Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e32322e3134342e302f32332d3234203d3e20323034313730.roa
File: 3139332e32322e3134342e302f32332d3234203d3e20323034313730.roa (raw, json)
Hash identifier: eKlYBgMoZcke9QcPvjNATb3sahI60R/zFiAO16jiUII=
Subject key identifier: F3:0A:36:7A:A0:D3:21:5B:96:A4:C3:75:75:85:92:69:43:F6:A2:D3
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 1AE65E80C66BAF7BCFAE32179F2C129E40A793BA
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e32322e3134342e302f32332d3234203d3e20323034313730.roa
Signing time: Mon 26 Feb 2024 08:52:41 +0000
ROA not before: Mon 26 Feb 2024 08:47:41 +0000
ROA not after: Mon 24 Feb 2025 08:52:41 +0000
asID: 204170
IP address blocks: 193.22.144.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:e6:5e:80:c6:6b:af:7b:cf:ae:32:17:9f:2c:12:9e:40:a7:93:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Feb 26 08:47:41 2024 GMT
Not After : Feb 24 08:52:41 2025 GMT
Subject: CN=F30A367AA0D3215B96A4C3757585926943F6A2D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:61:43:61:30:4b:fb:2d:f5:28:6c:22:59:58:
05:ff:60:22:b4:0b:54:01:ed:3f:72:ee:e1:6b:b8:
2b:eb:9a:a0:79:a7:45:5f:8e:bb:b9:08:e9:c1:0e:
0d:9c:3b:e2:de:37:8c:c7:cb:3a:3f:1a:53:f0:aa:
5d:f6:1e:28:ce:52:39:be:35:63:18:0f:5f:7c:5e:
e0:de:05:2b:6f:9d:1c:82:20:8e:c5:a9:03:af:f1:
e7:65:97:aa:be:3b:dc:65:50:e8:c1:d1:7e:64:fb:
31:2d:0a:bb:e2:14:83:f4:a6:2b:eb:07:2e:6a:c1:
38:95:1f:70:ea:dc:ba:f0:78:3f:b7:6f:85:8d:b2:
bd:37:12:e0:cd:d4:96:60:1f:a5:c5:51:51:89:f2:
d7:b5:e5:cc:8d:bf:23:de:2a:ae:3c:18:88:04:58:
fd:5c:e8:df:83:63:70:62:38:09:47:b9:cb:55:06:
62:8e:0c:0a:ff:f9:f7:3b:a0:f7:7c:a1:0b:4c:fa:
fe:30:41:82:be:08:b9:90:ba:2a:81:10:ab:e6:8f:
98:c9:42:5f:2c:8e:4a:be:00:d5:97:f5:ea:72:c3:
fc:ea:21:84:bf:bb:8e:1a:52:61:18:f7:9f:d3:d1:
6b:1e:6c:cf:44:47:73:4c:c3:3f:d6:79:79:b8:53:
88:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0A:36:7A:A0:D3:21:5B:96:A4:C3:75:75:85:92:69:43:F6:A2:D3
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139332e32322e3134342e302f32332d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.144.0/23
Signature Algorithm: sha256WithRSAEncryption
01:d5:20:19:dd:e8:91:d2:c8:db:75:9b:23:82:b2:22:3f:f1:
74:6b:76:57:c3:6f:07:6f:64:c1:a9:7e:1c:48:ab:2b:5b:f5:
c3:87:dc:16:d3:87:70:53:84:2e:b6:53:1a:d3:9c:ea:bb:46:
c8:30:70:47:bd:f8:88:1e:d2:d8:1a:38:d2:55:1d:a9:69:04:
db:d4:6a:a8:ac:1d:2e:13:0b:96:c6:ec:67:e3:6c:22:a8:1f:
3f:48:81:17:11:a2:12:b4:7e:65:6a:b3:07:e1:ec:00:58:5a:
5e:1b:32:6d:7d:71:d5:fc:c1:cb:33:f5:58:47:6c:69:8a:8b:
d7:7c:f5:80:68:fa:c5:c2:a6:f0:7b:6e:5b:7d:63:1e:42:0f:
c5:bb:68:33:d6:87:23:43:87:94:b3:80:33:7c:62:74:9b:70:
a2:4a:8f:22:3d:4c:6f:64:db:d1:86:a4:5d:6c:5a:e5:f2:d4:
e7:bc:45:9f:a7:dd:ab:82:9e:98:cb:6f:58:db:4d:62:98:83:
31:2d:59:99:92:6b:89:1e:92:1a:57:c6:86:05:9b:b1:aa:72:
52:80:b6:31:90:46:2c:12:ed:59:5a:e0:47:f9:b3:9c:fd:27:
06:0b:6c:a2:b8:d6:80:04:2f:a2:2d:bd:51:1f:60:47:c6:e8:
6c:bc:c0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:49 2024 by rpki-client on console-ams.rpki-client.org