Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/36322e332e34352e302f32342d3234203d3e20313336373837.roa
File: 36322e332e34352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: mh6oIIV8i/xZee3IqEMEsP1CBTJGCApH87ilAW53ZRQ=
Subject key identifier: 77:65:1E:9E:1B:B6:2F:0E:03:8B:A3:76:CE:8F:12:7B:40:22:7B:12
Certificate issuer: /CN=b97bcfac27bbaf19de1d31e53629726c1e4caaa2
Certificate serial: 34D8368D13AC74E5B5AAE1E0BC3F5BE693B7F48A
Authority key identifier: B9:7B:CF:AC:27:BB:AF:19:DE:1D:31:E5:36:29:72:6C:1E:4C:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXvPrCe7rxneHTHlNilybB5MqqI.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/36322e332e34352e302f32342d3234203d3e20313336373837.roa
Signing time: Thu 21 Mar 2024 09:13:17 +0000
ROA not before: Thu 21 Mar 2024 09:08:17 +0000
ROA not after: Thu 20 Mar 2025 09:13:17 +0000
asID: 136787
IP address blocks: 62.3.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/B97BCFAC27BBAF19DE1D31E53629726C1E4CAAA2.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/B97BCFAC27BBAF19DE1D31E53629726C1E4CAAA2.mft
rsync://rpki.ripe.net/repository/DEFAULT/uXvPrCe7rxneHTHlNilybB5MqqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:d8:36:8d:13:ac:74:e5:b5:aa:e1:e0:bc:3f:5b:e6:93:b7:f4:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97bcfac27bbaf19de1d31e53629726c1e4caaa2
Validity
Not Before: Mar 21 09:08:17 2024 GMT
Not After : Mar 20 09:13:17 2025 GMT
Subject: CN=77651E9E1BB62F0E038BA376CE8F127B40227B12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:a2:33:c5:35:55:bc:84:9e:70:f0:ea:e9:ba:
f9:6a:c0:16:bf:c1:fe:a6:8a:39:b3:32:4e:7b:03:
59:99:55:0f:9f:b4:f9:7c:5d:af:fc:5b:db:55:11:
ad:d0:74:9e:06:cd:e8:42:01:0f:a9:aa:e6:1d:53:
94:18:de:b4:6e:05:84:af:c1:79:ba:6c:f4:4e:fa:
33:15:80:46:fd:d1:22:cf:ec:2c:b3:08:19:ce:bb:
8e:d7:79:d9:b4:96:b4:77:22:66:37:47:b2:66:d9:
77:b2:c9:ec:46:88:f4:21:d0:84:65:4c:75:9a:43:
33:35:91:b0:11:68:6a:09:aa:fd:af:63:06:40:77:
e6:d8:c9:f3:86:27:e6:c0:39:ce:2f:5b:fc:95:d8:
ad:3b:9c:26:f5:7f:71:d7:9b:51:18:0a:b6:fd:ce:
37:de:3d:a6:6a:10:90:82:f9:e5:43:9e:6f:7e:a9:
f6:8f:8e:63:18:ea:9e:27:bc:ff:5a:93:36:05:a5:
99:74:94:6c:6a:05:09:e7:6a:0d:cf:77:b6:86:8a:
17:b1:ef:f3:84:a0:af:00:3c:bc:82:be:24:cb:f2:
d6:d3:7e:94:b5:d8:64:69:8d:ea:45:19:1d:49:db:
e7:8d:21:7e:59:7e:f2:92:11:59:93:6a:29:a9:d9:
8e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:65:1E:9E:1B:B6:2F:0E:03:8B:A3:76:CE:8F:12:7B:40:22:7B:12
X509v3 Authority Key Identifier:
keyid:B9:7B:CF:AC:27:BB:AF:19:DE:1D:31:E5:36:29:72:6C:1E:4C:AA:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/B97BCFAC27BBAF19DE1D31E53629726C1E4CAAA2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXvPrCe7rxneHTHlNilybB5MqqI.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/3/36322e332e34352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.45.0/24
Signature Algorithm: sha256WithRSAEncryption
91:a8:91:24:55:e2:bf:f0:19:89:81:f7:61:d7:d5:02:15:2d:
26:cc:b2:8c:15:b1:e9:0d:e1:a6:48:c0:7d:28:9b:1c:8e:24:
0f:0e:91:fe:8d:ec:f0:2d:48:48:20:9c:e7:9a:85:ad:f4:a3:
2b:c3:dd:3b:d3:d5:1c:60:65:89:cb:af:9d:94:1d:98:1a:e8:
da:70:47:c1:ae:5e:07:2b:99:1a:3f:e0:a1:c0:9c:8e:36:fd:
6b:da:01:0e:8f:32:11:2a:4b:96:50:b4:4b:3e:ec:85:b9:0d:
50:3a:42:d8:27:55:ce:ca:41:bf:9b:c0:98:dd:58:2e:e9:c5:
85:f5:7c:c1:d9:4d:80:a9:8a:41:29:38:a6:c9:b0:fc:64:55:
31:8a:8e:c6:a8:6d:72:04:98:03:f7:93:79:e2:85:17:bb:45:
23:97:6f:83:15:71:a9:5d:af:3f:45:a6:58:2d:d0:3f:54:de:
48:4d:38:d1:b3:55:29:db:c2:4b:da:d4:5f:19:ae:ba:a1:bc:
33:19:53:7e:0c:1b:20:e6:76:42:c3:59:91:d7:5a:ea:f8:3c:
10:47:33:66:01:d6:ab:73:a8:4f:45:c8:7a:8b:13:84:4e:56:
d0:95:2a:03:63:4c:19:13:c9:9c:97:98:4a:cb:2b:f6:6b:41:
69:d4:93:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 20:21:24 2024 by rpki-client on console-fra.rpki-client.org