Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/34352e38382e3139362e302f32322d3234203d3e203437353833.roa
File: 34352e38382e3139362e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: lpFEOlXqsKIP+XxUv45W++Ofg6OqjB6ItQRTyDrcSRc=
Subject key identifier: F9:0C:F1:04:A4:DA:A4:63:6A:5E:92:02:0F:8B:32:E2:2D:35:05:CC
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 1153D0541A922319AA04B92BF81511EEF82B6B78
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/34352e38382e3139362e302f32322d3234203d3e203437353833.roa
Signing time: Mon 26 Feb 2024 08:53:46 +0000
ROA not before: Mon 26 Feb 2024 08:48:46 +0000
ROA not after: Mon 24 Feb 2025 08:53:46 +0000
asID: 47583
IP address blocks: 45.88.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.mft
rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:53:d0:54:1a:92:23:19:aa:04:b9:2b:f8:15:11:ee:f8:2b:6b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Feb 26 08:48:46 2024 GMT
Not After : Feb 24 08:53:46 2025 GMT
Subject: CN=F90CF104A4DAA4636A5E92020F8B32E22D3505CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d3:3d:0b:0a:39:48:77:61:9a:52:6c:19:25:
fb:d5:43:d8:91:63:5b:87:2c:66:b6:5f:fc:95:9e:
56:3a:42:dd:96:90:11:be:8b:ea:a1:e5:81:9a:c7:
e7:3e:16:87:45:19:31:f4:8d:32:52:63:97:0d:b3:
c5:4a:a9:b4:ca:1f:6b:46:cc:18:5d:0a:10:18:74:
9a:2a:ba:61:c2:97:08:9c:b0:16:91:e8:8b:4a:98:
b2:da:51:ee:d7:62:af:d1:e5:8b:e9:02:44:60:ab:
d0:b2:52:64:f4:d1:76:da:da:67:5d:c2:01:31:4d:
01:ce:1e:b1:79:81:bd:6b:94:81:38:39:e7:dd:8f:
de:72:43:c2:b5:76:84:35:ff:46:33:56:dd:30:2f:
94:7f:5b:45:b9:53:d3:08:73:64:9e:05:56:32:ae:
9c:e0:67:ff:b2:96:12:e9:79:98:8f:e3:52:ed:c9:
ee:0d:77:a8:00:dd:b2:36:19:68:7b:42:e4:40:b5:
06:a4:41:17:11:d4:85:b5:f1:e0:3b:78:97:c4:bd:
4a:c0:df:20:fa:a1:6a:b9:75:8a:78:08:4f:ea:e7:
f9:fd:b4:59:46:ba:48:fc:43:bf:38:6a:48:ee:2f:
c2:9e:41:38:6b:c4:ca:b7:6e:88:c6:f1:bb:52:0a:
b6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0C:F1:04:A4:DA:A4:63:6A:5E:92:02:0F:8B:32:E2:2D:35:05:CC
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/34352e38382e3139362e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.196.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:3d:6e:99:98:ee:94:25:18:cc:4d:f3:0d:0b:e5:75:09:31:
36:ee:de:3e:a2:70:e5:0d:eb:fb:2f:1e:16:73:91:1f:40:29:
94:80:1a:1f:00:26:06:f0:39:86:5b:21:03:ed:29:de:f6:15:
57:9d:c1:8c:11:66:93:53:d7:e7:22:f7:c7:62:4c:51:83:18:
51:ad:47:90:d9:b8:33:3b:fc:e4:67:a2:65:c1:43:8b:35:8a:
53:7b:51:f2:40:af:1c:6c:22:5f:fb:ea:39:7b:ce:c4:a5:5f:
c5:e0:55:be:3c:bf:52:3a:5e:69:f2:d1:1a:f7:41:98:71:6a:
9e:ae:e3:a5:4f:e7:eb:98:1d:99:3c:8a:99:26:56:a8:f5:01:
8a:8d:15:6b:85:f2:60:c1:80:07:74:c3:42:b2:8f:9b:c5:80:
62:59:0c:35:af:9a:54:9f:91:88:ee:cf:d2:24:bd:c4:c9:65:
a7:80:ed:25:17:e9:b0:2f:79:18:c0:88:a2:68:e7:32:85:dd:
d1:2a:ab:16:ca:f2:98:8c:f1:c0:8c:10:54:df:07:f4:df:56:
d7:02:8c:f5:f7:62:36:42:77:f9:bc:fe:f3:8b:3d:b5:aa:88:
c7:35:f3:5c:c4:87:56:f5:1f:53:37:fc:75:c2:c1:66:8f:6e:
86:49:58:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 08:34:17 2024 by rpki-client on console-fra.rpki-client.org