Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/39312e3139392e3132322e302f32342d3234203d3e20323034313730.roa
File: 39312e3139392e3132322e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier: 1BaIE+iIG7KBOBVEp1qW23Tg2lw4T8+aV6eKUWD4mDg=
Subject key identifier: EC:5C:1B:1B:26:6B:03:BF:B7:5C:F1:A4:BC:08:BB:D9:A3:0A:E3:02
Certificate issuer: /CN=12c2a8354689aec2a74fca14944927621ba27c94
Certificate serial: 1775843E5D4988960565ACB15A59A34003F4782C
Authority key identifier: 12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/39312e3139392e3132322e302f32342d3234203d3e20323034313730.roa
Signing time: Tue 25 Jun 2024 21:47:04 +0000
ROA not before: Tue 25 Jun 2024 21:42:04 +0000
ROA not after: Tue 24 Jun 2025 21:47:04 +0000
asID: 204170
IP address blocks: 91.199.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:57:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:75:84:3e:5d:49:88:96:05:65:ac:b1:5a:59:a3:40:03:f4:78:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c2a8354689aec2a74fca14944927621ba27c94
Validity
Not Before: Jun 25 21:42:04 2024 GMT
Not After : Jun 24 21:47:04 2025 GMT
Subject: CN=EC5C1B1B266B03BFB75CF1A4BC08BBD9A30AE302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e4:1f:4f:06:78:2e:df:13:5e:39:5d:a2:cf:
dc:3c:57:39:1b:de:7a:41:35:73:b5:e0:b9:1b:37:
46:89:c9:ab:fe:ce:6c:5f:54:f2:04:af:3c:9d:42:
bf:98:55:33:55:a0:67:4f:c2:23:f1:c6:ad:c9:73:
40:a5:a9:54:e9:35:e0:cb:d0:da:a0:f9:11:a5:d5:
1a:0e:ac:d7:7a:78:f6:d2:a0:46:ec:6d:fd:72:90:
94:fe:b4:7c:6a:e9:bb:c9:1c:70:12:9b:9a:e3:e7:
3c:4d:11:61:8b:65:54:b2:d5:6d:66:fd:4d:c7:98:
96:ef:28:ae:5d:a4:66:2a:37:a1:87:39:0d:3a:0f:
d4:46:6d:47:8d:1c:0c:48:af:46:84:da:cc:e8:ca:
99:f4:1a:fd:b2:2f:2e:f0:44:7a:a2:85:da:8e:ce:
48:54:45:64:b3:b0:8a:ef:dc:36:8f:11:4c:a4:a3:
c0:73:b0:e1:4e:d9:72:81:32:64:7e:36:97:18:63:
15:43:c9:21:ca:d9:59:8a:f2:7b:88:b0:01:1e:7a:
8d:1d:9a:d5:05:8e:a7:8d:cc:15:39:a0:52:f8:44:
74:b3:20:c1:2a:51:8f:a8:cc:e4:e8:35:ba:d8:f2:
5d:db:23:f0:e2:96:cc:20:96:c4:2b:2e:bc:eb:53:
a0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5C:1B:1B:26:6B:03:BF:B7:5C:F1:A4:BC:08:BB:D9:A3:0A:E3:02
X509v3 Authority Key Identifier:
keyid:12:C2:A8:35:46:89:AE:C2:A7:4F:CA:14:94:49:27:62:1B:A2:7C:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/12C2A8354689AEC2A74FCA14944927621BA27C94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsKoNUaJrsKnT8oUlEknYhuifJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/7/39312e3139392e3132322e302f32342d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.122.0/24
Signature Algorithm: sha256WithRSAEncryption
45:e9:b8:bd:62:29:61:ee:15:19:21:fb:ec:9d:fc:d9:b8:12:
f9:2a:ee:5d:c0:1c:fc:ab:d7:5a:a6:bd:7c:c3:d1:5c:b5:91:
23:c1:3c:ff:68:74:3c:d4:d1:94:e3:16:6a:e1:ad:b1:c4:89:
5a:5f:0c:f8:c7:c5:a4:18:ce:a2:40:4f:9c:9e:cb:4c:32:1c:
e0:5a:d3:9e:59:ed:2c:15:52:9e:6e:fe:d3:88:f7:51:97:ed:
7d:2a:36:be:e7:96:e6:42:70:79:32:ce:65:ad:83:2e:59:4c:
06:d2:e2:c1:56:6f:c1:41:c4:38:75:c6:28:71:34:9b:81:44:
70:a3:9d:27:cd:75:e2:c4:a1:7a:32:7d:89:83:84:9f:93:94:
61:de:a5:19:b9:36:fa:9c:c3:d6:39:8d:e7:96:f3:1b:23:95:
18:43:24:b9:e2:92:4a:f6:6c:3a:7d:56:5c:39:00:04:84:8f:
3f:f5:9f:b4:a2:4f:cd:9b:8f:a6:25:78:16:a6:8d:1c:05:2c:
29:92:3f:09:0e:d6:72:2e:39:91:7b:65:c1:0d:5f:4a:b4:7a:
82:f0:9a:b4:09:2d:87:82:be:73:76:db:53:0c:e5:84:f7:fe:
7a:e3:1a:7c:29:d0:5c:fe:30:e1:08:b9:cc:3c:d8:c1:b7:5c:
79:73:4e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:14:45 2024 by rpki-client on console-ams.rpki-client.org