Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3138302e36332e302f32342d3332203d3e20313336373837.roa
File: 352e3138302e36332e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: 1nqz9JUdpEXE/gK0xeg1tyCXVy1N3i+J8Lze/FhBd3o=
Subject key identifier: C1:0D:EC:90:E1:E2:B1:9A:5F:8D:FE:11:11:AC:70:22:56:BD:05:F4
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 30757EE8604A612CF1672E10AF0A860BAF71E3DE
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3138302e36332e302f32342d3332203d3e20313336373837.roa
Signing time: Mon 26 Feb 2024 08:52:44 +0000
ROA not before: Mon 26 Feb 2024 08:47:44 +0000
ROA not after: Mon 24 Feb 2025 08:52:44 +0000
asID: 136787
IP address blocks: 5.180.63.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 16:15:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:75:7e:e8:60:4a:61:2c:f1:67:2e:10:af:0a:86:0b:af:71:e3:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Feb 26 08:47:44 2024 GMT
Not After : Feb 24 08:52:44 2025 GMT
Subject: CN=C10DEC90E1E2B19A5F8DFE1111AC702256BD05F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:34:1e:9a:e0:91:b8:73:93:cb:ae:c8:6c:c9:
c6:91:32:cb:19:e1:b0:7d:a5:c7:9f:9c:bb:99:80:
f6:41:af:08:77:98:8b:94:7e:7d:86:6c:2e:53:1e:
8d:b1:5b:a1:71:d8:6d:0b:f5:6f:e7:96:cf:3d:5d:
05:19:fb:6b:cb:db:d7:a6:5a:96:35:31:6c:bc:5f:
3e:40:d5:c6:01:c7:58:1a:1d:4a:2d:54:e4:11:58:
df:df:55:8a:0e:14:ed:cf:0d:05:d4:2b:36:70:2c:
0f:58:59:b3:e9:ac:85:5b:5d:5d:96:77:a2:98:18:
1e:e1:78:62:e0:26:dc:16:84:a1:c2:74:da:91:e2:
14:d4:49:96:da:2b:35:fe:66:90:74:55:4f:d9:59:
4d:b6:48:67:1f:72:29:67:b9:3f:df:28:84:82:47:
a7:32:f7:60:84:aa:e4:a9:d5:f8:fa:62:42:84:78:
6e:96:66:3a:5c:f8:97:1b:04:cf:be:ed:1e:51:19:
34:7f:c3:0b:88:c8:52:0a:9c:dc:e6:35:44:2e:1a:
f5:93:f5:e6:30:80:d9:be:0e:59:26:ec:d5:e3:e4:
43:af:a4:7f:bd:c1:c8:c0:f6:3e:30:33:80:bf:0f:
25:23:2a:14:5d:97:80:3f:70:48:88:a3:34:c2:53:
28:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0D:EC:90:E1:E2:B1:9A:5F:8D:FE:11:11:AC:70:22:56:BD:05:F4
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3138302e36332e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.63.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:81:3c:80:0a:64:7d:49:25:47:c8:6b:66:2a:5e:bd:1e:65:
05:82:14:53:60:35:fb:88:9b:d2:26:d4:c1:25:69:dd:d5:b7:
0d:23:ec:c2:13:f2:69:71:80:69:52:2b:7e:2f:e8:3d:43:65:
11:e6:ae:58:a0:af:8c:88:56:8f:d4:87:e8:19:76:4c:dd:b5:
c9:1b:24:a2:44:0c:8c:78:43:86:04:aa:1e:48:63:2e:6e:b0:
c1:76:66:45:26:fc:f4:5d:72:8e:6b:a3:6a:97:01:ba:d7:67:
e6:62:59:3a:e9:ac:69:c2:d5:7a:36:a8:71:12:25:fd:a8:61:
11:fe:6d:ed:96:80:fd:bd:b7:41:03:7c:d6:e8:3d:1a:33:1d:
2c:9d:5e:8b:ae:1f:96:e4:bf:84:ed:57:4a:35:77:01:50:59:
93:41:65:42:37:d7:7e:a8:4b:7c:4b:43:ac:2e:b8:83:50:55:
5e:86:a6:53:78:93:6b:76:93:fa:47:33:8b:f4:16:5f:36:ad:
35:61:7f:80:fb:c0:12:79:c9:32:03:a5:4b:c1:27:41:f9:0c:
36:07:22:68:20:88:96:77:45:aa:b0:6c:d0:cc:23:ab:8e:87:
db:c4:18:9f:af:fb:80:e9:4b:a4:38:58:2c:e8:18:d1:de:f1:
68:6f:b9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 01:08:36 2024 by rpki-client on console-fra.rpki-client.org