Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e382e3133322e302f32332d3332203d3e203531313637.roa
File: 34352e382e3133322e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: bDJpJXMnAgJExatH1yxl2+QfJuGWzdFwnr+6dn4Ij/Y=
Subject key identifier: 40:4E:72:2F:02:A9:7B:C8:F6:88:C4:53:31:A5:B0:68:28:BF:43:0B
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 141CFBC35F1CEE89C567C465B659B0B7E8D31F0F
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e382e3133322e302f32332d3332203d3e203531313637.roa
Signing time: Mon 26 Feb 2024 08:52:44 +0000
ROA not before: Mon 26 Feb 2024 08:47:44 +0000
ROA not after: Mon 24 Feb 2025 08:52:44 +0000
asID: 51167
IP address blocks: 45.8.132.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:1c:fb:c3:5f:1c:ee:89:c5:67:c4:65:b6:59:b0:b7:e8:d3:1f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Feb 26 08:47:44 2024 GMT
Not After : Feb 24 08:52:44 2025 GMT
Subject: CN=404E722F02A97BC8F688C45331A5B06828BF430B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:07:0b:76:ac:59:a4:df:07:e2:95:55:ca:4f:
1f:59:5d:b0:99:7c:82:55:fe:75:f6:75:c4:fc:cc:
75:26:aa:58:d5:aa:12:4f:93:71:4d:30:50:0b:cf:
eb:be:78:d4:f7:a0:9d:df:74:6b:30:73:b0:da:e8:
37:a3:99:5c:d7:d2:d4:6e:b6:d2:57:8c:88:39:3c:
81:c7:43:a7:6c:0c:dc:f8:ac:f4:1b:c0:13:0a:12:
b0:4d:fc:22:95:8e:74:30:7c:09:4d:a1:79:17:53:
56:ea:4c:a4:a0:cb:c1:dd:b5:f7:d6:3f:22:45:10:
11:11:91:c3:73:98:c0:04:e4:ed:d2:03:4e:1f:a1:
72:8b:b5:06:21:08:dd:27:51:31:b9:af:24:5a:58:
ae:44:e8:36:99:d3:ba:57:35:91:9c:b9:e2:21:d1:
a9:7e:a8:83:bd:c4:56:39:39:2e:d1:32:7e:fb:f4:
64:1e:f8:b7:99:f2:bd:a3:9b:6b:62:51:24:d6:02:
5d:3b:d5:e1:13:cf:1e:bb:d0:92:d2:d8:5d:9b:0d:
9d:89:20:ac:8a:fc:a9:ae:6c:17:7e:47:01:22:e3:
a0:52:ab:91:93:a1:43:11:08:bd:85:ee:ff:f0:18:
86:07:78:ae:08:5c:ac:63:74:aa:bc:b2:0c:1d:13:
12:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:4E:72:2F:02:A9:7B:C8:F6:88:C4:53:31:A5:B0:68:28:BF:43:0B
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e382e3133322e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.132.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:d7:ff:6f:22:7e:aa:77:91:ec:b0:f6:85:24:ad:97:98:7a:
65:f8:89:f4:07:d9:12:4a:d9:b1:78:ad:48:e3:80:79:55:da:
6a:bd:ad:35:15:30:c8:95:dd:fa:fe:d1:61:95:71:ef:8d:63:
37:bf:b0:cb:43:22:3f:7c:4e:bf:7c:15:97:aa:a8:d2:d4:4c:
35:cc:bf:64:8d:ec:c5:e4:19:35:7b:73:ac:5b:1e:71:13:b8:
c9:1b:bb:94:8b:6c:39:93:e5:14:43:3d:14:d8:d3:ef:85:cc:
43:18:f3:74:2f:18:0a:51:e7:79:92:45:fb:b6:62:f7:66:3a:
4c:0d:a5:7f:5d:4b:2d:e6:7f:55:27:84:7a:37:62:e1:86:60:
0a:1a:50:b8:fc:01:72:48:49:af:3d:01:f0:b0:74:99:eb:05:
27:23:c8:c1:07:d6:1e:58:4a:44:b2:02:6c:87:da:bf:dd:d7:
3a:73:4d:fd:0d:5d:31:2a:33:97:dd:53:70:22:ec:82:2b:87:
6a:fb:a7:19:99:4c:2d:4d:aa:44:3d:7f:7a:36:0b:bb:ee:8d:
0f:49:b1:23:ab:d1:5f:47:cb:32:e2:50:45:f8:3a:46:cb:d1:
b2:00:f5:20:8f:7a:2c:71:72:9f:dc:d3:df:e8:5c:f3:b8:dd:
4a:5a:19:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 09:34:37 2024 by rpki-client on console-fra.rpki-client.org