Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/322e35382e37332e302f32342d3234203d3e203632323430.roa
File: 322e35382e37332e302f32342d3234203d3e203632323430.roa (raw, json)
Hash identifier: FnU8yJXqrDgc8AxJCvOyGIQnBop7YZ+Ca5x2ntQQrU4=
Subject key identifier: BF:87:0E:B9:AC:E0:3D:3C:71:08:7E:98:66:C5:77:BC:DF:3C:B5:F9
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 4E66DA24C374E23B2F8F4233861A0065798E1EAA
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/322e35382e37332e302f32342d3234203d3e203632323430.roa
Signing time: Mon 01 Apr 2024 14:03:24 +0000
ROA not before: Mon 01 Apr 2024 13:58:24 +0000
ROA not after: Mon 31 Mar 2025 14:03:24 +0000
asID: 62240
IP address blocks: 2.58.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:66:da:24:c3:74:e2:3b:2f:8f:42:33:86:1a:00:65:79:8e:1e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Apr 1 13:58:24 2024 GMT
Not After : Mar 31 14:03:24 2025 GMT
Subject: CN=BF870EB9ACE03D3C71087E9866C577BCDF3CB5F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f9:c2:f2:dc:60:91:7f:ed:6b:06:f0:3a:45:
08:47:2b:18:56:f4:e7:84:5f:f8:8c:27:05:7e:ae:
52:31:c6:20:b9:1e:ff:6c:5d:7f:eb:60:86:c8:5a:
ca:2a:50:71:64:5c:65:a3:eb:66:08:c6:e9:82:47:
e6:e8:93:71:58:f1:23:2e:13:09:97:0a:30:67:c9:
98:7d:87:e9:7f:4d:ca:d7:18:32:fa:56:e1:02:39:
da:35:d8:f3:aa:67:58:6e:77:f7:af:56:54:fa:3a:
98:5a:20:78:9d:46:b5:67:5b:23:6a:2f:9b:18:18:
81:ee:f5:d2:a8:a5:70:6b:57:26:7a:55:33:27:7e:
cb:5d:50:0f:26:c6:8c:b7:65:d3:d8:ca:65:72:3b:
1b:7d:14:3b:22:93:42:d1:c7:45:c7:16:79:30:8f:
02:a0:5d:1c:a8:ae:46:83:6f:f6:3a:7d:a4:15:07:
7e:62:ec:b3:8b:7a:42:5d:bb:fb:59:8d:8a:7b:33:
da:13:d2:9c:d5:bb:2a:19:44:b6:c4:51:06:d1:50:
0d:0c:47:ae:13:e0:30:db:31:9a:dd:e5:bc:9c:24:
1e:c3:59:1b:cf:04:fb:23:5a:7b:1a:26:56:13:fa:
9d:b2:6e:84:b4:cd:32:d3:f3:e5:a9:18:2a:0a:bf:
6e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:87:0E:B9:AC:E0:3D:3C:71:08:7E:98:66:C5:77:BC:DF:3C:B5:F9
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/322e35382e37332e302f32342d3234203d3e203632323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.73.0/24
Signature Algorithm: sha256WithRSAEncryption
21:8e:7e:3a:de:f5:12:e4:4e:db:82:e5:af:7d:ab:fc:b3:98:
c0:54:65:fd:17:58:3c:17:bd:ca:8e:d1:e8:68:03:26:9e:e0:
e5:08:25:b2:2e:1b:fa:ae:f7:3d:be:7a:76:a3:2a:3c:f9:5c:
b0:8f:9a:23:03:e2:42:0f:e7:26:8b:19:a7:c6:18:51:01:32:
90:fa:62:e8:d5:0f:96:ab:73:ab:63:ed:72:58:e9:76:25:f8:
f9:79:d4:93:b1:b3:b4:1e:12:ba:4c:3b:a6:f2:c0:e5:17:67:
d8:df:d1:18:44:77:dd:63:b1:93:48:b1:a2:8a:13:23:7b:0d:
31:da:d0:e6:ee:25:c4:06:92:e2:f9:f4:5d:c9:1d:dc:18:32:
12:fb:61:8b:d4:3e:5a:56:82:27:c8:7e:20:b7:eb:14:4f:e8:
87:42:d4:1d:bf:7e:10:97:a8:59:25:7c:5a:37:86:c8:b2:b0:
95:de:0f:c1:fb:94:a1:9d:35:55:50:41:bd:d7:10:55:b1:f8:
a6:7a:55:7e:58:8c:ba:5e:cc:0b:a4:cb:03:dd:6f:a7:4e:16:
30:3d:7b:0b:b9:8e:55:05:db:15:84:ba:6a:b4:50:f9:3a:fa:
45:a5:f6:d3:3e:82:34:e7:96:6f:23:53:a5:a3:07:c6:e8:d9:
aa:7f:63:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:57:02 2024 by rpki-client on console-fra.rpki-client.org