Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/39312e3231342e36352e302f32342d3234203d3e20323132323338.roa
File: 39312e3231342e36352e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: GemXkGrpaey3kLuXf7MT5pwOU4Zt5JXQ9phCp4Gi5fE=
Subject key identifier: FF:E5:2E:28:8F:C4:F0:0F:E8:49:5A:B7:E9:0D:72:34:56:91:4D:F7
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 74CA10D11BBAC3EC2EDA9D7E4E1017F3A7BE259D
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/39312e3231342e36352e302f32342d3234203d3e20323132323338.roa
Signing time: Tue 13 Aug 2024 19:33:15 +0000
ROA not before: Tue 13 Aug 2024 19:28:15 +0000
ROA not after: Tue 12 Aug 2025 19:33:15 +0000
asID: 212238
IP address blocks: 91.214.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.mft
rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:ca:10:d1:1b:ba:c3:ec:2e:da:9d:7e:4e:10:17:f3:a7:be:25:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Aug 13 19:28:15 2024 GMT
Not After : Aug 12 19:33:15 2025 GMT
Subject: CN=FFE52E288FC4F00FE8495AB7E90D723456914DF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fb:50:de:10:25:62:40:e5:cd:16:a0:f6:a7:
79:b5:ae:9c:dc:d3:1e:c4:a3:4d:d3:44:15:48:31:
96:51:6d:7e:51:86:32:8e:b8:1f:09:8e:5f:9d:0c:
8e:65:b5:23:b7:0e:be:39:aa:08:6f:25:15:90:35:
4a:6f:e4:a9:23:8a:02:22:57:33:40:3e:44:6b:42:
42:77:8c:af:65:61:46:3e:0a:f3:9c:45:36:b4:19:
40:73:e5:04:a7:ba:7f:8d:37:b6:e0:95:19:c5:8e:
c3:ad:2c:33:6d:e5:c5:f2:c1:6c:cc:4b:78:ec:35:
a3:99:6f:97:de:d0:96:e6:be:80:b2:f7:a7:61:2d:
15:2c:70:97:0a:3c:ba:ca:32:10:49:34:bd:f9:97:
04:5e:94:02:8a:ec:a3:21:bd:70:53:36:c7:4d:ed:
62:ee:b0:e8:4f:a8:56:de:82:cd:a3:2e:35:0b:46:
19:29:98:b9:c7:3e:75:30:2a:b1:13:98:98:95:0f:
3b:d6:79:bc:96:79:31:b9:a5:90:c0:00:07:0e:fb:
8e:03:47:aa:84:a9:d2:f0:07:90:35:74:ed:75:7d:
b9:22:a7:f6:2d:49:ca:53:75:6f:3c:06:15:36:7a:
45:cd:94:bf:c7:5d:9d:51:b3:ec:ec:84:78:c4:bc:
f3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E5:2E:28:8F:C4:F0:0F:E8:49:5A:B7:E9:0D:72:34:56:91:4D:F7
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/39312e3231342e36352e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.65.0/24
Signature Algorithm: sha256WithRSAEncryption
37:ec:07:a9:d5:af:8e:9c:d8:7a:d5:46:c5:82:d2:68:af:a5:
c8:25:d2:c5:b0:9f:ec:5d:77:e6:ca:2e:a7:3f:7e:38:62:8a:
46:09:a2:77:61:f9:5a:a0:05:e2:d5:a0:c7:c6:ee:17:54:b9:
5e:98:fd:b0:bf:33:68:c4:60:71:31:e2:30:2b:c9:fc:16:45:
ee:3f:39:a1:d0:92:44:96:b1:fe:1f:97:a6:88:48:a7:fb:66:
fc:42:df:5b:7b:1d:ec:d5:f6:76:e1:49:b6:b1:ef:9e:19:d0:
fc:68:ee:82:77:73:82:00:08:dd:10:6f:2a:95:c6:90:3c:a7:
0d:ef:1a:86:29:f7:8b:39:b8:01:69:e4:be:a8:f3:69:26:43:
10:54:e8:1c:74:ef:11:26:a3:15:1b:ef:2c:43:59:22:fd:51:
2f:14:25:24:b1:97:d2:b5:43:42:2e:5f:7c:31:d1:5a:c0:3f:
59:cb:42:1b:c4:62:26:4b:34:cf:b3:e7:bb:4c:c7:c9:43:32:
06:64:ab:b5:3b:80:e4:b3:fc:fe:fa:7e:c2:93:e1:0b:a3:73:
13:08:88:7b:14:2f:05:e5:7e:b2:77:c6:b4:dd:b2:ff:13:25:
e2:a5:38:1e:39:e1:f2:16:b5:6e:06:95:b7:a3:78:2d:37:80:
46:47:91:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:06:14 2024 by rpki-client on console-fra.rpki-client.org