Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/38332e3133362e3231362e302f32332d3234203d3e203437353833.roa
File: 38332e3133362e3231362e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: +/B0dmvf59c4PWdDChDLhg89IiFbDL+KRpw2abO1ods=
Subject key identifier: BD:81:06:E8:9A:51:C5:58:E4:76:9F:26:D1:0A:F1:50:1C:28:FE:CB
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 1E93E84E54CEB25D7DC2A98BCDF86FBB4D715961
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/38332e3133362e3231362e302f32332d3234203d3e203437353833.roa
Signing time: Mon 26 Feb 2024 08:53:48 +0000
ROA not before: Mon 26 Feb 2024 08:48:48 +0000
ROA not after: Mon 24 Feb 2025 08:53:48 +0000
asID: 47583
IP address blocks: 83.136.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.mft
rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:93:e8:4e:54:ce:b2:5d:7d:c2:a9:8b:cd:f8:6f:bb:4d:71:59:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Feb 26 08:48:48 2024 GMT
Not After : Feb 24 08:53:48 2025 GMT
Subject: CN=BD8106E89A51C558E4769F26D10AF1501C28FECB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:db:be:b0:59:52:bd:b3:e2:a7:ef:db:ce:98:
4c:c8:57:2a:55:03:1c:b2:d6:38:15:be:5b:46:c0:
0c:8d:9d:da:13:c9:fe:b5:e6:98:63:22:9b:dd:92:
75:4a:d0:9a:b1:64:27:5d:83:e0:ec:24:11:13:d6:
f9:dd:10:de:cd:4d:f8:91:64:bb:57:4c:c5:05:d2:
20:ca:de:ae:8d:bf:1a:88:26:24:04:55:b2:37:f5:
11:f2:08:a9:aa:bb:b5:f2:21:e6:34:11:8f:3e:ef:
44:aa:44:ba:76:99:81:5c:95:2c:2e:ca:a8:c2:80:
1d:52:91:e5:06:32:48:19:56:cd:be:13:bf:cb:6f:
da:d1:ba:8e:47:6c:89:a8:1f:d1:df:15:b3:8b:3d:
fb:75:6c:fd:03:8b:6f:88:b7:6e:1e:03:6e:63:ac:
31:36:92:6e:65:91:0a:98:12:4f:f9:0d:56:f8:b3:
53:3b:87:7c:6f:45:1c:e0:c0:f1:da:dc:61:4e:c4:
ce:00:60:d6:2d:ea:9d:03:b6:74:99:98:56:01:2c:
b1:3e:c1:13:d6:02:ac:d5:f5:77:49:ba:4a:c5:87:
39:df:16:d4:46:43:e9:8f:33:49:0b:46:24:74:56:
db:c0:ee:ca:fa:08:c3:ed:3c:f0:15:08:23:15:af:
0c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:81:06:E8:9A:51:C5:58:E4:76:9F:26:D1:0A:F1:50:1C:28:FE:CB
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/38332e3133362e3231362e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.216.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:bc:a2:2a:5d:b2:d7:e8:07:49:fe:bb:75:cf:9c:46:e6:a9:
ae:9b:49:ad:36:b5:35:0b:21:46:de:e0:e8:2a:18:26:cb:66:
31:47:0a:20:dc:47:48:89:86:e4:0a:56:82:d5:61:ce:ed:42:
8d:c4:21:b9:2e:29:12:e4:83:1e:61:c8:2d:e7:a9:9f:da:f9:
5d:41:d2:17:0f:79:58:cf:09:c4:e1:4c:53:ee:1a:fd:97:3d:
69:47:4a:dc:47:f9:b7:8a:42:08:17:37:c8:38:23:0a:a7:dc:
6d:82:7e:cc:9c:2c:75:38:e5:b8:0c:79:91:e7:f0:03:a2:db:
f9:c6:87:83:0c:40:21:80:75:21:c9:af:08:b9:b7:60:ff:fc:
1f:df:14:f7:0f:1c:8b:d6:16:e2:82:58:bc:e8:72:4e:3e:a9:
5b:58:38:a4:e4:d3:36:27:e0:fc:7f:1a:60:d3:00:5f:5e:c6:
c2:44:b9:b5:49:7e:7a:6b:4f:2f:95:29:2b:c8:e8:89:6e:83:
72:ac:72:96:40:12:16:72:91:9e:28:72:9f:0e:76:9b:d7:8f:
00:36:c1:76:04:0a:d3:76:48:67:32:c4:19:8b:b3:58:80:7c:
f8:f3:04:31:65:4e:e3:61:b3:8e:c2:1e:9c:57:72:1a:66:ca:
4b:7d:1f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 08:34:17 2024 by rpki-client on console-fra.rpki-client.org