Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139332e33362e3233382e302f32342d3234203d3e20313336373837.roa
File: 3139332e33362e3233382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: vfSzSU5uGEpAfF0ptd3D0g45+ZhBXfD/ICUaHgmdmfM=
Subject key identifier: 89:25:2C:49:81:6D:46:0F:44:2E:02:A5:8B:EF:96:F3:02:D6:69:BD
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 6490E46A0420F12FDC9E7748732558E0B814E3D9
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139332e33362e3233382e302f32342d3234203d3e20313336373837.roa
Signing time: Sat 02 Mar 2024 21:53:55 +0000
ROA not before: Sat 02 Mar 2024 21:48:55 +0000
ROA not after: Sat 01 Mar 2025 21:53:55 +0000
asID: 136787
IP address blocks: 193.36.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 16:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:90:e4:6a:04:20:f1:2f:dc:9e:77:48:73:25:58:e0:b8:14:e3:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Mar 2 21:48:55 2024 GMT
Not After : Mar 1 21:53:55 2025 GMT
Subject: CN=89252C49816D460F442E02A58BEF96F302D669BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:13:88:14:d5:c2:0c:95:81:e0:ed:ca:52:93:
ba:54:59:ab:9b:24:b0:12:b2:fd:5b:93:21:9d:7b:
5f:06:c7:c0:70:73:c6:f1:2d:43:a7:da:78:96:80:
14:2b:55:63:67:73:9b:2c:08:c3:a0:ba:8a:b4:84:
07:65:c5:13:6d:7c:33:d3:61:6b:05:21:30:fb:9f:
23:c4:19:37:b7:42:e8:81:e0:1f:90:21:31:fb:68:
41:06:fd:27:00:57:87:42:70:fc:be:13:7a:fe:d1:
93:d2:62:66:a3:e8:7d:a6:be:d8:20:3a:a7:f1:1b:
fc:e5:d1:67:04:e4:94:1c:74:f4:05:2b:c3:b3:db:
61:c9:6a:47:1c:c1:82:9e:19:d7:d9:84:08:41:f4:
57:46:78:86:5c:03:85:f9:8c:f8:17:45:c0:67:71:
7b:5f:64:b2:0a:00:7e:38:39:b0:50:f3:a9:40:94:
3d:33:b2:1c:ee:26:50:1b:a0:a1:ae:da:d2:42:13:
c5:9e:a1:02:54:11:52:0f:54:13:0e:16:24:69:23:
03:4e:d4:c4:bd:26:c3:d9:3c:28:fb:58:72:cf:44:
40:db:17:c1:4b:bb:b9:c9:ea:0c:a9:73:32:79:c2:
2b:73:75:66:5a:ee:bf:89:2c:51:bf:99:9a:1d:e9:
13:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:25:2C:49:81:6D:46:0F:44:2E:02:A5:8B:EF:96:F3:02:D6:69:BD
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139332e33362e3233382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.238.0/24
Signature Algorithm: sha256WithRSAEncryption
03:a4:6c:d4:e3:31:a4:4d:ea:bd:46:d5:1a:94:b1:6f:a9:5b:
e3:67:08:41:c2:4f:1b:4b:e0:c9:31:2f:c9:29:2c:ec:0d:db:
98:96:98:d4:4b:81:ac:34:59:42:34:1e:01:74:f6:4c:51:b7:
87:61:a5:a2:93:55:84:46:c5:fd:7b:78:ba:ad:cc:57:86:9e:
1a:a4:1c:ef:38:48:1e:84:dc:14:7a:53:f4:38:d5:53:aa:cb:
3c:d5:93:74:95:f4:b4:d1:de:0a:97:f8:7a:b4:c0:af:4f:44:
49:62:ce:75:4c:67:f8:b4:68:d6:13:4e:2e:79:c9:18:b5:65:
17:02:ac:01:6a:c1:a7:06:37:43:20:ad:4f:8f:fa:24:24:0d:
ef:40:a3:58:b2:c5:2d:0c:a6:cd:18:18:f4:bb:d3:f7:a1:0f:
05:4f:1b:0d:32:a6:0f:de:70:3d:2f:ab:a0:b4:df:c5:23:13:
6b:c3:f4:22:35:50:af:ac:b1:5e:56:3e:d7:79:28:06:3c:be:
be:a1:a8:8c:7a:78:59:aa:80:6a:4c:13:21:53:6c:d5:44:a3:
e4:e9:4c:e8:aa:b5:41:bf:91:83:b1:18:59:e5:58:2d:63:e8:
2e:79:36:8b:5b:bc:7d:15:90:68:ee:a0:7d:42:fa:f2:d5:fd:
40:df:7b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 19:21:54 2024 by rpki-client on console-ams.rpki-client.org