Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/34352e38392e3230342e302f32322d3234203d3e203437353833.roa
File: 34352e38392e3230342e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: 1URFtTwusx+3oJUf2NKRLoFgouZLIYIwhIitBlOTAYM=
Subject key identifier: 5C:FF:30:A7:D5:68:88:DE:54:C5:D4:8A:C0:B1:BB:3D:93:98:34:92
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 2A9C975FF6D5D12DFB2120DCEBF99825CED6D71C
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/34352e38392e3230342e302f32322d3234203d3e203437353833.roa
Signing time: Mon 26 Feb 2024 08:53:47 +0000
ROA not before: Mon 26 Feb 2024 08:48:47 +0000
ROA not after: Mon 24 Feb 2025 08:53:47 +0000
asID: 47583
IP address blocks: 45.89.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.mft
rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:9c:97:5f:f6:d5:d1:2d:fb:21:20:dc:eb:f9:98:25:ce:d6:d7:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Feb 26 08:48:47 2024 GMT
Not After : Feb 24 08:53:47 2025 GMT
Subject: CN=5CFF30A7D56888DE54C5D48AC0B1BB3D93983492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:b4:8f:24:c6:0c:8b:55:2b:68:14:fe:d4:db:
c6:77:a7:b6:05:84:1c:c7:04:ba:6d:2d:76:42:6e:
a0:6f:77:dd:26:62:5b:a9:79:37:0d:40:f9:cd:52:
3b:05:c8:ed:94:96:75:c0:13:35:0f:01:8d:c9:15:
0d:3e:6c:20:a8:b5:b7:86:61:39:66:f6:59:aa:98:
71:ce:2c:f3:c7:4a:08:e0:a2:4c:72:92:5e:a5:b6:
e3:41:a6:2b:44:a6:f0:32:30:7a:75:ff:e0:62:32:
39:0f:2f:af:f0:25:30:da:03:c5:52:c4:72:64:ed:
5e:17:1f:28:af:9e:23:07:8c:8f:95:44:e1:8c:ac:
d0:3e:6b:90:bf:92:aa:fb:f6:a4:4e:b3:89:a9:1a:
25:20:5d:4f:1c:11:01:4e:2d:a6:ed:32:74:2e:85:
29:0d:18:50:40:9a:ac:ff:b9:a8:6d:04:d5:29:ae:
90:ab:d7:a8:fd:3d:f2:66:fa:b3:6c:25:60:99:75:
31:cd:ad:48:29:55:8a:9c:d7:61:ee:7c:73:77:a6:
a3:1c:64:78:96:f0:93:95:01:63:b1:43:2e:6d:c2:
23:8b:a8:39:9b:94:cb:75:e3:0d:ec:1c:b2:04:d1:
a7:bc:95:ad:01:11:b0:f4:81:a7:e8:7f:a9:73:00:
58:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FF:30:A7:D5:68:88:DE:54:C5:D4:8A:C0:B1:BB:3D:93:98:34:92
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/34352e38392e3230342e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.204.0/22
Signature Algorithm: sha256WithRSAEncryption
83:49:6d:14:28:bf:0e:88:75:04:a4:75:32:87:b6:5a:93:99:
6f:33:5d:54:2c:51:f3:2c:cf:d6:9c:14:ae:0a:31:da:7f:78:
97:6a:7f:90:59:77:50:a8:fe:95:d3:ce:77:3a:e8:0d:c6:18:
1f:e1:17:c7:90:1b:f2:7c:6e:a5:eb:62:14:1b:e8:63:8e:5c:
71:a4:9a:08:32:92:f1:58:cc:92:d4:54:d9:d3:38:2c:32:3f:
ef:9a:16:3e:c4:1b:38:8d:3b:86:5a:be:2a:a6:09:7c:3c:17:
cb:d1:cb:2d:3a:bd:0f:bd:53:18:8b:3d:58:91:07:4d:54:61:
ba:35:81:97:15:22:f2:f8:c1:3e:6d:09:eb:2d:62:85:5f:62:
98:a8:cc:ec:42:d5:d9:5e:df:73:57:46:17:0e:fc:9b:d6:7b:
95:a8:82:7b:b7:b0:d4:c9:d1:22:dd:56:ac:49:21:d4:54:56:
44:0d:24:43:4f:ef:35:3c:76:1e:e0:1c:2c:b6:02:2c:81:20:
5f:96:46:35:2a:81:26:68:05:db:d0:5f:2c:49:2b:a3:7e:f1:
4d:3c:70:25:6e:c7:60:0c:51:5e:e9:f0:0d:c3:36:4c:32:97:
d9:3d:6d:b7:08:8c:ae:1a:9b:de:e8:bd:7d:87:c1:a3:6d:91:
0a:81:2b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:47:02 2024 by rpki-client on console-fra.rpki-client.org