Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/34352e39332e3132342e302f32322d3234203d3e203437353833.roa
File: 34352e39332e3132342e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: adEdF60NwPBHDXnY/Fim5XGXiezQU5+js/14c+6j6lY=
Subject key identifier: B0:61:57:93:E1:F1:E1:6B:F7:CE:70:BD:95:34:D5:6F:02:F2:01:92
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 73C93174C325870DAE965484AA5EAA7C6BBD9ECD
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/34352e39332e3132342e302f32322d3234203d3e203437353833.roa
Signing time: Mon 26 Feb 2024 08:53:46 +0000
ROA not before: Mon 26 Feb 2024 08:48:46 +0000
ROA not after: Mon 24 Feb 2025 08:53:46 +0000
asID: 47583
IP address blocks: 45.93.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.mft
rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:c9:31:74:c3:25:87:0d:ae:96:54:84:aa:5e:aa:7c:6b:bd:9e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Feb 26 08:48:46 2024 GMT
Not After : Feb 24 08:53:46 2025 GMT
Subject: CN=B0615793E1F1E16BF7CE70BD9534D56F02F20192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:39:1b:a9:15:94:77:a9:5a:cf:37:72:e8:5a:
ce:90:1f:41:c8:ea:19:fb:f2:5f:da:8a:5c:db:4f:
5b:8f:15:80:02:31:b9:fe:2b:aa:87:f8:19:2c:64:
b3:0a:fd:ce:62:ca:81:d3:78:bf:e2:32:a2:88:8c:
50:10:19:af:3a:ad:da:f7:ee:8c:23:14:55:3f:b1:
46:d4:70:71:d5:64:14:c5:da:01:8e:17:d1:b5:c0:
bb:14:93:93:f8:d5:a4:c1:e3:54:98:4f:0a:6b:2e:
2c:4e:d1:1a:de:22:60:18:5f:15:b5:e9:81:21:29:
be:e0:62:64:36:ad:e5:d9:64:03:0d:cf:12:da:bd:
23:e1:ca:85:f9:6a:c1:5d:a5:24:b8:70:94:27:95:
09:3f:a5:59:a6:63:7d:74:7e:9e:8a:95:be:b6:0d:
08:3e:82:7b:73:06:41:a5:50:96:bd:33:73:f4:3f:
a7:11:32:8b:b8:b9:11:bf:d0:56:74:a2:18:a5:67:
c4:97:da:c6:11:f0:ef:5a:bd:f6:a8:18:43:47:45:
df:8e:67:0c:56:e4:f6:78:ee:8f:17:43:34:0f:ad:
86:e3:d0:bf:3c:f3:b9:f4:ee:dc:8f:13:aa:49:72:
9e:1b:11:bb:0e:ba:2e:e4:7f:b7:e5:0a:a0:c6:ed:
d2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:61:57:93:E1:F1:E1:6B:F7:CE:70:BD:95:34:D5:6F:02:F2:01:92
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/34352e39332e3132342e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.124.0/22
Signature Algorithm: sha256WithRSAEncryption
64:c1:07:35:42:a8:83:55:2f:6b:76:4f:0f:29:c9:3d:ab:0c:
23:40:97:ea:08:f2:03:fe:97:9d:32:dd:e7:a8:97:16:86:6f:
17:b3:56:9e:40:32:4a:39:4a:c5:bb:49:e1:b1:e0:99:08:b8:
7c:dc:e8:6f:e5:f0:11:26:7d:a9:79:3d:7a:0f:40:68:6f:f1:
76:12:d6:7d:9e:13:46:59:73:98:b9:6e:94:ca:d6:8c:0f:7a:
e8:a3:90:40:12:a0:74:20:a2:80:09:8a:9f:47:16:6a:44:a0:
e9:8c:ae:b7:fb:d7:9b:ca:7d:55:a8:be:13:ed:0b:f0:9e:68:
b4:85:a5:9f:19:23:92:f1:5f:f2:d0:59:a5:38:9e:49:14:d8:
cd:ab:76:b9:e9:d5:2b:99:01:c6:3f:e4:0d:11:22:ff:9f:87:
55:e0:75:0e:25:0b:aa:6e:43:df:cb:e5:15:a2:40:7d:ad:3e:
5a:98:ac:f7:b4:9a:76:51:ed:ed:ea:47:a1:ac:aa:13:39:1a:
46:81:9b:a9:bd:b2:b6:40:76:36:61:c3:31:27:8e:f6:7d:91:
94:d5:e8:06:5b:cb:54:fc:fe:1f:03:33:ef:ee:ef:55:03:29:
3e:03:29:a4:a9:94:02:10:08:ea:0c:67:9b:6e:b9:35:aa:7d:
ae:5d:b1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:49 2024 by rpki-client on console-ams.rpki-client.org