Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e39302e3132302e302f32332d3332203d3e203531313637.roa
File: 34352e39302e3132302e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: OkmXdfJ4arWRQra8ORAvx8vzzNnb3MkZIUxNlcnfmg4=
Subject key identifier: E3:4E:F2:D1:88:FA:76:C0:CA:93:64:FF:4B:9F:00:7D:AD:DC:C3:35
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 5892D115BDE24C47E1554A417FCE4E7989EAC039
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e39302e3132302e302f32332d3332203d3e203531313637.roa
Signing time: Wed 22 May 2024 12:52:39 +0000
ROA not before: Wed 22 May 2024 12:47:39 +0000
ROA not after: Wed 21 May 2025 12:52:39 +0000
asID: 51167
IP address blocks: 45.90.120.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:92:d1:15:bd:e2:4c:47:e1:55:4a:41:7f:ce:4e:79:89:ea:c0:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: May 22 12:47:39 2024 GMT
Not After : May 21 12:52:39 2025 GMT
Subject: CN=E34EF2D188FA76C0CA9364FF4B9F007DADDCC335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b9:4e:f6:9b:0a:01:1e:12:e5:90:9b:9a:f1:
76:69:76:b6:6d:0b:8f:c7:9c:17:6b:c9:09:aa:55:
00:f2:c6:30:da:df:7a:b7:37:a3:4a:b1:11:88:1c:
76:54:26:60:91:16:67:83:08:48:39:97:0b:e0:f7:
f2:af:10:f9:b9:46:5b:f1:74:3b:e0:80:4a:b7:aa:
37:11:ba:56:dc:2d:e0:d2:8d:d1:15:ab:cd:3d:ba:
71:4c:8d:78:f6:1d:0c:6b:d9:02:02:24:00:ae:e0:
49:de:3c:0d:89:98:02:b5:3a:5c:ab:79:d3:ba:a4:
cc:d5:07:ca:d0:77:d4:42:06:86:2f:1c:4e:13:64:
d4:6a:09:01:d1:d9:24:4a:dd:45:58:e3:5f:12:f0:
b3:7d:55:62:60:92:b1:15:94:43:c0:8e:9a:3d:aa:
e1:e5:ae:46:67:e5:14:7d:6d:b3:e0:05:36:d9:a3:
ff:df:f3:0c:9f:c4:0d:2a:51:f4:10:f9:2f:64:8d:
4b:eb:e0:4e:a8:46:35:82:13:e3:f7:6a:55:02:5b:
ef:59:4f:89:52:09:17:f8:c6:74:f7:4c:ca:56:4a:
d6:aa:23:85:7c:e4:cd:f2:12:9b:2a:b8:96:bc:7e:
9a:d9:87:fa:89:0b:31:21:16:dc:0d:70:12:14:92:
aa:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4E:F2:D1:88:FA:76:C0:CA:93:64:FF:4B:9F:00:7D:AD:DC:C3:35
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e39302e3132302e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.120.0/23
Signature Algorithm: sha256WithRSAEncryption
23:63:3a:33:82:7a:7d:85:a4:b5:64:c5:e4:3b:72:bb:0c:6c:
fc:d2:e2:ac:c8:71:ed:82:4b:6f:4a:ce:cc:f7:db:f3:26:47:
7a:ad:bb:24:9b:05:44:38:2a:55:fc:fb:05:a7:a8:10:1c:af:
bb:80:9d:d9:09:61:ce:09:31:ee:7d:a3:7b:66:25:a3:be:7c:
99:c9:a0:d7:15:54:44:d8:8c:ab:5c:5c:14:aa:1f:2d:57:f9:
1a:4c:3e:90:61:3e:b0:24:18:b6:07:dd:6e:5e:c4:53:83:c5:
97:f1:5a:cb:b2:8f:ae:2d:a4:92:40:8c:d2:65:ed:5f:05:e3:
86:a3:a2:bd:df:f6:3b:b9:9e:27:b1:79:fa:52:1f:c2:15:39:
da:eb:f4:64:78:e4:67:a1:67:a5:33:6d:22:53:7b:35:ef:8d:
33:54:8e:d0:3d:e8:77:53:ba:7b:51:f1:75:90:16:87:35:e4:
76:86:4f:e9:d8:c0:78:b3:91:1b:78:0b:8c:56:64:d1:70:09:
29:31:51:17:ba:66:a3:80:fd:26:1c:c6:eb:f2:86:c8:a0:38:
b9:5f:11:f8:b1:6a:48:93:1f:18:e4:1d:3a:b0:5e:b7:9c:8b:
2b:d2:72:6c:6d:a6:a5:b4:49:97:7c:f0:59:ac:a9:69:f6:6a:
d9:84:c6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 14:53:57 2024 by rpki-client on console-ams.rpki-client.org