Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/38352e3230382e3135362e302f32342d3234203d3e20313336373837.roa
File: 38352e3230382e3135362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 9kUwkJpAZ06BR37jFz1RpagFhK5W1xOeG8l62Yjply8=
Subject key identifier: EC:74:A4:48:7F:5A:BA:AB:46:66:90:0F:71:F2:FC:CA:A1:16:FA:53
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 66268AB3D0A0C7B19154BC9DF56EC3A951657346
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/38352e3230382e3135362e302f32342d3234203d3e20313336373837.roa
Signing time: Tue 13 Feb 2024 12:54:25 +0000
ROA not before: Tue 13 Feb 2024 12:49:25 +0000
ROA not after: Tue 11 Feb 2025 12:54:25 +0000
asID: 136787
IP address blocks: 85.208.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.mft
rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:26:8a:b3:d0:a0:c7:b1:91:54:bc:9d:f5:6e:c3:a9:51:65:73:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Feb 13 12:49:25 2024 GMT
Not After : Feb 11 12:54:25 2025 GMT
Subject: CN=EC74A4487F5ABAAB4666900F71F2FCCAA116FA53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:35:ec:5e:75:64:ad:40:54:6b:45:24:be:f3:
58:6e:d5:2f:0b:78:b9:95:33:db:63:32:3d:83:55:
e1:2f:d6:63:09:85:e1:22:1e:85:df:62:bf:b8:76:
e3:7b:66:17:25:5b:2a:f4:55:96:68:89:e6:c2:12:
0c:40:a0:dd:e7:97:5a:7c:27:c9:cc:85:5d:2d:83:
f2:c8:53:4a:c5:eb:b4:7f:24:24:0b:1f:3e:5e:3e:
44:db:dc:21:43:07:39:71:e8:41:0c:11:81:bf:f2:
e9:88:c0:9b:f7:10:14:1f:ce:de:79:b2:11:fb:e4:
58:9e:ca:15:55:da:ba:33:da:fa:2e:36:52:55:ed:
f6:8d:44:82:3d:8d:31:de:10:69:23:b8:ce:d3:cb:
f6:6c:16:09:1e:7e:c5:64:96:db:b2:b6:ae:09:fb:
1b:93:cd:87:50:10:9f:7b:7b:55:22:1e:8c:7d:0c:
c6:55:4b:8c:16:d2:bd:1a:12:7d:df:4c:7b:d2:81:
3d:d7:c6:81:35:c4:64:7d:2a:7d:25:23:79:9c:8f:
f6:93:ff:36:26:f5:38:86:70:58:da:e9:d9:a6:80:
a3:ed:0e:fe:de:9e:1e:c0:73:12:bf:20:80:ba:b2:
ce:ee:50:ae:dc:bd:24:80:78:1d:2d:ba:42:88:a7:
96:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:74:A4:48:7F:5A:BA:AB:46:66:90:0F:71:F2:FC:CA:A1:16:FA:53
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/38352e3230382e3135362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.156.0/24
Signature Algorithm: sha256WithRSAEncryption
15:ff:17:aa:42:73:1d:1a:75:08:65:ac:c1:5d:55:2f:d1:b0:
24:58:60:ff:7c:46:ce:5d:c5:b5:ca:ab:42:c9:3d:d0:91:02:
ff:1d:78:84:e6:25:06:9f:36:6d:e9:bb:56:63:87:13:66:3f:
b3:3b:6a:82:12:df:40:33:34:03:c4:4a:93:16:1e:11:f0:91:
98:2b:a7:d1:96:c6:df:ed:b8:bc:b7:e6:da:9e:4b:91:1f:02:
91:2e:0f:9c:60:6f:78:b2:8d:fb:4c:01:75:e1:f7:b1:4b:df:
4f:5c:45:3c:c3:18:31:fb:a7:b0:da:16:e2:48:0e:18:c7:77:
4a:fb:55:19:d9:b9:4c:49:c1:c5:84:de:3a:5f:bf:47:78:9a:
58:85:b4:1b:bb:89:6f:51:a1:74:8d:cc:3e:35:28:aa:69:4c:
01:cb:b3:f1:05:eb:14:9b:30:4e:13:9e:cd:e3:ab:82:e0:5c:
a3:df:14:bd:1a:d0:08:fe:e5:50:0b:ff:00:90:da:bd:95:ea:
df:14:80:74:8c:f7:10:e2:eb:60:be:1d:c3:1f:b7:90:b3:c9:
0b:30:12:53:76:c5:78:44:42:8d:21:96:19:57:64:cc:88:55:
ac:db:a7:2c:80:54:59:62:65:09:51:10:c2:25:7f:2e:a7:a4:
96:a0:fd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 20:21:27 2024 by rpki-client on console-fra.rpki-client.org