:4c:9e:71:4f:8e:e0:48:cf:c9:56:25:22:05:7c:
99:f0:e4:08:3b:e6:e5:0c:ba:aa:18:02:bb:e2:d6:d1:b2:12:
86:5d:95:11:5e:c7:53:4f:ee:20:e0:2d:b9:4c:4d:41:21:b6:
06:19:95:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:44 2024 by rpki-client on console-ams.rpki-client.org