Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3231322e3130372e31362e302f32332d3234203d3e203437353833.roa
File: 3231322e3130372e31362e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: zhFJkj/k1r65tXfYmdk1NlaP9Ws/GgiOoUWzjrp9/fo=
Subject key identifier: B7:A6:8C:A7:83:CB:8C:C6:D7:85:76:08:4D:E4:E1:6C:9E:8B:1F:17
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 20FB3BDF543FA71D88DF211FF8FFDCE41A43A106
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3231322e3130372e31362e302f32332d3234203d3e203437353833.roa
Signing time: Mon 26 Feb 2024 08:52:45 +0000
ROA not before: Mon 26 Feb 2024 08:47:45 +0000
ROA not after: Mon 24 Feb 2025 08:52:45 +0000
asID: 47583
IP address blocks: 212.107.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:fb:3b:df:54:3f:a7:1d:88:df:21:1f:f8:ff:dc:e4:1a:43:a1:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Feb 26 08:47:45 2024 GMT
Not After : Feb 24 08:52:45 2025 GMT
Subject: CN=B7A68CA783CB8CC6D78576084DE4E16C9E8B1F17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7b:e4:9f:83:51:59:d4:a9:dd:1a:67:b6:f5:
c4:78:ff:3a:87:e1:07:89:91:be:cc:43:75:f8:27:
2b:c1:af:42:5f:8f:6a:83:90:c0:74:b3:0a:4f:88:
3a:ad:ce:48:1b:ff:ad:cf:a0:34:27:57:55:a0:99:
99:59:f5:cc:5d:be:02:3a:6b:85:1c:2b:c5:b3:8e:
93:9b:84:05:ff:b4:e9:72:49:ee:73:cb:42:77:77:
ec:b1:24:2f:b1:51:2c:f2:8d:9b:75:d2:83:8c:fd:
82:27:b3:dd:c7:19:d6:26:1c:e7:c6:f7:bf:bf:a2:
2b:2c:f6:db:f7:b6:65:99:a3:34:8b:06:1d:df:6c:
66:32:e0:12:e9:8d:5a:c2:6e:03:b1:02:f7:f7:35:
02:61:97:50:6e:90:31:f4:3d:1b:1c:49:16:59:41:
51:7e:e4:83:ab:2c:43:5e:4d:4b:1f:55:27:db:c4:
73:7d:e7:b2:80:7c:0b:31:59:9e:34:5f:8d:bc:7c:
76:89:37:8c:2e:3c:9b:4f:74:e0:16:c9:80:bb:07:
54:9e:5d:c1:99:83:67:ec:a8:da:7f:d0:e1:38:58:
28:71:95:d1:e1:71:f9:38:e4:4f:ed:5d:fb:80:d4:
c0:c9:fd:6d:75:ab:be:8c:1c:98:89:3d:02:80:4a:
8e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A6:8C:A7:83:CB:8C:C6:D7:85:76:08:4D:E4:E1:6C:9E:8B:1F:17
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/3231322e3130372e31362e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.107.16.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:4a:c5:22:fe:56:9a:80:9c:33:39:1a:63:e5:12:f7:f8:c1:
c0:39:a1:56:4f:ce:3b:d3:c9:cc:e0:71:a3:43:27:2b:e1:3c:
bc:eb:ca:72:ab:82:0f:20:5c:3a:b4:5a:46:15:e1:da:52:c4:
69:23:62:f3:76:5f:f9:60:1d:7a:bc:80:8b:c9:ea:b1:38:15:
42:9b:4c:f8:f0:a3:e8:74:41:76:f9:ae:3c:34:e8:cf:2c:bf:
21:dd:c7:48:48:37:10:db:63:09:6c:1f:0a:b8:66:5f:9a:1d:
80:85:2f:c0:41:20:9c:b7:dd:6a:8b:d3:4b:66:74:a7:29:87:
e2:1a:49:55:5d:40:93:b7:94:da:9e:e1:49:44:fc:63:25:1d:
51:f6:5d:cf:ce:85:3e:07:80:f4:f1:c9:fa:a6:c1:10:ed:35:
27:12:fa:a9:46:2e:9a:74:ae:d6:68:45:8e:0b:66:fd:ad:4e:
f6:57:78:28:f2:17:82:5f:39:44:04:d6:52:2e:db:9a:4b:50:
b4:e8:4d:c2:33:9d:78:82:74:32:95:de:f4:47:84:fb:f1:f6:
28:ef:a5:fe:91:d4:b0:95:32:67:d6:9b:51:bf:13:01:5d:3a:
82:ff:5c:96:81:e0:f7:f1:9a:fb:d5:e9:de:18:6d:9b:3b:3a:
d1:77:17:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 10:15:39 2024 by rpki-client on console-ams.rpki-client.org