Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/38312e32322e33362e302f32342d3234203d3e20323039383534.roa
File: 38312e32322e33362e302f32342d3234203d3e20323039383534.roa (raw, json)
Hash identifier: rmvSh9hxf/Exx0/QcL57NJGlqMGsjUNEakAiJyH7ONA=
Subject key identifier: 05:F2:4C:2B:DC:E2:8C:FA:F0:68:50:56:02:DE:71:C7:71:FD:74:A4
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 16E0D86451F12BB1755F79FB22E324F665E05751
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/38312e32322e33362e302f32342d3234203d3e20323039383534.roa
Signing time: Wed 20 Mar 2024 08:22:20 +0000
ROA not before: Wed 20 Mar 2024 08:17:20 +0000
ROA not after: Wed 19 Mar 2025 08:22:20 +0000
asID: 209854
IP address blocks: 81.22.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.mft
rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:e0:d8:64:51:f1:2b:b1:75:5f:79:fb:22:e3:24:f6:65:e0:57:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Mar 20 08:17:20 2024 GMT
Not After : Mar 19 08:22:20 2025 GMT
Subject: CN=05F24C2BDCE28CFAF068505602DE71C771FD74A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e2:75:59:c6:65:39:61:95:b1:0d:82:14:30:
cd:78:69:25:e2:73:f3:0c:f7:b1:08:fa:2f:b7:02:
c5:93:60:86:f7:a1:8f:61:b6:27:c3:2e:ae:f7:30:
11:08:2e:fe:a8:5d:06:bc:91:b4:76:fc:78:79:d4:
e6:d2:15:9d:c5:89:f4:48:8d:16:48:1e:73:e8:17:
43:0a:cb:d0:9b:11:40:70:dc:63:ae:d1:a5:db:18:
b1:a3:cc:9d:b9:a8:99:6b:0d:fb:ec:7e:de:6e:ac:
41:d3:66:6e:13:de:7a:c3:eb:62:64:dc:14:42:14:
bf:5c:e8:5b:e2:02:03:59:d9:f3:78:90:9c:f8:fb:
7e:67:08:71:9a:76:42:d4:3a:52:06:0a:fb:23:f3:
98:c3:65:dd:32:c5:01:23:bf:2d:b1:1a:b1:4c:bb:
27:a2:d4:50:2f:de:9a:37:93:95:96:15:34:be:7b:
95:97:f1:8d:d0:84:45:50:f3:9f:68:32:ce:a7:61:
87:82:d4:33:45:fc:c3:bd:f1:ab:5b:03:0e:28:ad:
e6:f6:a3:b3:2b:41:1a:23:63:17:ff:da:dc:89:76:
b5:7d:80:de:73:fd:5f:88:7b:2f:19:10:2a:e5:7f:
fe:4d:0c:95:52:c0:02:0c:3a:e4:5b:07:77:fc:95:
0a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F2:4C:2B:DC:E2:8C:FA:F0:68:50:56:02:DE:71:C7:71:FD:74:A4
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/38312e32322e33362e302f32342d3234203d3e20323039383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.36.0/24
Signature Algorithm: sha256WithRSAEncryption
39:a4:43:65:8a:b1:4b:6e:3f:66:2f:4b:b8:89:f6:f8:ae:93:
dc:7a:f2:d0:fa:04:6a:ef:75:e1:f3:1b:5c:c4:bf:69:dd:c6:
74:1f:60:b9:6a:10:d5:3b:6f:c3:05:82:5a:3c:16:f6:75:f3:
27:a1:1b:ff:24:87:ee:b5:bc:92:6f:92:14:c7:36:e2:63:a8:
61:04:f3:4b:2d:6f:86:5e:be:4f:e0:13:5e:63:2e:f0:9d:c9:
48:f6:24:bc:51:0f:d0:7e:cd:db:4f:5d:71:cd:75:21:82:59:
fa:a1:83:98:bf:d5:9f:cc:88:e1:5d:9b:6c:e3:ef:34:99:42:
b2:1e:13:fe:ce:38:6f:ae:d0:d7:54:64:0c:9c:22:da:e7:c1:
b8:4f:f2:fe:69:26:f0:03:08:88:9e:12:b3:66:37:e5:f4:33:
d1:32:9a:29:33:02:2e:95:a8:d1:82:07:cb:6a:7d:53:c3:93:
f7:bb:ab:e9:b2:55:6c:cc:9a:f3:82:7d:f8:c0:a8:c0:5f:1e:
79:9b:27:b4:75:18:8e:f5:70:ec:19:6f:18:6c:88:bd:88:ab:
64:01:a5:dd:28:c8:7d:6f:34:e7:4d:85:de:5e:4e:cd:9a:39:
22:10:ae:8c:51:e2:e5:e8:e6:7b:2b:d1:3e:de:7c:c2:58:b9:
76:1c:48:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 11:33:00 2024 by rpki-client on console-ams.rpki-client.org