Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139342e33352e3132302e302f32342d3332203d3e203531313637.roa
File: 3139342e33352e3132302e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: k+fgHhJSkqBD00RFzOWGhEIAzcv/oOOBhynin6qs1GU=
Subject key identifier: 21:D8:8B:37:75:CA:BB:C2:7F:4D:E1:B5:74:7E:44:5C:9E:08:94:21
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 591D03229020A2095025C23A9F9F9F456E36C53E
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139342e33352e3132302e302f32342d3332203d3e203531313637.roa
Signing time: Mon 26 Feb 2024 08:53:40 +0000
ROA not before: Mon 26 Feb 2024 08:48:40 +0000
ROA not after: Mon 24 Feb 2025 08:53:40 +0000
asID: 51167
IP address blocks: 194.35.120.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 13:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:1d:03:22:90:20:a2:09:50:25:c2:3a:9f:9f:9f:45:6e:36:c5:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Feb 26 08:48:40 2024 GMT
Not After : Feb 24 08:53:40 2025 GMT
Subject: CN=21D88B3775CABBC27F4DE1B5747E445C9E089421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:96:bb:9f:16:cf:d0:a0:f1:0b:f8:12:b5:fd:
b8:86:2c:61:18:f9:89:bd:43:05:0f:ac:f1:7b:29:
88:46:60:f9:97:c2:4a:e8:d7:f4:26:03:57:f9:35:
f3:ef:13:8d:c6:1d:71:67:c3:7e:48:79:f6:96:99:
9d:4a:ed:9d:fe:18:27:91:98:5b:0f:ac:30:32:7d:
4f:6f:08:1f:27:b3:24:ec:57:d8:ab:4b:a3:a7:88:
ad:24:0b:eb:d7:4f:61:ae:07:5e:9e:df:b4:f6:9b:
62:74:53:44:b3:b7:aa:1c:eb:7e:1d:7a:71:b1:64:
ca:bf:5b:9e:b4:b3:73:10:21:61:c5:9d:ef:aa:78:
7a:ba:1b:1d:44:92:c3:1b:d3:33:67:1d:81:bf:5e:
a5:51:5c:f2:d2:22:b6:f2:a9:59:1f:de:bb:1f:83:
52:a7:5b:2a:cd:e3:64:f8:05:f0:ad:d2:0c:79:b3:
90:1d:ff:03:cf:8e:dc:b3:8d:ba:c0:93:15:91:10:
6f:2b:c5:a7:71:56:38:98:41:6c:29:b9:a0:29:3c:
20:fa:92:98:9c:56:c2:9b:fb:79:3a:73:1b:e8:9e:
7e:ba:e7:c5:b4:c6:67:e4:78:15:ac:ae:7e:83:64:
86:fc:ea:85:bd:b3:bb:0b:f1:a4:ae:40:fb:a5:17:
00:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D8:8B:37:75:CA:BB:C2:7F:4D:E1:B5:74:7E:44:5C:9E:08:94:21
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/3139342e33352e3132302e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:ee:1c:bf:f4:8c:fb:86:f5:6c:d4:b4:f7:45:61:9b:f5:68:
dc:ef:a0:5e:5d:be:12:e2:e3:14:2c:2a:36:3c:6c:6f:b2:b3:
ef:78:55:6c:04:df:25:21:7e:e1:0a:f4:0b:45:a4:31:28:e2:
81:2d:ae:73:a9:9c:e0:86:e2:e7:eb:09:99:90:f8:87:28:26:
a4:56:b5:69:b6:af:3c:c9:e2:2a:05:33:9d:f4:6a:f7:e0:ab:
8e:e9:07:e6:34:27:5e:35:d1:66:e5:be:00:7d:53:ff:18:1f:
e6:a2:30:49:d0:fe:8a:9f:85:92:be:f0:4e:a2:22:73:66:83:
23:95:81:b9:13:7f:2e:88:76:43:6a:fc:a6:a5:01:db:d8:96:
a3:06:7a:76:c1:79:1d:e7:a0:16:47:eb:d9:8a:eb:64:9c:cd:
81:cf:54:f8:19:e6:a3:7e:2d:cd:bc:59:e5:31:51:16:8c:a1:
50:0f:3c:00:9a:21:bc:de:65:ba:4b:a6:de:11:29:25:01:f5:
cf:cc:e4:68:3a:90:86:67:79:02:3a:f8:ab:ed:93:a3:33:8f:
88:1b:52:d8:cb:3b:93:bc:b0:18:da:b8:f4:5f:7e:cf:32:05:
92:28:12:6d:c7:d8:1b:06:e4:21:66:53:e2:ee:2b:d9:22:6e:
56:ed:c3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 16:32:39 2024 by rpki-client on console-fra.rpki-client.org