Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/34362e31372e3137322e302f32332d3234203d3e203437353833.roa
File: 34362e31372e3137322e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: AWii0xtWVrj5RJWa9Qo/euQofQUIVe6Myq7CMgxwjoo=
Subject key identifier: 1B:0D:87:D4:8F:E7:1A:97:8B:13:E1:E8:26:7A:95:A2:9E:97:08:10
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 4A1882FBD7BD15CDBA24B37B9F4BA4AA90DECAB9
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/34362e31372e3137322e302f32332d3234203d3e203437353833.roa
Signing time: Mon 26 Feb 2024 08:53:46 +0000
ROA not before: Mon 26 Feb 2024 08:48:46 +0000
ROA not after: Mon 24 Feb 2025 08:53:46 +0000
asID: 47583
IP address blocks: 46.17.172.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.mft
rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:18:82:fb:d7:bd:15:cd:ba:24:b3:7b:9f:4b:a4:aa:90:de:ca:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Feb 26 08:48:46 2024 GMT
Not After : Feb 24 08:53:46 2025 GMT
Subject: CN=1B0D87D48FE71A978B13E1E8267A95A29E970810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ca:fe:33:51:90:fd:7d:03:d1:b0:95:af:6e:
72:5e:86:0d:e4:ce:ac:7e:b1:e2:95:30:af:d1:96:
67:45:ba:9c:63:01:5b:1f:1e:66:c2:88:fe:e9:13:
01:7b:07:e9:8f:51:a9:7f:ae:ac:a3:c0:14:8a:90:
c9:42:45:1b:98:90:82:f5:32:dc:98:b9:69:82:1d:
b2:55:44:7c:9a:f0:d4:65:5c:6f:7f:cd:e2:ca:43:
86:b9:64:74:d2:25:a9:bb:54:c7:d4:b8:1d:24:87:
73:7a:9c:1b:0b:fb:67:d1:3a:3d:71:73:a6:36:d4:
35:d9:82:48:9a:00:0a:29:eb:a4:10:28:4f:ca:fd:
79:b3:78:17:72:38:10:f7:14:fd:2b:79:96:da:66:
be:6d:52:a4:bd:d1:83:8f:26:e0:79:a3:0e:8d:69:
c6:8e:38:d2:49:2c:b6:47:92:51:bc:d6:51:3b:70:
4e:86:fb:6e:8d:90:3f:99:56:a4:96:eb:6c:fa:01:
14:f4:37:fa:d0:95:0a:7f:18:69:88:ab:e5:c0:c4:
eb:c4:e4:70:37:c2:90:ac:7d:9e:b3:2d:88:cb:b4:
d7:8d:5c:14:a9:70:c7:3b:5b:7d:c3:b0:b7:8e:80:
07:6a:d3:a8:76:81:63:d8:31:4a:40:50:17:d7:11:
9b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:0D:87:D4:8F:E7:1A:97:8B:13:E1:E8:26:7A:95:A2:9E:97:08:10
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/34362e31372e3137322e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.172.0/23
Signature Algorithm: sha256WithRSAEncryption
67:cf:a5:00:64:99:25:0c:e7:03:ed:b7:c6:1e:9d:c7:ab:05:
d8:47:ea:37:b7:a9:f7:20:38:00:f6:fb:71:e4:ea:8b:7e:1c:
1d:c5:10:fa:33:d2:5c:72:1c:a2:83:d9:44:12:87:25:bc:7c:
36:f0:a3:36:4b:bf:26:24:8a:b5:a0:7d:72:99:96:67:e2:20:
af:b7:2f:6e:e0:8c:4a:e3:57:ee:36:3e:16:74:46:52:b2:69:
8b:f2:63:61:dd:27:a4:b1:43:d3:fc:64:25:d8:58:c7:a7:34:
7b:2a:a0:80:de:29:9b:22:1c:d8:f6:e2:4c:d5:81:dd:e4:6c:
24:70:4f:cb:fa:4d:b3:68:11:82:94:6c:4b:96:eb:8a:24:a0:
d0:50:3d:90:93:07:3f:90:3b:8f:a2:6c:77:d6:e5:e0:86:3c:
6c:d1:5b:2a:26:49:1c:f3:69:ec:74:8e:c8:d4:cc:d9:47:02:
d0:b8:c0:e4:a8:f5:59:23:06:fa:39:f3:b6:7d:e4:b4:b2:ab:
5c:ed:ad:a7:1a:04:29:fe:6f:c0:7c:1a:e2:d3:b9:61:56:1f:
61:e0:83:3f:37:91:30:21:80:55:b5:6e:c0:e3:09:34:9b:f3:
78:ab:a8:9b:70:30:50:ba:77:66:57:52:ed:83:71:22:70:94:
ae:ef:bb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 02:47:02 2024 by rpki-client on console-fra.rpki-client.org