Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139342e35332e3130392e302f32342d3234203d3e20313336373837.roa
File: 3139342e35332e3130392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Bmct7NKTIPYT/zW4fwoaAr6gNkxTfVYFF5hst1imMk8=
Subject key identifier: F2:6A:FB:6A:5D:C9:24:AE:36:36:F1:55:DB:CB:D3:DC:F9:A9:DA:E4
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 307A2803BD4758183582D9D0D9E3B77B51B136D5
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139342e35332e3130392e302f32342d3234203d3e20313336373837.roa
Signing time: Tue 13 Feb 2024 12:54:00 +0000
ROA not before: Tue 13 Feb 2024 12:49:00 +0000
ROA not after: Tue 11 Feb 2025 12:54:00 +0000
asID: 136787
IP address blocks: 194.53.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.mft
rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:7a:28:03:bd:47:58:18:35:82:d9:d0:d9:e3:b7:7b:51:b1:36:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Feb 13 12:49:00 2024 GMT
Not After : Feb 11 12:54:00 2025 GMT
Subject: CN=F26AFB6A5DC924AE3636F155DBCBD3DCF9A9DAE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ec:53:c8:f4:02:c2:68:88:0b:bd:42:69:72:
da:3d:9e:a1:5d:62:5a:76:58:83:2b:1d:cf:6d:f4:
b4:54:5a:5c:0b:30:d9:dd:19:c8:36:70:1c:fe:34:
3b:70:47:e3:c7:38:b3:e0:8b:91:59:fd:d0:b8:e4:
85:39:4f:f9:ef:04:73:23:d9:82:78:00:7e:0a:25:
79:8b:a3:8d:03:1e:7d:5b:29:55:6e:8a:79:5f:52:
bd:d2:9d:8b:72:ae:16:fd:d9:cc:a6:f0:8a:c8:64:
d0:fd:82:da:14:19:04:f2:ff:6d:a0:98:f1:7d:97:
3d:b7:98:a2:af:23:36:ce:f3:34:c9:3d:60:1d:df:
2c:7d:f1:7b:38:a6:24:c5:32:66:59:7f:02:7a:2a:
36:6e:49:37:87:ee:a5:44:1d:60:3f:2d:df:58:1b:
4e:d1:0e:4c:48:c4:85:bd:cd:db:a8:0f:a6:ad:f5:
3a:4b:67:2f:c1:ce:95:8b:9e:5b:08:2a:9c:99:f3:
4c:28:c4:08:68:e0:6d:88:77:31:c2:b6:79:04:bf:
a0:fc:a7:2e:27:75:99:98:b8:af:fe:02:e6:aa:b5:
0a:1d:09:ac:9d:78:10:d0:af:20:29:f2:4e:f1:a8:
eb:56:ea:09:ba:81:85:2b:34:12:8e:b4:cb:b3:c5:
6a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6A:FB:6A:5D:C9:24:AE:36:36:F1:55:DB:CB:D3:DC:F9:A9:DA:E4
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3139342e35332e3130392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.109.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:c9:f2:81:79:47:c9:00:e9:b7:4e:17:2c:d6:20:50:5e:38:
c0:13:ea:fd:bb:fd:6c:96:f3:04:ba:39:23:12:c2:e2:20:51:
3b:76:27:6e:a2:74:e7:96:1e:bd:23:e9:6f:6a:d6:34:de:f7:
e3:b8:e1:04:62:14:ef:ab:a7:92:6c:01:c7:16:50:46:fe:f6:
ce:5b:87:b1:e5:fd:b3:1c:08:78:c5:9f:de:27:07:87:82:16:
05:19:85:c0:2d:c5:95:ff:82:9c:3f:4b:2c:01:e1:4d:70:72:
7f:a0:16:db:63:85:92:01:ef:3a:1e:97:6e:8f:f4:eb:63:30:
f4:5a:57:dd:32:6e:33:25:12:05:73:79:0d:88:b4:8e:cd:6a:
50:fc:27:06:cf:fe:95:46:4a:7d:52:f8:7b:ec:e7:d1:8f:28:
0e:06:5c:0b:86:02:cc:dc:7c:71:5c:db:e3:01:f7:85:e9:69:
f1:32:da:68:49:d0:76:b6:5d:f9:39:a4:d9:2b:a7:e7:9f:f5:
26:9a:11:aa:37:7e:66:48:0a:cc:f2:59:ab:22:ce:56:6c:2f:
42:bd:20:56:d6:fe:2c:0d:f0:24:d9:a2:90:90:40:c4:54:72:
d3:dc:54:ce:01:b4:07:f9:45:b8:69:a3:de:c4:17:2c:6b:a8:
c8:76:27:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 11:33:00 2024 by rpki-client on console-ams.rpki-client.org