Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/39322e3234392e34362e302f32332d3234203d3e203437353833.roa
File: 39322e3234392e34362e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: BWbzxcJ/EkhL+T9wQPciyeWMaz0xp0maSz0RwC8cyBE=
Subject key identifier: 6F:6A:30:96:F7:E8:EB:C4:86:A8:C0:B7:A5:AB:AA:6D:E2:82:2E:C0
Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Certificate serial: 1EE7FDA358462AE0D81EA927DCF423D8FB72FEF1
Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/39322e3234392e34362e302f32332d3234203d3e203437353833.roa
Signing time: Mon 26 Feb 2024 08:52:44 +0000
ROA not before: Mon 26 Feb 2024 08:47:44 +0000
ROA not after: Mon 24 Feb 2025 08:52:44 +0000
asID: 47583
IP address blocks: 92.249.46.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:e7:fd:a3:58:46:2a:e0:d8:1e:a9:27:dc:f4:23:d8:fb:72:fe:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a
Validity
Not Before: Feb 26 08:47:44 2024 GMT
Not After : Feb 24 08:52:44 2025 GMT
Subject: CN=6F6A3096F7E8EBC486A8C0B7A5ABAA6DE2822EC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7c:52:ba:1a:65:97:de:0b:b3:df:ba:90:4f:
16:58:f3:e6:ef:da:46:79:4c:2f:6d:e4:6f:6b:cc:
9f:1f:6f:41:9c:5c:9f:3f:bc:bb:b2:db:9a:d9:36:
74:6a:cb:24:51:95:e4:11:7a:5e:26:e5:f7:1b:bf:
62:84:92:d4:97:9a:05:06:61:f2:45:aa:b7:fb:46:
2d:28:d4:53:70:f3:ed:8d:9a:f3:18:02:5a:47:9c:
ca:08:d3:4e:8c:9c:ad:e4:b9:9b:74:17:04:bd:2e:
ec:20:5a:17:d3:f0:2b:c0:d0:6d:f5:d8:e0:44:cd:
3b:bb:9a:57:d7:86:78:31:78:c8:b1:83:a1:b7:b6:
41:f4:be:4c:35:17:6e:63:da:61:26:bf:91:d9:0d:
7d:c0:be:ee:d9:0c:03:72:63:93:a8:34:1f:91:bd:
98:2f:01:77:52:b5:c7:7e:7e:26:02:19:90:84:28:
f1:40:cf:23:89:9e:97:af:69:f3:b1:05:d2:12:6a:
ff:95:94:c4:de:6d:22:e1:98:92:fb:20:9b:6c:fa:
da:d2:66:2c:3a:2b:43:df:ce:d8:55:f0:b4:93:05:
32:02:cc:00:29:bd:72:f7:da:37:60:63:fc:45:29:
33:78:6c:5a:46:b9:b9:56:10:63:7e:24:b7:8e:e5:
99:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6A:30:96:F7:E8:EB:C4:86:A8:C0:B7:A5:AB:AA:6D:E2:82:2E:C0
X509v3 Authority Key Identifier:
keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/39322e3234392e34362e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.46.0/23
Signature Algorithm: sha256WithRSAEncryption
50:f2:26:fc:2e:90:95:9b:c1:35:e4:cf:aa:74:08:dd:89:31:
04:c0:63:9a:62:ed:db:89:72:44:13:49:6b:28:19:5e:1d:8d:
40:e7:bc:32:b0:40:90:9b:3b:1a:30:78:2f:ef:43:d9:bf:95:
1c:ee:a5:e8:84:91:2f:e3:1f:f0:ce:ff:b0:f3:51:aa:5d:87:
2d:c2:50:76:a8:a8:25:d1:9f:08:e1:a0:fe:a5:7b:84:4b:52:
b9:0f:3f:56:c3:bb:b8:cd:ca:f4:49:4e:1e:35:7a:fb:ad:71:
2d:52:ae:77:33:55:8c:13:06:5e:34:8a:cd:ca:10:ed:6e:00:
e6:66:c2:7e:ac:2b:c9:06:d2:70:32:75:82:8f:14:18:f8:cd:
0d:0b:78:2a:5d:53:a1:4f:b5:eb:34:95:db:04:99:b3:b0:f9:
5a:3e:ea:ba:1e:fc:59:a9:2f:3f:31:41:e0:6d:f5:0b:4b:32:
42:ef:84:55:f1:d3:28:f2:c0:08:e0:3d:0f:6b:b3:42:38:03:
3a:2d:5b:4b:37:ed:13:d0:e1:09:4d:29:d6:e1:47:7c:e9:cb:
7c:fa:f9:8e:32:e0:ab:c7:d4:87:19:bd:ef:43:fd:21:f8:36:
b4:00:af:8b:2b:35:38:5b:59:ea:39:9b:4c:cb:72:f4:b2:ef:
fd:c3:78:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:07:05 2024 by rpki-client on console-fra.rpki-client.org