Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/322e35382e38322e302f32342d3332203d3e203531313637.roa
File: 322e35382e38322e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: 047HaCeAbxF+HwrwbBrILUSiS2LKmA2h2B4pFcI8UcE=
Subject key identifier: B5:BE:FD:32:FD:47:A8:2A:75:63:79:F6:7C:45:4A:C3:E8:F3:B5:34
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 51514A11BBE6A6D1DD59DC563EF7C0F957BF77BA
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/322e35382e38322e302f32342d3332203d3e203531313637.roa
Signing time: Mon 26 Feb 2024 08:53:46 +0000
ROA not before: Mon 26 Feb 2024 08:48:46 +0000
ROA not after: Mon 24 Feb 2025 08:53:46 +0000
asID: 51167
IP address blocks: 2.58.82.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.mft
rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:51:4a:11:bb:e6:a6:d1:dd:59:dc:56:3e:f7:c0:f9:57:bf:77:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Feb 26 08:48:46 2024 GMT
Not After : Feb 24 08:53:46 2025 GMT
Subject: CN=B5BEFD32FD47A82A756379F67C454AC3E8F3B534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:df:7b:c7:ad:af:d5:9f:90:07:ab:7e:61:3e:
4b:c7:86:e2:4a:6d:b2:23:ad:39:be:ec:07:b3:64:
4d:45:57:1f:06:e9:39:22:a5:34:a1:ac:00:0a:6d:
4e:37:f1:70:e0:e4:cc:5c:20:2f:a5:14:c0:98:e7:
b5:8e:7a:14:f5:30:a8:32:42:63:96:4d:50:14:86:
01:e4:b2:47:3e:35:9d:d9:df:a4:42:a9:c7:1f:3e:
04:ea:3d:41:78:62:2a:c0:f3:ae:82:96:1e:7d:de:
8e:a1:c1:ff:4e:69:69:20:9d:5f:5e:66:ce:bb:34:
50:55:40:b6:71:2e:cc:cf:2d:42:60:8d:5c:35:a2:
f2:2b:eb:9f:d6:8e:44:4c:6b:69:dd:05:7a:13:2f:
93:0b:1b:8e:6f:03:93:6e:75:c2:9a:12:59:85:ca:
a4:59:a9:73:cc:c5:4e:0c:8b:88:86:6f:62:f2:ec:
aa:6a:20:71:1b:ba:60:21:c1:b2:62:84:56:fe:61:
18:e9:b9:c7:ca:77:f9:21:36:ac:fb:19:a1:37:41:
53:5d:10:02:cc:c3:8e:10:8e:cc:86:a4:df:32:1c:
af:11:dc:06:5e:d8:37:75:a3:dd:9a:91:bf:02:87:
d1:da:78:38:65:70:06:8c:01:97:28:94:3f:b9:a5:
26:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:BE:FD:32:FD:47:A8:2A:75:63:79:F6:7C:45:4A:C3:E8:F3:B5:34
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/322e35382e38322e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.82.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:f7:c9:12:c3:d0:f5:3b:48:46:d9:85:0b:36:10:9b:f7:69:
0e:ac:20:29:26:36:fe:22:e9:62:0a:e9:bb:66:dc:cf:bf:88:
03:8e:ae:f3:4e:6a:44:76:5a:c3:23:37:ab:aa:08:64:25:6f:
0c:77:c1:28:a4:fe:e2:5a:00:6e:e6:a0:1c:c8:f0:4d:1c:d5:
c0:71:6a:e6:3b:5c:74:3d:c4:3c:fc:56:8e:7a:ab:9d:38:8e:
9f:be:04:74:d9:ed:14:cd:48:a5:d5:4b:7b:67:e3:82:f1:22:
a5:39:da:43:68:bb:6c:41:a2:a8:c4:ad:39:c1:de:52:a5:b2:
c7:68:39:87:11:1b:1d:a2:a9:44:95:e2:01:20:3b:47:34:03:
8c:6c:d7:e6:28:38:77:6f:17:3a:59:14:dd:30:a3:62:2d:61:
ed:4d:56:cf:be:9e:64:cb:4d:94:65:d5:51:e5:24:e4:21:21:
3e:45:81:fd:68:e0:02:1d:36:a3:01:28:b6:aa:d5:dd:2e:23:
cb:96:c8:df:3e:30:e3:fb:36:60:94:1f:76:20:56:e6:79:3e:
e0:de:05:b1:33:9e:70:de:44:ad:a4:48:dd:31:ba:8e:bd:b9:
a8:a2:c9:83:42:70:1b:c5:cc:da:d2:b4:e5:14:a7:c2:fb:7d:
35:72:54:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 15:37:17 2024 by rpki-client on console-ams.rpki-client.org