Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139342e35332e3130382e302f32342d3234203d3e20313336373837.roa
File: 3139342e35332e3130382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: cl61xZ7DPLyF+VkO+nvqa5voISOSpzyfleNQY89Ijg0=
Subject key identifier: F7:48:D8:08:60:42:6F:59:CB:C4:71:A6:4F:8E:E6:9F:34:85:38:7B
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 68FB7F1ED7446F658615E0D19B50D89F2620DE81
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139342e35332e3130382e302f32342d3234203d3e20313336373837.roa
Signing time: Tue 13 Feb 2024 12:53:58 +0000
ROA not before: Tue 13 Feb 2024 12:48:58 +0000
ROA not after: Tue 11 Feb 2025 12:53:58 +0000
asID: 136787
IP address blocks: 194.53.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.mft
rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 16:15:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:fb:7f:1e:d7:44:6f:65:86:15:e0:d1:9b:50:d8:9f:26:20:de:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Feb 13 12:48:58 2024 GMT
Not After : Feb 11 12:53:58 2025 GMT
Subject: CN=F748D80860426F59CBC471A64F8EE69F3485387B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ad:2d:95:d9:09:a9:f5:f8:9c:cd:2c:9d:4c:
40:58:15:a7:1c:75:11:cf:df:29:15:30:c2:5f:8f:
a8:7e:a5:1b:b3:54:eb:32:d6:25:ff:4f:4b:a3:7c:
7e:f0:65:4d:97:f0:87:05:8e:9c:b9:8e:86:23:30:
68:fa:89:01:48:48:ab:00:d0:87:e3:41:e0:9b:7d:
42:ca:4f:79:2f:4a:f8:6a:87:f4:e1:72:85:b6:e9:
29:df:6f:7b:db:0b:27:16:1a:ad:3e:e0:7e:33:63:
0d:05:af:d9:84:51:f4:11:a3:ba:b2:ec:c6:81:58:
ed:e1:7b:20:4b:f0:0f:f9:7f:7b:3e:e5:bd:d9:0a:
f5:13:21:93:46:1a:09:7a:fc:fe:84:f1:a5:b4:16:
0a:df:1b:7b:79:20:56:4b:dd:c9:af:d0:da:aa:fb:
aa:74:ce:39:34:18:a6:ee:61:51:7b:1a:b6:88:68:
df:92:2a:94:ac:f9:d2:05:44:bf:78:7a:d4:98:ba:
7a:8e:4d:5e:22:13:67:b7:4c:1e:ec:6b:cd:5c:bd:
98:41:ea:5a:4e:4d:ea:c0:bf:26:76:b4:31:69:a8:
d2:d3:19:c3:f0:d6:63:87:71:db:40:a9:ad:ed:d3:
b9:7f:6e:21:75:18:1c:55:bf:3d:f1:63:26:3b:03:
2f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:48:D8:08:60:42:6F:59:CB:C4:71:A6:4F:8E:E6:9F:34:85:38:7B
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139342e35332e3130382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.108.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:ae:b9:62:92:1d:a6:b7:84:58:e9:91:22:9b:64:4e:2c:21:
9e:3e:e2:3f:57:94:31:87:cd:fc:6b:b6:25:c8:3b:86:3a:00:
7e:68:bb:f8:82:d2:c1:2f:07:45:e4:33:2d:bf:ba:ad:b7:1a:
cc:a8:e7:bf:bc:99:c4:1c:96:2e:3d:07:d4:bc:d4:f5:80:63:
43:75:61:ba:eb:63:35:a7:f8:cd:5e:03:c9:b4:21:12:c5:3c:
97:fd:89:76:10:d1:66:2f:45:9b:3b:d9:63:dc:38:f1:30:3b:
88:55:ce:b6:87:3d:e3:eb:a0:67:95:eb:92:d3:7f:aa:42:a5:
82:a9:01:ed:96:e9:d9:1e:4f:91:04:82:6b:b7:bb:67:75:65:
ef:96:3e:2e:a7:06:9b:0e:3f:27:58:2e:a5:73:af:64:0d:f1:
62:df:4b:87:ce:6e:4c:be:29:02:91:fd:ea:54:b5:21:b4:19:
c5:25:ce:85:ea:e5:30:89:45:41:92:1a:cd:dc:66:54:46:84:
d2:a7:1d:6f:50:17:65:d9:7d:8a:d0:ee:a1:bc:3b:16:26:8e:
f9:9d:55:97:f7:03:cc:9f:ac:e2:dd:6b:b9:63:94:f5:56:49:
1e:af:fb:c3:5e:b5:1e:fe:1d:12:07:5f:1c:c7:ec:0d:0f:1f:
ab:73:7b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 00:13:15 2024 by rpki-client on console-fra.rpki-client.org