Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/39322e3234392e34342e302f32332d3234203d3e203437353833.roa
File: 39322e3234392e34342e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: jQ496A5BKv5uhcwBiLrMwsvrAKeYz1uhANw/54zhu5g=
Subject key identifier: 6D:E0:4E:95:AF:31:A4:BF:50:B8:8A:81:C1:C1:4B:BD:9E:26:6D:10
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 476CDC280F70B021696EB2BB14855F0F5F28BD25
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/39322e3234392e34342e302f32332d3234203d3e203437353833.roa
Signing time: Mon 26 Feb 2024 08:52:41 +0000
ROA not before: Mon 26 Feb 2024 08:47:41 +0000
ROA not after: Mon 24 Feb 2025 08:52:41 +0000
asID: 47583
IP address blocks: 92.249.44.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:6c:dc:28:0f:70:b0:21:69:6e:b2:bb:14:85:5f:0f:5f:28:bd:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Feb 26 08:47:41 2024 GMT
Not After : Feb 24 08:52:41 2025 GMT
Subject: CN=6DE04E95AF31A4BF50B88A81C1C14BBD9E266D10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0a:e2:23:f2:f1:3c:a0:f7:30:e4:a2:c2:65:
9d:c2:d6:fd:68:f7:02:38:04:25:e5:ff:87:8a:76:
f3:3d:45:e8:83:59:32:d4:cb:01:05:bc:96:1b:c1:
85:f2:3a:31:7c:a8:eb:4e:3e:4c:97:d8:ae:91:23:
86:03:2e:93:58:ec:46:e1:7f:74:00:82:8c:0e:60:
f3:2e:62:c8:da:de:78:21:7f:f1:f6:70:14:d3:6f:
d5:d5:c9:de:df:2a:ea:72:95:94:9e:b7:32:25:69:
38:6f:de:66:ee:fb:32:68:16:d4:93:6d:51:7a:91:
67:5a:c3:a9:82:c8:8c:8f:65:b0:70:e7:ff:17:1b:
d8:2a:2c:5e:6e:27:87:9a:1c:2f:8a:4a:43:2d:9f:
bc:90:20:59:01:ec:ff:cb:5b:9f:03:5f:be:4d:ee:
12:db:57:fd:c6:64:8e:f9:17:47:7e:80:d2:b7:40:
96:75:2d:d1:56:33:73:53:c1:42:bb:30:82:2d:2a:
c4:f1:35:39:0e:98:fe:e8:ee:64:fe:2b:62:af:2d:
5c:c9:59:ac:6a:bb:44:c1:1b:a6:6c:a8:24:b2:05:
84:f9:f3:33:c4:49:3f:77:af:4e:0d:d6:82:f4:50:
ef:10:10:d6:c7:15:ec:3d:ad:50:61:1b:cd:70:6b:
1f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E0:4E:95:AF:31:A4:BF:50:B8:8A:81:C1:C1:4B:BD:9E:26:6D:10
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/39322e3234392e34342e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.44.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:4b:71:0e:ae:56:c5:09:8f:d0:02:13:76:a1:70:bd:44:17:
30:86:86:e4:52:9e:df:3e:39:5e:0b:d2:07:8e:dc:e6:c1:c3:
6d:21:56:9d:3f:bc:8c:d5:be:3c:1f:97:fd:2f:2b:10:cd:2f:
c8:0f:03:53:1f:d4:ba:78:8c:0e:ca:d7:a9:1b:87:22:dd:3c:
20:f4:d4:8e:3d:2f:b3:62:57:82:8f:9c:53:27:aa:41:76:4a:
a1:e3:cd:03:94:5c:a8:a9:b7:d8:01:f1:37:2d:a2:00:9c:94:
77:89:94:f2:32:3a:96:85:fb:b2:a6:15:22:dd:ae:b6:d8:9a:
2d:ae:b4:88:a8:d3:e4:81:ef:9b:3d:66:b7:5c:c9:d2:f2:e4:
88:37:bb:a2:a6:e0:54:fd:b4:91:12:28:0a:fc:58:31:98:e0:
c6:d1:e1:1f:65:fa:2c:17:56:04:f4:3e:6f:55:bb:8c:37:7c:
be:c1:d2:9b:b5:87:e5:e0:2c:1c:fb:b3:2b:4e:eb:5a:f0:cc:
4a:a7:b0:26:73:e8:7e:27:d4:53:38:2d:85:bc:23:71:a9:b9:
47:61:b0:ee:55:be:20:2e:d4:1e:d1:db:93:fe:47:85:ac:19:
c2:aa:54:2b:aa:6d:74:d2:95:a3:0a:f5:2e:12:ad:c4:bd:73:
88:a2:3a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:07:05 2024 by rpki-client on console-fra.rpki-client.org