Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/38312e32322e33392e302f32342d3234203d3e203632323430.roa
File: 38312e32322e33392e302f32342d3234203d3e203632323430.roa (raw, json)
Hash identifier: sFkfn4QQP6JEOsnkkqyLuxvhVvahUiExKhQLZQTZjj0=
Subject key identifier: CE:86:7D:E9:CD:DA:D7:7B:84:65:A7:22:5A:D1:35:46:A8:30:55:97
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 576AF0AAA2A262C7E39E9B3A98F854B64BECA6D8
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/38312e32322e33392e302f32342d3234203d3e203632323430.roa
Signing time: Mon 01 Apr 2024 14:03:21 +0000
ROA not before: Mon 01 Apr 2024 13:58:21 +0000
ROA not after: Mon 31 Mar 2025 14:03:21 +0000
asID: 62240
IP address blocks: 81.22.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.mft
rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:6a:f0:aa:a2:a2:62:c7:e3:9e:9b:3a:98:f8:54:b6:4b:ec:a6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Apr 1 13:58:21 2024 GMT
Not After : Mar 31 14:03:21 2025 GMT
Subject: CN=CE867DE9CDDAD77B8465A7225AD13546A8305597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:0d:ae:66:8c:7e:b5:29:25:df:48:75:77:61:
14:89:0a:00:4f:38:02:7c:d8:0a:31:17:93:3f:4f:
d5:67:2b:fa:ed:fe:e0:4d:81:04:f5:5a:91:9f:7d:
d7:03:ae:d9:6b:cc:79:d7:f0:c7:18:67:ea:ee:26:
9e:35:b9:96:12:3b:1a:d0:7e:b9:e5:e7:a3:41:f7:
ec:11:7d:74:51:28:d6:b6:53:d0:12:16:21:39:47:
85:32:78:e7:ef:b1:f5:8d:5c:94:ce:d5:9c:6f:09:
58:d2:fc:b4:43:3f:45:09:8b:33:10:14:92:b8:07:
e6:76:f0:7c:c6:7c:b5:48:cc:24:26:18:b3:6a:42:
e7:5e:b3:43:9e:eb:26:30:cd:cb:79:a9:e2:46:45:
cb:cb:94:48:60:24:15:ad:da:5c:6c:dc:b9:8f:37:
f5:b6:7e:d1:0c:8a:80:99:6d:5c:9a:d7:2f:d6:b9:
ab:16:64:b1:d1:cb:17:0c:6b:5f:ab:07:fb:f1:90:
4f:88:49:02:05:cf:2e:c2:49:25:09:2e:e4:d8:61:
6e:1f:1c:05:a7:a7:d3:a9:d5:7b:81:17:1c:9b:5b:
79:a1:c9:6e:ad:f0:75:a5:98:90:70:b3:c0:a5:09:
b2:d8:03:4f:59:47:12:6a:1b:3b:7a:44:d8:ec:b4:
9c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:86:7D:E9:CD:DA:D7:7B:84:65:A7:22:5A:D1:35:46:A8:30:55:97
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/38312e32322e33392e302f32342d3234203d3e203632323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.39.0/24
Signature Algorithm: sha256WithRSAEncryption
19:68:21:ce:28:24:87:4c:26:27:fc:2c:cb:39:50:aa:d2:c6:
69:47:52:37:b3:5a:a8:9a:80:e5:42:36:85:b0:a5:2c:14:be:
6d:00:de:36:ec:b4:36:bc:05:3d:02:a6:9c:06:6c:00:72:a4:
a5:f1:8a:55:bf:7c:78:35:fd:60:45:fe:07:e5:bd:38:a8:32:
f5:80:c3:31:d5:c4:3b:31:52:49:c2:b8:0c:c2:35:06:99:6a:
01:a7:ed:ec:a4:63:bf:92:f2:fa:04:f2:59:43:b1:2c:7a:80:
e9:17:40:6d:87:06:b8:d8:59:39:e8:bd:3e:fe:22:10:dd:9e:
06:4a:57:5e:00:69:3e:ee:1a:95:3f:62:61:8c:b6:08:c8:42:
52:01:95:9b:8d:c3:a6:8e:e7:5b:b1:d1:e3:61:f2:05:f2:e2:
fb:ae:67:f1:a3:8d:3b:e7:d0:1b:40:2a:2f:f2:d3:1e:38:a4:
3e:42:9c:4d:8b:f1:cd:f4:4b:df:1a:81:d5:5f:3c:1f:67:70:
b1:a5:e8:73:04:6e:86:79:6c:db:ad:94:9f:23:05:94:80:c3:
e6:46:29:8d:74:55:f2:7f:49:eb:f7:7a:d3:77:d4:b9:c8:25:
1f:b5:c5:6d:a0:26:3b:04:4f:71:e9:d4:4f:0c:61:64:ce:ab:
08:0f:b3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 03:54:06 2024 by rpki-client on console-fra.rpki-client.org