Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/39312e3139362e36392e302f32342d3234203d3e20313336373837.roa
File: 39312e3139362e36392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: iMpuvFY+08AVfSL2A5+3qVSGUqpdiSaWdMsouICtaJA=
Subject key identifier: 0A:99:E9:50:35:9F:FB:EE:31:15:3D:4A:D5:6D:16:87:C3:9D:54:59
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 43F32EC109401158239B0F4DC2565CB76D358FDC
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/39312e3139362e36392e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 26 Feb 2024 08:53:49 +0000
ROA not before: Mon 26 Feb 2024 08:48:49 +0000
ROA not after: Mon 24 Feb 2025 08:53:49 +0000
asID: 136787
IP address blocks: 91.196.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.mft
rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 16:15:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:f3:2e:c1:09:40:11:58:23:9b:0f:4d:c2:56:5c:b7:6d:35:8f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Feb 26 08:48:49 2024 GMT
Not After : Feb 24 08:53:49 2025 GMT
Subject: CN=0A99E950359FFBEE31153D4AD56D1687C39D5459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ca:44:97:a8:c0:8e:50:b1:d5:8c:58:01:c8:
69:97:9f:30:c2:aa:c7:6f:8f:45:e4:81:d6:b9:6e:
68:b8:29:aa:73:2f:7d:8b:01:b1:fa:36:c2:7c:2e:
34:9e:d7:17:b6:83:80:de:47:f1:c1:c2:0f:c4:89:
f9:c3:cf:9e:58:39:67:3d:bc:09:dd:99:01:92:95:
ba:2b:b3:b7:dc:3c:ee:63:44:5f:9b:f7:c3:04:82:
1c:9a:04:59:3a:12:4d:d6:c6:62:05:18:96:a6:ee:
c7:b5:b5:c3:aa:eb:6d:06:4e:86:32:26:c5:eb:d5:
72:75:b1:3d:c6:c8:28:2d:e8:38:f6:2a:33:4e:60:
f6:b9:75:7e:55:80:74:e2:23:36:35:62:7d:28:fc:
9b:b8:66:8d:d6:bb:a1:67:34:25:b8:cc:f9:3e:9d:
f3:67:7f:27:47:8e:b9:c5:17:e1:db:eb:c9:2f:d1:
25:3a:33:cc:ee:80:18:1c:e3:4e:61:d6:80:c2:9b:
62:88:33:b9:32:ce:05:28:fd:7a:a4:a9:91:da:ca:
ff:70:35:ed:cd:9c:86:08:6f:76:12:ef:4c:04:f8:
af:11:1f:10:94:9e:6b:af:27:6a:8c:15:36:07:81:
c1:fc:c5:17:44:c0:8f:13:66:d1:1a:31:d6:cf:4a:
23:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:99:E9:50:35:9F:FB:EE:31:15:3D:4A:D5:6D:16:87:C3:9D:54:59
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/39312e3139362e36392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.69.0/24
Signature Algorithm: sha256WithRSAEncryption
86:d9:20:11:3c:62:c3:64:b9:52:8e:63:d0:74:9b:91:49:9a:
64:f4:2b:6a:51:f5:81:c1:1c:75:bb:9d:47:09:f9:f6:5e:6c:
f2:3d:1b:e5:8f:20:fa:39:15:55:7d:95:ab:00:a2:f4:e3:98:
d6:60:78:87:74:29:f1:d2:e4:25:4c:e1:a9:8b:de:ad:20:97:
24:45:0d:5a:68:6f:83:50:e3:9d:cb:fc:b6:f6:0b:c9:42:e3:
4a:0c:6e:26:09:ce:10:88:02:1a:74:d4:49:ce:20:d6:2f:00:
c0:c3:09:43:66:b9:1e:07:55:9e:6c:73:1e:ee:f2:80:90:75:
3a:d1:51:de:7d:f9:46:3f:d5:62:7d:fe:f7:99:01:ef:63:82:
e6:70:75:25:f4:e2:11:a8:b9:ae:b6:a3:c6:9d:27:95:5b:cc:
e7:01:cf:de:ab:07:0e:bd:b3:30:b5:89:f7:c0:15:8a:4b:a4:
96:9c:f1:a1:95:fa:4d:81:6f:cc:7e:f2:25:df:08:25:1f:ab:
a0:85:02:21:a2:b1:57:00:9c:ed:2c:63:47:99:bf:03:23:fe:
ed:1e:e1:79:ec:82:ee:71:2b:c4:5b:a7:79:e7:41:af:17:86:
83:fa:ba:25:b2:d2:e9:0e:c6:0f:95:4f:91:ac:f7:0f:13:d4:
76:3f:b6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 23:39:21 2024 by rpki-client on console-ams.rpki-client.org