Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e35352e3232382e302f32322d3234203d3e20333936333139.roa
File: 3139342e35352e3232382e302f32322d3234203d3e20333936333139.roa (raw, json)
Hash identifier: XIpXdApf5oasCKbYSeTjguE4dsvYYynskHu/Yjog8co=
Subject key identifier: A0:5A:37:2C:13:1B:94:CC:D2:B8:EC:E3:80:C7:46:B0:7B:A2:48:15
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 4C466820D14BA724082276D963817EBA2F000D15
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e35352e3232382e302f32322d3234203d3e20333936333139.roa
Signing time: Mon 26 Feb 2024 08:52:45 +0000
ROA not before: Mon 26 Feb 2024 08:47:45 +0000
ROA not after: Mon 24 Feb 2025 08:52:45 +0000
asID: 396319
IP address blocks: 194.55.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:46:68:20:d1:4b:a7:24:08:22:76:d9:63:81:7e:ba:2f:00:0d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Feb 26 08:47:45 2024 GMT
Not After : Feb 24 08:52:45 2025 GMT
Subject: CN=A05A372C131B94CCD2B8ECE380C746B07BA24815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cf:42:6c:13:1a:3c:dd:1e:15:4b:76:b6:05:
7c:06:90:0b:bc:4b:92:e8:ec:c8:0f:ae:f3:77:9f:
7a:84:47:b3:7d:08:0c:e6:bc:c6:6f:10:3c:4f:da:
80:44:94:ce:fe:aa:ea:e8:c2:a0:bf:94:e9:59:02:
83:f6:86:f5:1c:ff:db:cf:7b:63:36:fb:f4:1d:9c:
3c:1a:69:b9:52:24:9c:04:ec:37:23:90:a6:98:9c:
08:b5:28:e1:02:b2:50:44:c1:23:e0:53:0e:d8:2a:
f8:6b:82:ec:73:58:42:9f:9d:5f:7e:10:c5:be:ca:
4c:45:c0:3e:23:ba:6c:47:4c:28:8f:cb:38:24:ea:
77:00:47:a9:03:53:3f:e7:c2:14:8d:2a:41:2f:ea:
e6:41:97:2a:f8:d6:5b:b3:b0:61:4f:d7:23:39:b7:
ba:4f:67:46:b7:b3:75:af:98:45:2d:63:1f:42:ee:
75:db:db:b1:cc:b9:ac:29:a0:3d:e3:1b:96:68:f5:
88:9c:a7:79:cd:15:d0:d0:9e:4c:b1:33:6d:bd:46:
31:ed:af:7e:48:f2:e4:ff:91:d9:5a:23:9a:28:de:
a1:31:ac:2f:78:07:a3:06:84:9a:3a:be:cc:3f:63:
bc:0c:49:6f:fe:dd:24:09:6e:2c:4d:6a:4d:21:23:
26:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5A:37:2C:13:1B:94:CC:D2:B8:EC:E3:80:C7:46:B0:7B:A2:48:15
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3139342e35352e3232382e302f32322d3234203d3e20333936333139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.228.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:48:2f:b4:24:b5:87:d6:40:c2:4a:8b:a8:b5:67:23:42:46:
33:09:a9:9d:5c:15:e9:20:74:d1:59:ee:9b:a3:c6:b8:5a:8d:
44:db:60:1e:37:96:05:20:da:a7:c2:99:3f:ae:a9:7a:00:4b:
a6:5c:82:bb:09:64:70:b3:5a:92:53:6e:78:90:e8:9f:70:b4:
28:28:c8:da:95:f6:1f:fa:b1:2a:b4:27:6c:2f:9b:6c:f4:04:
20:eb:bc:62:2d:33:c1:a1:fd:51:b6:ba:7e:7c:53:05:7f:92:
3a:76:49:9f:c2:1c:e2:cf:dc:80:dc:4c:19:cf:7d:bf:03:36:
44:c0:0a:f3:c7:62:a5:32:f2:35:b5:a5:56:d0:11:cf:8a:68:
0e:bf:c4:26:ca:12:2f:75:b3:c4:4b:8b:b1:cf:9c:e7:52:65:
45:bb:94:f7:75:a9:bb:aa:96:7f:c1:d1:ca:98:67:93:47:8e:
df:d8:e3:1b:7f:32:46:8c:07:5b:97:75:02:59:6b:f4:f0:82:
c6:5f:af:da:ed:18:ae:ea:6a:e8:c5:87:56:9e:47:0c:74:41:
fd:fb:1d:70:ae:3b:1c:20:16:89:78:b4:c4:67:e7:c4:74:6a:
91:19:dc:da:cb:63:e9:c0:5d:e0:3a:81:68:1d:53:e0:54:08:
17:bd:ad:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:19:26 2024 by rpki-client on console-ams.rpki-client.org