Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e3135302e302f32342d3234203d3e203437353833.roa
File: 3139342e33312e3135302e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: ZhRWenuYRQaK9WlKEywJT5zB5Hm3crdkk2DuZX+jIbI=
Subject key identifier: 86:A4:16:AF:75:45:C2:E2:4D:F4:48:91:93:41:3A:CA:35:AD:29:F3
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 65B57E1C074303BF712A7934E896346E9AB78450
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e3135302e302f32342d3234203d3e203437353833.roa
Signing time: Mon 26 Feb 2024 08:52:46 +0000
ROA not before: Mon 26 Feb 2024 08:47:46 +0000
ROA not after: Mon 24 Feb 2025 08:52:46 +0000
asID: 47583
IP address blocks: 194.31.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:b5:7e:1c:07:43:03:bf:71:2a:79:34:e8:96:34:6e:9a:b7:84:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Feb 26 08:47:46 2024 GMT
Not After : Feb 24 08:52:46 2025 GMT
Subject: CN=86A416AF7545C2E24DF4489193413ACA35AD29F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:06:8a:30:bc:1f:26:c9:2f:d9:4f:31:35:e9:
2b:38:a0:fa:76:af:9e:fb:ec:e7:85:65:4f:c7:b3:
cb:fd:9c:2e:a0:42:c6:5c:e0:76:24:e6:2d:b3:76:
67:d6:d8:58:c8:c3:1f:5c:34:8b:f9:77:6c:75:08:
e5:39:42:ee:51:af:dc:76:a9:09:1a:9f:64:71:3f:
c2:d8:58:1f:98:d9:98:04:49:4c:b7:36:55:ee:02:
ba:e0:8d:b9:30:78:84:40:56:cb:9b:e1:3c:0b:cd:
91:d4:a0:3f:99:f8:ac:6f:34:d9:e9:5a:7b:d9:f1:
d6:9e:ca:fd:cb:28:5c:ca:b1:83:dd:e8:57:33:8a:
b1:9f:a1:5c:b1:bb:ef:b4:00:1e:f5:93:49:7a:84:
aa:91:26:94:07:90:45:9a:a8:b2:0b:28:84:6b:fd:
37:ff:0d:ff:8a:b4:98:e7:6f:6a:bb:9c:4e:5e:49:
f1:9e:0f:86:ba:90:0d:60:4b:e6:1b:2a:0d:fd:f6:
e6:2b:04:6d:6e:8c:75:dd:44:14:2d:34:a6:57:a5:
7b:9d:60:75:1d:0d:dc:fd:b3:33:13:c7:68:31:8a:
fd:65:93:22:64:81:f8:82:ed:31:65:1f:c7:f8:6b:
dd:49:e0:77:e2:b1:40:52:eb:85:5e:dc:42:1a:84:
c6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A4:16:AF:75:45:C2:E2:4D:F4:48:91:93:41:3A:CA:35:AD:29:F3
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e33312e3135302e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.150.0/24
Signature Algorithm: sha256WithRSAEncryption
27:98:b1:ec:0d:49:59:b4:bb:71:9e:d7:af:bc:2b:7b:4a:0f:
a7:fb:83:36:4c:38:e3:87:43:5a:a6:f7:96:40:b6:c8:98:34:
46:c1:50:63:75:2a:b5:6a:84:4b:0a:2a:bc:6e:b0:61:f9:18:
a4:64:82:20:f9:bf:70:c3:18:41:b8:fa:76:b2:54:ff:3a:4b:
10:89:6e:fe:3b:50:59:20:b8:49:4d:bc:eb:74:ef:f3:d5:1f:
bd:a4:0f:bd:b5:dc:30:c6:fa:32:6e:59:c7:e7:26:7a:21:20:
7b:f3:52:ee:e9:4d:4f:46:91:fc:aa:e6:ab:41:90:ab:78:cc:
4f:63:5f:12:fd:02:e1:0d:10:d9:df:e2:f5:4b:3b:e3:2a:7a:
7a:ad:67:58:10:1a:d3:8b:cd:23:fe:e2:fa:e7:e7:34:21:4b:
13:61:5a:cb:b8:09:cb:44:f7:3d:e4:e4:09:69:ab:00:cd:f7:
53:6f:81:f9:bb:7d:8b:d7:c5:25:e4:12:e4:c6:a8:f7:9e:98:
99:9b:a6:6b:07:07:4e:c3:bd:1d:47:4c:0a:ac:93:86:61:f6:
63:9a:00:85:56:1b:39:b0:97:60:25:dd:ba:d5:24:4d:9b:97:
c6:fe:9b:83:30:44:3c:aa:0f:79:41:d3:bd:8f:b4:08:a1:f9:
3d:21:43:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 17:02:40 2024 by rpki-client on console-ams.rpki-client.org