Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3138352e3235322e3233332e302f32342d3332203d3e203531313637.roa
File: 3138352e3235322e3233332e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: vqDQi1YhXbKXaVB0k6+HLB4hlh0K9bi93mg8eaFuc88=
Subject key identifier: 0F:6D:41:13:5D:4D:84:C9:80:B1:48:6E:56:18:36:71:33:3C:8E:DA
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 17D3F8F142EA532FBD0C8AF185EB5A71F80ADACD
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3138352e3235322e3233332e302f32342d3332203d3e203531313637.roa
Signing time: Mon 26 Feb 2024 08:53:43 +0000
ROA not before: Mon 26 Feb 2024 08:48:43 +0000
ROA not after: Mon 24 Feb 2025 08:53:43 +0000
asID: 51167
IP address blocks: 185.252.233.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:d3:f8:f1:42:ea:53:2f:bd:0c:8a:f1:85:eb:5a:71:f8:0a:da:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Feb 26 08:48:43 2024 GMT
Not After : Feb 24 08:53:43 2025 GMT
Subject: CN=0F6D41135D4D84C980B1486E56183671333C8EDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c3:d7:7d:c9:e5:92:85:cc:89:cf:c0:e5:0e:
9b:bb:bd:52:ef:13:36:f3:7e:16:7e:cb:53:9c:b0:
52:b3:b6:6f:32:53:a2:13:93:52:73:69:d2:e6:d0:
43:fa:61:84:f6:f5:f3:2e:9b:7b:af:5f:a5:a7:e0:
db:74:a5:6e:96:83:db:37:ea:c1:38:e2:08:17:9e:
c5:ef:b2:05:2f:77:84:48:3b:94:f4:f3:a7:1f:0e:
53:a9:54:f5:c5:da:7b:f5:c9:bd:e0:16:75:b3:59:
4c:da:ea:5a:f6:57:17:be:9a:1f:77:f5:11:80:60:
aa:29:a9:8c:b6:4a:9b:dd:2c:f3:d6:92:35:66:f3:
25:4d:7d:50:be:76:c0:28:b2:0f:64:a3:40:15:0b:
ad:83:4d:39:f9:2d:3f:c7:55:eb:b8:23:0c:10:90:
1e:06:09:ea:fb:77:a6:42:83:41:78:da:bf:99:37:
34:12:08:41:1e:92:8f:ca:d6:b7:f3:3e:87:0c:61:
f2:a5:b9:74:b3:1c:1f:11:13:6f:59:25:30:cf:2d:
6f:39:96:d2:1f:9e:39:7f:b1:8d:55:17:1f:8d:16:
2b:2b:08:02:d6:2c:11:ff:84:22:da:97:a4:fb:3b:
51:89:42:2b:a1:bb:4e:bc:cb:61:c9:6b:45:21:95:
20:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:6D:41:13:5D:4D:84:C9:80:B1:48:6E:56:18:36:71:33:3C:8E:DA
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3138352e3235322e3233332e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.233.0/24
Signature Algorithm: sha256WithRSAEncryption
11:49:46:f7:0d:c8:6d:77:40:04:eb:36:01:57:31:88:4b:33:
0f:73:2b:bb:68:12:29:46:da:d4:e3:18:8a:ca:51:d1:63:ae:
da:87:59:19:a0:8e:1b:36:7f:fe:4a:04:cc:b8:02:fd:a2:2f:
c5:53:d7:f0:c4:09:21:ac:ed:16:ff:b5:60:51:09:3a:aa:03:
8e:48:2c:5e:f1:cf:eb:9b:52:b7:3b:16:87:bd:0d:17:08:c0:
81:9c:e9:9c:1d:ce:07:5e:be:04:98:43:df:3f:59:60:4a:c7:
b6:85:b8:b9:fd:43:58:72:3e:53:7d:8d:30:8a:7e:1c:fa:90:
59:e3:3d:b3:82:f1:7d:3e:7b:6f:c8:a5:1f:02:e8:ba:e9:4d:
4f:69:a5:d8:3f:2b:66:42:76:f2:b6:bf:c6:ee:88:0c:c9:74:
10:48:83:bb:61:b2:18:c4:19:23:02:0c:74:24:90:dd:19:c8:
fb:b0:f2:8b:8c:0d:e0:a1:40:77:c9:0d:c2:cc:81:7f:ce:b7:
9f:27:e7:f6:d6:7c:aa:35:b8:49:b6:59:95:90:dd:40:d3:32:
0e:cf:d3:45:17:ea:6d:d4:31:77:84:b8:ad:21:49:43:b7:b4:
94:25:2b:5a:c2:59:1f:68:f2:1b:3d:cb:8d:99:32:10:06:7e:
64:ed:a9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:49 2024 by rpki-client on console-ams.rpki-client.org