Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139342e3131332e36352e302f32342d3332203d3e203536383736.roa
File: 3139342e3131332e36352e302f32342d3332203d3e203536383736.roa (raw, json)
Hash identifier: byrll5whvn/MJ3bTDLUjwlIgxYcqr6vU7SENIduXxLY=
Subject key identifier: 7E:D2:A4:E1:50:F6:C6:C8:21:DC:60:B1:59:16:6D:E9:34:AF:9B:90
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 741FE84D3924D6F3F9A342EBA1C6F7520002B8E5
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139342e3131332e36352e302f32342d3332203d3e203536383736.roa
Signing time: Mon 26 Feb 2024 08:53:42 +0000
ROA not before: Mon 26 Feb 2024 08:48:42 +0000
ROA not after: Mon 24 Feb 2025 08:53:42 +0000
asID: 56876
IP address blocks: 194.113.65.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:1f:e8:4d:39:24:d6:f3:f9:a3:42:eb:a1:c6:f7:52:00:02:b8:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Feb 26 08:48:42 2024 GMT
Not After : Feb 24 08:53:42 2025 GMT
Subject: CN=7ED2A4E150F6C6C821DC60B159166DE934AF9B90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b8:1e:d0:7c:13:97:fd:5e:97:77:bb:44:50:
cb:8e:98:10:8a:8e:27:c2:a9:05:d9:27:af:7c:76:
67:47:6d:a9:b0:db:e4:02:f5:8f:06:6c:06:f3:bb:
60:c8:b1:92:f0:fd:f1:59:6b:ff:ba:f0:82:88:a0:
1b:6e:22:57:1e:bb:52:dc:31:1b:83:f3:8a:4d:39:
7e:b5:fd:06:84:a0:f7:47:1f:78:66:79:e3:99:07:
ae:2d:2d:84:9c:62:fc:c6:a5:dd:03:2a:f1:eb:e9:
44:e5:6c:63:49:a0:ad:10:aa:94:3a:2b:2c:9e:3f:
33:b2:9d:a8:8c:83:0c:0f:a2:bf:cf:69:fc:9e:82:
a6:77:40:ea:f5:47:2c:c1:19:63:e2:21:34:75:8c:
00:1b:d5:7e:3c:14:81:4e:9b:86:d3:4b:b9:c1:3b:
a4:5d:90:36:3f:36:c6:4b:ed:64:15:53:99:3c:b4:
82:13:47:fb:a9:0f:57:e9:ba:da:db:b1:10:53:b5:
4d:6f:e1:0e:7f:e2:ba:ba:d3:8f:23:66:3d:4f:20:
4e:70:fc:a6:d8:30:7c:0f:09:6d:1c:0c:fa:b0:ca:
56:cc:c6:8f:c8:ed:de:90:66:df:13:c8:98:d7:3e:
e7:18:03:e4:03:86:64:bd:41:7a:dd:fc:73:41:f8:
56:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D2:A4:E1:50:F6:C6:C8:21:DC:60:B1:59:16:6D:E9:34:AF:9B:90
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139342e3131332e36352e302f32342d3332203d3e203536383736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.65.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:00:65:ce:ec:85:1f:27:98:5e:2e:a7:28:6b:5e:2e:f6:ec:
e3:8c:7c:e4:d6:cf:f1:e0:37:c0:e5:c2:d2:11:6e:3e:65:0a:
32:3b:24:fb:eb:44:91:ad:0d:13:7f:5c:30:b6:99:e0:de:c2:
04:1e:a3:b4:60:df:08:a3:7e:ae:7c:54:5a:7a:6a:a0:d9:b5:
78:aa:9b:3e:22:11:0a:9a:38:56:c6:41:6e:2d:d3:2f:44:98:
f8:d3:c5:fe:0f:88:87:bb:39:fb:15:a2:bb:b6:91:c2:cd:d7:
39:c8:09:60:f1:86:f5:70:ef:98:23:8a:de:73:0e:2e:61:f3:
86:3e:b2:b3:94:81:6b:1c:55:db:98:9f:e0:de:ca:97:82:b1:
60:eb:77:f8:88:94:57:cb:8b:a4:28:ad:48:1c:e4:96:27:d5:
6b:fb:3a:bd:76:a2:f1:29:41:dc:65:57:07:99:84:61:5a:ab:
9b:bd:5c:60:78:80:20:65:d1:9c:98:d8:01:3b:a8:07:7c:27:
17:1c:47:47:18:e0:18:be:0e:22:48:ba:b9:4e:0a:a6:e9:05:
60:c6:84:9f:ab:d5:28:06:70:98:76:d1:5a:30:ee:44:2a:59:
48:92:aa:e9:5a:51:c3:03:72:bd:d3:77:2f:73:40:30:da:c4:
8a:9f:06:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:49 2024 by rpki-client on console-ams.rpki-client.org