Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3231332e3139302e362e302f32342d3234203d3e203437353833.roa
File: 3231332e3139302e362e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: psOshe7avJfjkl3Gec+ImBWWyeC392uXarQsx79dRaM=
Subject key identifier: 2B:06:F7:7D:7F:4F:FA:B2:AA:0F:F0:98:45:BD:A4:1D:B0:BE:20:23
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 09297D46A01A679A0B76A827ED0D5BE93FCFEFD4
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3231332e3139302e362e302f32342d3234203d3e203437353833.roa
Signing time: Mon 26 Feb 2024 08:53:47 +0000
ROA not before: Mon 26 Feb 2024 08:48:47 +0000
ROA not after: Mon 24 Feb 2025 08:53:47 +0000
asID: 47583
IP address blocks: 213.190.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.mft
rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:29:7d:46:a0:1a:67:9a:0b:76:a8:27:ed:0d:5b:e9:3f:cf:ef:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Feb 26 08:48:47 2024 GMT
Not After : Feb 24 08:53:47 2025 GMT
Subject: CN=2B06F77D7F4FFAB2AA0FF09845BDA41DB0BE2023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d2:b5:4c:4b:8a:9d:04:91:0e:84:9e:df:a0:
1a:15:eb:7f:38:01:d7:d3:d2:2e:b7:63:65:6f:45:
29:0f:ff:fa:72:c0:80:2a:d2:a8:a3:87:60:d2:26:
f7:c7:24:0f:2e:76:e8:ae:0a:77:d6:8a:20:3a:78:
8f:50:0d:97:14:7f:93:4d:8d:f8:2e:84:89:59:8f:
95:85:5e:21:88:7b:5c:93:06:8c:04:56:b9:2e:80:
c0:74:c6:6a:cb:e8:58:e3:9d:d3:77:3c:45:7e:82:
65:5f:df:da:5b:b6:8e:57:6a:e1:88:42:d9:aa:1a:
33:9e:14:94:7e:e5:06:dc:2b:5f:d9:28:15:b8:49:
3d:33:fc:98:b8:63:a3:81:60:b9:c7:0f:10:1b:ac:
8e:27:ea:b8:8f:17:e8:0c:bf:a3:28:ed:48:8e:5f:
a6:10:4b:8f:5b:44:8a:e1:5f:8d:7f:86:93:c4:d8:
8b:83:05:ef:4f:ab:6e:cd:72:97:b6:1e:8e:61:9e:
81:df:48:78:29:83:da:a0:46:14:6d:22:11:b8:bd:
5b:74:6b:95:a8:b0:e5:04:d2:24:df:7c:c1:0f:68:
75:7a:60:03:ca:46:e9:be:03:f3:06:71:bf:57:13:
ce:ec:2b:20:1a:01:10:9f:a9:33:2f:06:ed:51:d3:
42:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:06:F7:7D:7F:4F:FA:B2:AA:0F:F0:98:45:BD:A4:1D:B0:BE:20:23
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/3231332e3139302e362e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.190.6.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:57:41:5e:f0:e7:e0:79:42:02:29:79:9e:95:a1:4a:23:55:
fc:24:d7:28:d0:d9:92:d6:a1:9e:a1:eb:64:62:b1:ff:7f:30:
06:3e:79:e8:0b:c5:63:da:96:99:6b:8a:e6:ef:47:2c:f5:74:
0f:e7:d1:7c:08:e7:d7:73:db:80:15:8a:7b:00:80:73:c8:9d:
4f:58:bf:03:90:ac:8c:0e:20:ae:54:4e:3b:5b:14:ec:84:16:
db:1c:a5:9a:b1:e2:20:f4:8c:93:48:f2:da:fa:b4:83:00:52:
91:d8:08:1a:b6:4f:24:d0:ef:35:e2:86:3c:82:57:cb:9a:9f:
7f:53:7e:22:b1:9a:2c:eb:cf:c3:c3:50:c9:d7:a7:63:d5:0a:
68:0d:98:e7:cc:c0:40:e8:62:c4:c2:4b:96:17:0d:7b:31:e0:
a6:27:c7:e8:ba:bb:c8:20:cc:ab:fe:e1:ad:66:f8:05:e3:83:
7c:36:a9:b4:f5:96:61:cf:55:f0:ca:aa:0e:aa:0e:3f:bc:34:
cd:fb:37:2a:a0:e1:1d:cb:34:7c:07:c0:b1:e9:f9:47:9a:1e:
50:f8:17:2b:bc:46:99:1a:da:2e:e3:22:67:be:d9:52:45:4a:
7b:ed:53:46:34:7e:99:f7:6f:75:de:66:bf:94:4d:17:e1:01:
df:4b:90:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 08:13:55 2024 by rpki-client on console-ams.rpki-client.org