Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3137382e3231322e33342e302f32342d3332203d3e203531313637.roa
File: 3137382e3231322e33342e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: PANGBzhLSrOS67FchGNqz1RoDpGAYLn/Wz4g2XAdnpo=
Subject key identifier: 1C:C8:6B:B3:5E:17:7C:9B:54:61:24:FD:F0:32:2B:19:E7:1B:0E:AA
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 6BCBB97A35D61DE7215F9D0CE17BD0BEDCAE5857
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3137382e3231322e33342e302f32342d3332203d3e203531313637.roa
Signing time: Tue 12 Mar 2024 20:00:12 +0000
ROA not before: Tue 12 Mar 2024 19:55:12 +0000
ROA not after: Tue 11 Mar 2025 20:00:12 +0000
asID: 51167
IP address blocks: 178.212.34.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.mft
rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:cb:b9:7a:35:d6:1d:e7:21:5f:9d:0c:e1:7b:d0:be:dc:ae:58:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Mar 12 19:55:12 2024 GMT
Not After : Mar 11 20:00:12 2025 GMT
Subject: CN=1CC86BB35E177C9B546124FDF0322B19E71B0EAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a7:84:af:0a:89:72:b4:e1:ee:46:60:22:4e:
cb:58:ae:74:4b:23:e9:03:11:fc:7d:ce:b2:0f:c9:
7f:ca:cf:d0:f5:39:02:d5:12:c9:44:f8:64:ab:b2:
3a:50:1d:22:d1:d8:fa:9c:ab:5f:0f:2b:6e:27:8f:
bf:b8:58:fc:07:92:03:71:b4:63:ac:82:fc:03:e6:
cf:9a:14:73:49:39:27:5b:05:61:6f:f6:da:8d:cd:
16:e8:ae:6c:56:8f:ce:e8:40:7d:70:ca:c1:8f:e9:
6d:25:92:8d:7e:ef:c4:b0:50:58:09:1d:76:fd:f1:
b5:b1:d4:e0:b6:a3:06:14:1b:d8:2f:08:f6:3d:33:
a5:fd:48:84:09:ce:23:0b:98:a1:20:a8:86:ca:1c:
02:cd:49:9b:11:cc:27:60:86:bd:ce:69:8c:06:93:
83:3c:7d:ac:ad:f6:8c:e5:9e:ca:55:d7:9c:8b:21:
9e:12:3d:a3:b9:ef:18:4e:bf:ee:57:68:a1:9f:37:
30:65:f5:07:6a:f8:db:e6:6b:e3:6b:ad:e8:bc:af:
32:57:27:e6:cf:d1:ad:54:ad:f7:be:4c:7d:1e:36:
8d:20:d7:ca:30:55:d4:8b:b0:f3:2a:d6:c3:40:fc:
8d:a6:fb:25:68:ba:c3:48:29:f9:8e:05:34:a0:69:
ad:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C8:6B:B3:5E:17:7C:9B:54:61:24:FD:F0:32:2B:19:E7:1B:0E:AA
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3137382e3231322e33342e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.34.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:16:85:b8:ed:5a:74:35:4f:51:08:a6:58:84:7c:09:3e:97:
cf:a4:e2:97:f5:6d:e6:f3:28:28:ae:77:6b:03:6c:e7:44:94:
8a:c4:7d:7b:12:c6:35:2d:a8:ac:d4:af:c4:9c:a5:86:41:fc:
dd:aa:cb:aa:54:1d:d6:ab:30:d3:a6:f7:89:83:79:e7:42:1b:
e6:57:43:b0:7e:2f:63:81:be:31:d9:34:18:bb:b0:3e:12:b5:
f9:8f:26:de:56:36:e0:18:3a:13:eb:05:e9:09:cb:c7:8d:fc:
d1:6d:c7:8a:15:03:4b:fc:2d:8f:fa:52:ef:e4:d3:90:3f:8d:
bf:29:4f:97:15:8e:dc:2e:90:4f:9d:d2:58:c3:b2:75:80:4d:
96:62:3b:3a:40:ee:f8:19:a7:97:cb:32:0b:b2:64:9b:8b:79:
10:a2:a9:64:a9:a5:5f:e6:81:73:82:d6:bb:8b:b2:56:42:e9:
07:25:9f:af:fd:e5:86:2e:75:2a:94:46:09:a3:ad:c1:1c:a6:
f3:57:d5:41:29:2d:ef:39:f4:78:e8:48:f9:5c:51:b1:4c:79:
ce:46:06:28:92:d0:01:4d:4b:0e:f1:ef:7e:9e:0b:f6:c8:28:
d8:9a:c0:29:2f:b7:5e:b2:2b:e1:76:16:72:ad:43:72:4d:da:
33:53:8a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:47:02 2024 by rpki-client on console-fra.rpki-client.org