Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139322e3134352e3131392e302f32342d3234203d3e20313431303339.roa
File: 3139322e3134352e3131392e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier: rHt6zVKRyJljVF8NQwolJihb4glyyEuKWVXJwbnjFkM=
Subject key identifier: 14:CC:CD:1B:A7:D9:26:3A:BC:A3:42:68:59:82:86:2C:D0:59:37:0E
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 2B0D2212C2BD7CD91D8CB79B904E0C1E6406ECE1
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139322e3134352e3131392e302f32342d3234203d3e20313431303339.roa
Signing time: Mon 26 Feb 2024 08:53:42 +0000
ROA not before: Mon 26 Feb 2024 08:48:42 +0000
ROA not after: Mon 24 Feb 2025 08:53:42 +0000
asID: 141039
IP address blocks: 192.145.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:42:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:0d:22:12:c2:bd:7c:d9:1d:8c:b7:9b:90:4e:0c:1e:64:06:ec:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Feb 26 08:48:42 2024 GMT
Not After : Feb 24 08:53:42 2025 GMT
Subject: CN=14CCCD1BA7D9263ABCA342685982862CD059370E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:61:60:23:62:e7:e0:d2:8b:d1:b0:21:8a:01:
10:95:bc:22:08:3f:37:0c:43:45:5e:5b:58:1d:e1:
10:b9:36:c7:e4:c7:e9:ed:c3:50:92:a2:9c:f8:67:
91:8f:ef:e2:69:f0:c3:b6:b9:0d:b1:5d:79:bd:ba:
47:57:29:c2:07:61:a7:d5:b5:0e:72:eb:9b:ff:96:
fb:54:35:f0:ac:4d:7b:f5:7a:0f:e2:51:41:a7:21:
8c:72:8f:f4:5f:1a:e1:45:bb:c3:be:90:e5:cc:ab:
26:ee:b8:01:d2:23:1a:0c:32:e1:3a:66:2e:eb:ca:
a0:d0:0b:a4:1e:f4:17:8b:b9:34:52:d3:05:d4:86:
1d:81:d1:df:27:62:d0:56:ba:e8:53:bb:c5:c3:cb:
47:01:a1:6b:c8:ec:31:42:40:b4:73:7e:7e:14:9a:
04:f5:fd:b1:c3:08:0c:dd:c7:87:39:27:52:72:cf:
1d:18:81:30:d0:9c:05:9f:28:81:72:32:65:cf:3e:
aa:77:36:41:cf:de:9f:f2:2d:bf:37:7f:3a:6a:5d:
70:70:33:16:cc:58:ee:66:02:09:e7:e4:d5:20:16:
96:98:44:b5:bd:b6:3f:60:33:5d:ae:a8:40:cf:f7:
43:5a:0a:b2:0e:4b:4a:3f:66:9a:c1:4f:1d:ca:33:
37:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CC:CD:1B:A7:D9:26:3A:BC:A3:42:68:59:82:86:2C:D0:59:37:0E
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139322e3134352e3131392e302f32342d3234203d3e20313431303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.119.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:cc:9e:0f:2d:30:57:28:e5:e4:cc:af:c3:be:98:c3:b6:12:
07:88:da:48:08:70:32:78:eb:0e:7f:88:17:96:6e:47:d4:7d:
d6:16:f9:1b:43:fa:fb:7d:33:28:aa:58:5e:eb:54:11:55:cd:
f7:2e:e0:3b:13:55:17:eb:d5:82:78:5f:c8:6a:22:3d:98:b2:
d7:3b:1a:21:10:a3:e9:0d:59:8c:b0:85:0a:df:9e:2e:20:6d:
46:47:2c:8a:ed:bb:f8:42:7d:41:9c:39:41:a8:14:0a:00:59:
bf:41:47:ca:d7:72:24:50:91:76:33:73:de:95:dd:54:30:ac:
37:9a:b7:8c:09:27:e2:dc:12:bb:84:7c:3e:b4:de:d3:d3:2f:
1f:0d:aa:b3:0e:0b:49:d9:63:f6:21:96:dd:65:07:2d:63:cc:
10:3e:f1:8d:aa:8d:eb:a7:9a:f1:af:a4:ab:e0:d0:23:71:b2:
c5:e5:ae:db:5d:f4:1e:b0:ab:f6:6a:f2:6e:99:24:08:20:a6:
59:3b:18:df:04:fe:1d:f9:95:62:aa:35:9b:48:79:07:93:67:
35:d7:df:88:dc:92:8f:6a:63:2c:b0:45:f1:d3:cc:b8:f5:ef:
37:97:1a:a0:d5:da:ff:c1:66:aa:53:89:97:17:d0:ea:14:74:
dd:55:53:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:44:11 2024 by rpki-client on console-fra.rpki-client.org