Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3231342e3132342e302f32332d3234203d3e203437353833.roa
File: 3138352e3231342e3132342e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: Xvb3FFlUHoFSKY12guMMTjoSFwagJG5hqxmqvGq6PTA=
Subject key identifier: B0:98:76:3E:4C:12:71:EF:E7:C1:67:13:A3:98:45:09:7A:39:3F:EE
Certificate issuer: /CN=b97bcfac27bbaf19de1d31e53629726c1e4caaa2
Certificate serial: 6EA7AFBE03369229252D8A009B74A71EE8C4F3CD
Authority key identifier: B9:7B:CF:AC:27:BB:AF:19:DE:1D:31:E5:36:29:72:6C:1E:4C:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXvPrCe7rxneHTHlNilybB5MqqI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3231342e3132342e302f32332d3234203d3e203437353833.roa
Signing time: Mon 26 Feb 2024 08:53:36 +0000
ROA not before: Mon 26 Feb 2024 08:48:36 +0000
ROA not after: Mon 24 Feb 2025 08:53:36 +0000
asID: 47583
IP address blocks: 185.214.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/B97BCFAC27BBAF19DE1D31E53629726C1E4CAAA2.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/B97BCFAC27BBAF19DE1D31E53629726C1E4CAAA2.mft
rsync://rpki.ripe.net/repository/DEFAULT/uXvPrCe7rxneHTHlNilybB5MqqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:a7:af:be:03:36:92:29:25:2d:8a:00:9b:74:a7:1e:e8:c4:f3:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97bcfac27bbaf19de1d31e53629726c1e4caaa2
Validity
Not Before: Feb 26 08:48:36 2024 GMT
Not After : Feb 24 08:53:36 2025 GMT
Subject: CN=B098763E4C1271EFE7C16713A39845097A393FEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:be:83:1b:15:21:20:f0:a5:81:64:b6:05:ab:
bc:ed:54:0b:de:2c:73:4f:df:d5:9d:b2:47:0d:d2:
d6:a9:b7:f7:71:a1:3e:6a:22:f6:63:4d:9a:00:a1:
7d:ad:13:b5:61:14:70:9e:a3:aa:5d:4d:29:a8:b0:
c0:9e:af:11:69:00:cb:5b:4a:a5:cf:c2:b0:fa:54:
1f:b0:c0:38:22:14:d3:fc:be:d0:50:ed:95:ae:65:
54:6d:2f:93:33:9b:af:49:5b:e2:7c:c0:11:06:69:
fc:5c:16:9c:c2:f3:52:3f:d2:19:bf:d9:a9:3e:45:
4f:8b:c5:96:5a:2f:cb:59:84:d5:e4:16:fd:4d:3f:
b0:22:66:c4:8d:e7:50:c1:76:c8:94:17:5d:9f:f6:
85:a3:54:ae:e1:b8:ba:3a:61:c2:44:bc:d5:5e:c7:
eb:c5:5a:19:a5:00:78:c4:18:2a:e0:36:c0:f4:2a:
d0:05:e0:19:76:07:17:37:ce:10:5d:a5:92:01:16:
b2:f0:58:02:d6:f8:1f:07:cf:e8:24:ee:0a:3b:76:
4c:50:e3:27:e2:a4:34:d9:b7:f1:cd:69:68:90:8e:
d4:b4:a6:a8:cf:b3:c6:70:07:01:51:7e:0f:8f:4a:
00:2f:58:40:9f:43:c5:a5:2e:25:62:c6:5b:f1:e6:
42:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:98:76:3E:4C:12:71:EF:E7:C1:67:13:A3:98:45:09:7A:39:3F:EE
X509v3 Authority Key Identifier:
keyid:B9:7B:CF:AC:27:BB:AF:19:DE:1D:31:E5:36:29:72:6C:1E:4C:AA:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/B97BCFAC27BBAF19DE1D31E53629726C1E4CAAA2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXvPrCe7rxneHTHlNilybB5MqqI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/3138352e3231342e3132342e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.124.0/23
Signature Algorithm: sha256WithRSAEncryption
96:82:9a:4b:58:7c:57:0f:41:b7:d4:af:ba:3a:63:d8:46:36:
1d:b6:bb:35:4d:3a:16:5a:3b:28:31:d0:e0:81:8b:93:73:d4:
08:48:f4:cb:b1:63:78:4a:7d:51:d3:d8:48:33:4d:e6:c7:2e:
b4:2b:46:88:c0:76:13:7a:a2:d2:1e:0f:63:0c:6e:52:91:f8:
4e:c3:da:82:10:46:a2:a9:6f:2d:d2:26:70:0d:40:2e:26:31:
85:70:0d:2b:91:02:4b:bf:75:1f:a1:cd:80:49:bd:fb:cd:a9:
b8:75:1f:16:cb:10:16:7b:8c:f0:03:e4:be:0d:72:e8:52:06:
51:7f:c6:d0:d0:f8:fb:f4:42:2a:ee:0f:a9:6b:02:ab:96:7a:
18:fb:15:0c:bb:45:76:0c:2b:af:c6:d6:49:30:0f:89:cd:66:
74:7f:92:85:28:c9:2e:47:2d:0d:9a:39:f6:d8:68:29:3e:43:
ce:f6:9d:d7:80:5e:c8:e8:0b:bf:66:41:e7:10:02:b5:13:7b:
d3:68:48:7c:92:f4:5d:69:31:04:3f:cc:11:18:75:c7:10:eb:
36:40:20:f3:37:ae:48:93:d8:9c:dd:bd:aa:ea:96:e3:6b:ab:
08:e4:37:be:a0:58:c5:54:57:4c:f5:85:ff:8c:8b:80:1b:9c:
37:b5:d5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 10:34:56 2024 by rpki-client on console-fra.rpki-client.org