Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/34362e31372e3137342e302f32332d3234203d3e203437353833.roa
File: 34362e31372e3137342e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: jrb4DqM88x+edP4reUzMEVhmiLq6/UZ/rOtjhi0itP8=
Subject key identifier: 90:66:DF:D2:F2:E7:12:7D:DC:B1:FC:91:67:B6:6B:13:92:DF:1A:41
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 13DF3912AB8D3CF948D8690C321AA5EB7718B7EC
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/34362e31372e3137342e302f32332d3234203d3e203437353833.roa
Signing time: Mon 26 Feb 2024 08:53:47 +0000
ROA not before: Mon 26 Feb 2024 08:48:47 +0000
ROA not after: Mon 24 Feb 2025 08:53:47 +0000
asID: 47583
IP address blocks: 46.17.174.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.mft
rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:df:39:12:ab:8d:3c:f9:48:d8:69:0c:32:1a:a5:eb:77:18:b7:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Feb 26 08:48:47 2024 GMT
Not After : Feb 24 08:53:47 2025 GMT
Subject: CN=9066DFD2F2E7127DDCB1FC9167B66B1392DF1A41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:17:89:40:d3:59:83:27:88:4f:d1:60:5c:c3:
04:9d:9e:41:96:8e:62:a3:c5:bb:79:22:63:fc:d3:
e1:ce:95:c3:c0:b3:e5:4c:40:34:f6:af:5a:dd:c3:
70:12:17:a4:c3:f6:1d:42:25:49:4a:18:29:ea:01:
61:8e:dc:68:13:f8:62:6e:dc:d1:f0:7d:f9:83:c6:
ef:8c:f8:50:a4:65:d2:84:f9:20:2f:cf:de:30:d9:
68:bd:55:97:70:2d:05:bf:8c:65:b9:72:f4:3a:ab:
bd:76:f6:17:eb:18:d5:39:e0:65:fb:03:f6:55:0d:
06:6a:d1:7b:15:92:0f:e2:5c:51:d7:c6:0d:33:9e:
0d:e6:57:45:58:3d:14:53:4e:f5:7f:b6:db:83:67:
a9:dc:e1:56:bd:c7:96:09:a8:27:61:2a:31:31:75:
22:14:ed:8b:a9:52:40:35:74:35:17:49:68:9c:42:
21:14:b5:56:bd:5d:95:c5:c0:32:98:9d:c8:21:0c:
94:75:f7:18:03:c1:fe:f1:99:09:db:26:69:87:8d:
72:da:23:ea:17:db:06:e6:37:a4:79:f3:ac:24:0d:
f4:8a:f1:22:42:e4:28:00:7c:18:af:94:37:8f:da:
03:71:a9:9d:c2:4e:77:b7:77:9b:96:82:b4:2f:99:
53:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:66:DF:D2:F2:E7:12:7D:DC:B1:FC:91:67:B6:6B:13:92:DF:1A:41
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/34362e31372e3137342e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.174.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:62:90:57:2a:22:2a:92:ec:48:c0:06:61:4f:b4:94:44:c7:
f6:51:09:58:0a:42:58:22:9f:50:1e:d1:8c:b9:f4:98:48:92:
ff:f3:eb:22:83:39:20:a4:38:d9:4d:54:16:91:04:fb:40:82:
4f:ff:bb:c4:87:54:b6:59:60:d6:ec:88:02:e3:60:4f:25:98:
ce:fb:cb:31:6a:3b:23:5d:40:d4:b5:0f:0b:c0:52:32:64:57:
b9:b8:32:32:58:34:81:a8:78:e4:0b:c4:63:55:f2:fa:92:da:
5c:22:ef:7b:9b:5e:f9:a4:1e:15:b8:64:50:c9:e5:bd:fa:3f:
4a:a2:64:e7:0f:71:4f:91:88:5c:bf:86:8f:dd:d4:21:34:b4:
ad:8a:de:6b:ac:8a:26:81:af:02:c7:b0:41:6a:73:4a:f9:f0:
ea:9c:e8:33:cb:1e:1a:6e:38:93:16:53:ad:53:47:c3:79:0e:
bf:92:89:f1:d6:9d:8d:6a:89:57:e3:0c:e8:2c:55:b4:72:47:
68:72:7a:c8:f0:1c:dc:5b:7b:d4:fe:86:97:b4:66:75:c2:da:
b1:97:fb:e9:2c:aa:5a:c3:1d:c3:21:63:8f:17:d8:1d:23:30:
4f:b2:6a:be:e9:c0:20:50:04:11:5a:cd:4f:c1:ed:1a:cd:a8:
51:0d:20:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 08:13:55 2024 by rpki-client on console-ams.rpki-client.org