Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/38302e3234352e3130382e302f32322d3234203d3e20323031333431.roa
File: 38302e3234352e3130382e302f32322d3234203d3e20323031333431.roa (raw, json)
Hash identifier: lNrXOoDX5FoI5X06snTDymF7AuOOY0ad60Ed3MWMBPU=
Subject key identifier: C9:39:52:1F:3E:72:BA:A8:38:CA:EB:E6:70:34:4D:75:63:B1:81:2F
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 1F7F07E58B9D11AE8C1DD73436E9D74DC96E0991
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/38302e3234352e3130382e302f32322d3234203d3e20323031333431.roa
Signing time: Mon 26 Feb 2024 08:53:41 +0000
ROA not before: Mon 26 Feb 2024 08:48:41 +0000
ROA not after: Mon 24 Feb 2025 08:53:41 +0000
asID: 201341
IP address blocks: 80.245.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:7f:07:e5:8b:9d:11:ae:8c:1d:d7:34:36:e9:d7:4d:c9:6e:09:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Feb 26 08:48:41 2024 GMT
Not After : Feb 24 08:53:41 2025 GMT
Subject: CN=C939521F3E72BAA838CAEBE670344D7563B1812F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5a:c6:cf:bb:76:fe:2b:f3:5f:e3:c0:b7:49:
88:35:af:eb:b4:01:e2:ae:4e:1e:56:02:ea:7f:b5:
e1:4c:45:b4:ec:c5:12:31:ea:29:77:6d:56:02:bc:
7b:5e:53:f7:6a:4a:c5:44:7f:a3:20:5d:19:62:ab:
e8:36:63:24:c6:63:dd:3c:2c:db:aa:cd:84:dd:21:
59:83:59:28:6c:dc:ac:1b:6b:52:c9:29:1c:c5:fe:
01:69:c7:51:e7:c7:97:ed:3a:84:26:dc:a8:0e:d4:
cb:23:24:9d:31:13:70:10:db:ed:3a:0f:f5:7f:f4:
96:77:5c:9a:ac:5b:7f:9c:4b:7d:0a:9c:41:06:99:
c3:80:e7:26:a8:d4:38:4c:97:3c:ed:de:fb:23:41:
05:4e:1d:9d:28:79:55:2f:b9:1a:2b:cc:7e:99:20:
c7:45:56:50:74:4f:3d:75:a5:e7:66:3a:4a:ca:54:
63:c9:2e:16:ab:ce:9e:00:c6:02:e2:8b:75:a8:63:
c0:1a:6d:d6:04:5c:b7:30:84:85:36:85:8b:2e:82:
6f:cc:61:72:05:91:dd:ff:38:44:6e:2e:d9:20:c8:
87:80:07:10:35:d3:64:1b:06:07:ac:00:b6:11:0d:
73:2d:1a:80:8a:76:94:09:01:8f:39:79:dd:3a:9a:
0e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:39:52:1F:3E:72:BA:A8:38:CA:EB:E6:70:34:4D:75:63:B1:81:2F
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/38302e3234352e3130382e302f32322d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.245.108.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:27:71:a2:c4:a8:74:97:6e:58:b5:d4:d8:8b:0b:4c:47:41:
35:b4:b3:51:9e:ea:e4:90:f4:f4:a9:4b:df:e6:20:e8:5b:e1:
cb:40:e2:b8:e7:8a:ee:17:76:de:76:de:b9:36:df:34:2e:39:
57:8b:67:86:d7:05:f4:eb:98:ac:ed:e6:76:0c:22:19:0b:52:
74:09:de:3a:f7:aa:c2:e4:72:6a:f2:24:4d:07:bd:88:e2:12:
83:d4:2d:07:41:e4:ca:9c:8c:c7:a3:f5:58:ea:f3:a4:7b:6e:
7f:0c:5e:86:16:75:a6:34:49:0b:29:60:1e:7d:0f:40:4a:22:
65:4a:64:16:db:93:60:c4:a5:d7:d2:8b:9e:a5:1c:8f:3b:73:
f1:d3:bf:83:f8:77:d5:80:cd:b5:ae:1a:08:7f:12:d0:33:03:
5e:5d:d1:f1:c3:f2:a0:0a:31:68:ad:21:09:65:9f:9f:80:fb:
fc:2a:24:3c:0a:1b:6f:cb:8e:b3:02:e6:dd:14:a1:31:77:8a:
ab:48:5f:e7:fa:fb:5f:e1:08:1c:52:4d:1b:60:bf:39:70:d2:
08:cf:25:48:29:63:ce:71:99:99:40:1a:a8:8f:ad:ab:83:55:
c4:c9:70:b4:9f:22:7a:1e:d4:9f:8b:dd:56:8e:8b:80:68:3a:
7e:e9:55:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:35:27 2024 by rpki-client on console-ams.rpki-client.org