Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e3133342e3131362e302f32322d3232203d3e20323033303230.roa
File: 34352e3133342e3131362e302f32322d3232203d3e20323033303230.roa (raw, json)
Hash identifier: 2XypW3G1zyxZIntO4kSNRVMtDFAgD0kl4jEjvwzfjmo=
Subject key identifier: A9:3E:07:55:98:E3:CC:30:18:09:0F:18:8C:03:18:1C:1E:E0:DC:E5
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 5E47CB122B8FCB85B86AB2599613B701B6E78D59
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e3133342e3131362e302f32322d3232203d3e20323033303230.roa
Signing time: Wed 14 Aug 2024 08:01:55 +0000
ROA not before: Wed 14 Aug 2024 07:56:55 +0000
ROA not after: Wed 13 Aug 2025 08:01:55 +0000
asID: 203020
IP address blocks: 45.134.116.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:47:cb:12:2b:8f:cb:85:b8:6a:b2:59:96:13:b7:01:b6:e7:8d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Aug 14 07:56:55 2024 GMT
Not After : Aug 13 08:01:55 2025 GMT
Subject: CN=A93E075598E3CC3018090F188C03181C1EE0DCE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a0:ec:5b:e6:9f:42:7e:e0:a5:f8:99:75:20:
81:77:37:ec:cd:c6:10:89:6e:58:1f:5a:df:fc:3d:
95:60:ac:89:28:c0:c5:2d:55:ab:00:e2:c6:27:b1:
e1:bc:8e:25:78:34:d7:bc:46:c9:e1:71:e2:4f:2e:
bb:19:08:a6:f0:65:f7:02:15:b1:8f:05:a9:fa:45:
7e:1a:9a:1c:1c:3e:b0:57:36:03:a6:00:df:dc:74:
fa:51:2a:1e:8e:34:3c:7c:5d:df:b5:76:7c:a1:c8:
fb:47:b9:f6:a0:32:0b:77:6e:b1:ba:99:2b:0b:74:
9b:3d:f4:9e:0f:8a:8e:b1:0a:c6:fa:c0:2b:d9:a4:
33:d1:2f:8b:69:81:c1:87:57:6b:90:6c:2c:91:bf:
b7:37:76:97:d2:28:69:61:85:6b:2f:6d:41:d9:11:
4a:56:df:fa:8b:35:50:89:97:68:18:bf:42:5b:00:
63:b9:6a:d3:76:f0:a6:25:4d:38:dd:56:19:0a:47:
bc:54:d1:83:e2:9e:eb:96:81:08:33:0a:62:41:96:
8f:51:83:3b:dd:e4:74:c9:ed:23:da:db:bb:f1:8b:
39:b7:41:ec:0a:e9:5b:7e:e3:33:95:26:31:e1:3b:
e3:c9:cf:36:a0:8d:8e:23:db:da:c6:99:a9:ad:57:
64:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3E:07:55:98:E3:CC:30:18:09:0F:18:8C:03:18:1C:1E:E0:DC:E5
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/34352e3133342e3131362e302f32322d3232203d3e20323033303230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.116.0/22
Signature Algorithm: sha256WithRSAEncryption
81:f9:83:65:92:60:d3:6d:7e:fb:5b:ed:98:98:33:03:a8:3a:
de:e7:b6:97:90:16:12:9e:53:b8:3c:b0:05:55:83:b5:b8:0b:
65:bd:95:76:5d:60:c1:33:32:f7:d3:5e:d5:a6:0a:fc:f1:cc:
97:63:ab:6f:64:2a:1a:9a:cd:d9:b7:7a:08:23:f8:35:7f:a5:
bd:7e:6f:7a:7b:51:16:1c:23:b4:9a:fd:94:bc:3d:7e:27:b5:
8b:f6:7c:63:b4:5a:12:56:27:e2:b1:02:ab:10:79:89:1d:cc:
fd:c9:20:46:8a:b4:e8:e4:fd:d5:9a:28:86:00:47:e1:84:91:
43:14:fb:c5:7f:47:6c:5a:9b:61:48:df:65:b9:d3:66:d1:fe:
8b:82:5e:b1:0c:34:bc:38:a3:99:a0:f6:81:e6:0a:e1:8d:8f:
5f:b4:15:77:9e:b7:f7:3c:a7:02:12:cb:13:46:0b:da:75:16:
10:ce:d3:18:26:ba:3c:87:01:d8:a7:14:95:07:f3:a3:d2:02:
18:f2:fd:3c:eb:f2:10:30:2e:ca:e9:18:ae:00:de:af:0c:e0:
5a:60:ee:fb:68:45:8a:db:1d:05:1c:97:00:fb:39:c7:1a:d8:
bf:c9:2d:9f:e2:ae:58:f7:38:90:3f:9f:80:41:09:5d:81:ed:
61:ae:89:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:35:27 2024 by rpki-client on console-ams.rpki-client.org