Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e38302e36302e302f32322d3234203d3e20323033303631.roa
File: 34352e38302e36302e302f32322d3234203d3e20323033303631.roa (raw, json)
Hash identifier: ISKltLArI2RM/aORn9Mba5hpS2QI4y0t/9lWViZ585w=
Subject key identifier: EE:A9:C7:8B:A6:9F:BC:FB:DA:43:45:F2:F0:0E:E5:F7:2B:96:FC:35
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 518E0294C6B5F2F3E988F3006505E7E0CF568413
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e38302e36302e302f32322d3234203d3e20323033303631.roa
Signing time: Mon 26 Feb 2024 08:52:42 +0000
ROA not before: Mon 26 Feb 2024 08:47:42 +0000
ROA not after: Mon 24 Feb 2025 08:52:42 +0000
asID: 203061
IP address blocks: 45.80.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:8e:02:94:c6:b5:f2:f3:e9:88:f3:00:65:05:e7:e0:cf:56:84:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Feb 26 08:47:42 2024 GMT
Not After : Feb 24 08:52:42 2025 GMT
Subject: CN=EEA9C78BA69FBCFBDA4345F2F00EE5F72B96FC35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:91:00:19:7d:68:e7:c3:f1:6f:b4:b8:e3:6e:
df:85:7f:43:c0:ba:b3:07:75:a0:6c:45:2d:46:7a:
7c:03:4c:73:61:3b:4a:15:7e:8b:85:2e:64:58:d4:
e9:5d:fa:30:8d:6d:94:d4:5e:2a:34:b1:92:e1:55:
e0:12:c6:21:1d:71:eb:28:9b:71:d0:1e:22:e4:06:
9c:0d:a3:f4:83:f5:9c:41:93:5a:22:39:08:d1:8e:
08:7a:dc:0b:8f:be:29:3d:ea:01:4d:d5:c7:0c:c6:
b6:2f:31:1b:68:77:a7:90:f1:87:31:8a:d2:32:36:
c2:a3:f2:f1:81:01:15:c6:c4:be:04:3b:a6:64:c0:
d6:1f:f1:c0:d9:7d:c6:18:08:9f:f8:05:bd:29:99:
63:9c:8c:30:eb:ee:c3:e6:b5:a0:11:87:62:d0:04:
fe:24:a6:ad:40:18:44:3a:bc:27:d8:a7:fc:92:a6:
46:07:08:43:87:43:c7:d1:31:3e:3a:60:7e:0f:ef:
0b:24:d7:1d:85:5c:23:70:17:df:81:10:ef:7b:01:
de:a3:00:ee:e6:f3:80:3a:fa:fa:9c:54:a8:19:b9:
d5:58:2b:79:3e:88:db:42:d9:d1:9b:e2:a8:5f:b5:
2a:a8:01:88:f7:3a:68:a1:1f:8f:b5:ed:bc:16:2c:
50:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A9:C7:8B:A6:9F:BC:FB:DA:43:45:F2:F0:0E:E5:F7:2B:96:FC:35
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e38302e36302e302f32322d3234203d3e20323033303631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.60.0/22
Signature Algorithm: sha256WithRSAEncryption
50:2a:ad:cb:d2:9e:9f:e8:66:9d:d1:58:c3:63:53:d4:ee:95:
43:37:e9:63:74:7a:10:ea:9d:b3:40:dd:85:8b:f7:c5:ac:1f:
21:f8:03:8c:0f:5d:c2:fc:42:44:71:26:cf:12:69:29:fa:c7:
62:6d:d8:f7:16:3d:3e:d8:63:77:b9:3a:1e:49:86:4f:c6:f3:
a9:9c:32:43:c6:7c:12:31:7a:24:ed:3d:bf:82:e6:ec:e0:11:
7c:6b:c1:e8:5c:4b:25:b4:0f:64:ff:d0:68:c4:10:e9:64:64:
57:f7:b5:38:f6:ab:69:9e:49:00:9f:44:e2:76:fa:db:06:ad:
34:1d:48:23:c2:13:6d:fb:6b:41:2e:80:0f:d0:ad:6a:46:5e:
66:9a:7d:92:66:32:f8:8d:3e:84:53:59:18:3c:36:c1:1f:78:
8e:f2:bf:fa:06:a1:a0:f1:6e:3d:f4:1a:30:95:31:fb:bf:de:
7d:f9:04:0d:a1:7a:db:2b:01:20:67:cd:cf:ba:a4:7f:5c:30:
39:cb:d7:9d:30:07:e8:b3:ac:4a:ae:49:18:d8:ef:47:16:90:
9f:3d:e5:94:fa:ba:cc:34:f3:30:08:5b:d8:53:e4:b2:f6:fb:
42:15:29:0b:22:1e:70:f0:84:2f:22:e7:d1:1a:a7:aa:62:9f:
b0:fd:c9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 09:34:37 2024 by rpki-client on console-fra.rpki-client.org