Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/39342e3130312e3131322e302f32342d3234203d3e20323131313932.roa
File: 39342e3130312e3131322e302f32342d3234203d3e20323131313932.roa (raw, json)
Hash identifier: I/OxWLcpnrqXb5WNhC7iwaTjYHP0MGML0i3kqM3nWa8=
Subject key identifier: 14:36:E5:01:7D:CA:22:7A:9D:8B:7D:1C:D6:24:D3:C6:B6:8B:41:EB
Certificate issuer: /CN=5d70845822a61408ec2a5fd580c132da777f09d1
Certificate serial: 4E62D3D0DD1D8E274D9876638D710A4A1AFBB985
Authority key identifier: 5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/39342e3130312e3131322e302f32342d3234203d3e20323131313932.roa
Signing time: Mon 26 Feb 2024 08:53:47 +0000
ROA not before: Mon 26 Feb 2024 08:48:47 +0000
ROA not after: Mon 24 Feb 2025 08:53:47 +0000
asID: 211192
IP address blocks: 94.101.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.mft
rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:62:d3:d0:dd:1d:8e:27:4d:98:76:63:8d:71:0a:4a:1a:fb:b9:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d70845822a61408ec2a5fd580c132da777f09d1
Validity
Not Before: Feb 26 08:48:47 2024 GMT
Not After : Feb 24 08:53:47 2025 GMT
Subject: CN=1436E5017DCA227A9D8B7D1CD624D3C6B68B41EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:60:3a:be:d8:2a:19:f9:1a:b4:c9:2f:cd:8e:
78:bc:b9:35:98:fa:62:f7:c0:96:4f:af:21:2c:f7:
11:ac:24:62:f0:41:fd:45:77:dc:58:20:34:84:49:
fd:b9:ce:cf:0f:b7:23:68:f0:d6:f0:86:40:ae:0d:
17:e3:9c:0f:76:e6:80:27:64:d9:e0:4f:f7:8f:1e:
f0:04:96:d9:b3:27:ba:04:b0:f7:ae:f8:68:c0:f2:
6a:ed:ee:7b:70:23:d7:4e:5f:20:2c:79:42:b0:ea:
88:d1:38:3e:c0:dd:5e:4d:6e:ed:3d:97:9b:bd:a9:
bc:bf:73:38:0e:ef:e6:aa:e3:68:3a:a9:e7:54:af:
c7:55:01:7c:07:2a:af:a4:a1:77:87:89:6e:2f:a1:
db:5e:b0:03:8f:6f:36:06:33:27:88:dd:0d:8b:6a:
6b:93:c9:58:42:5b:af:f1:16:2e:bb:aa:db:b5:70:
dc:29:e3:8b:95:98:56:ec:f4:69:86:b6:23:29:ea:
3a:eb:0c:09:77:f2:59:c5:6c:a2:31:ad:cc:77:43:
6a:54:d9:da:f9:8d:1a:b2:ca:aa:be:06:24:d9:36:
4f:db:b3:28:8f:0e:79:f2:34:34:b8:63:66:93:03:
98:a9:a7:7d:58:b2:dc:1a:6e:83:03:d3:db:5c:7f:
33:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:36:E5:01:7D:CA:22:7A:9D:8B:7D:1C:D6:24:D3:C6:B6:8B:41:EB
X509v3 Authority Key Identifier:
keyid:5D:70:84:58:22:A6:14:08:EC:2A:5F:D5:80:C1:32:DA:77:7F:09:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/5D70845822A61408EC2A5FD580C132DA777F09D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXCEWCKmFAjsKl_VgMEy2nd_CdE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/8/39342e3130312e3131322e302f32342d3234203d3e20323131313932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.101.112.0/24
Signature Algorithm: sha256WithRSAEncryption
32:0f:f2:58:70:aa:11:d6:f3:64:fc:63:63:6b:c3:f5:9b:a5:
12:47:3a:4a:ab:b7:02:25:ef:bb:f3:f5:fa:dc:68:af:4c:0c:
04:86:3c:e9:d7:57:82:f1:ee:65:da:02:3c:e5:5e:23:59:bf:
af:08:1e:14:b2:08:07:b3:95:1f:3a:bb:d8:e3:bd:52:0b:65:
2a:3b:dd:29:5b:6e:2d:7e:0d:5f:2c:01:fa:e0:5b:8d:7c:44:
5a:dc:92:69:78:11:b7:60:b2:be:3e:8b:bb:e6:a2:e4:22:51:
74:ca:7e:2c:52:ad:47:a5:48:fe:ff:42:99:4a:13:f6:89:2b:
10:24:25:28:dc:0d:0f:49:5f:a1:d6:31:38:ef:ad:f7:1d:fd:
ba:78:36:f0:ee:dd:49:c2:49:4c:53:5a:a8:86:39:11:fb:15:
77:e3:7c:45:ac:41:03:c4:81:cd:79:91:e8:f2:24:42:5a:9a:
37:9c:25:60:66:63:d2:be:c7:a4:a0:ac:7e:35:70:92:88:ae:
a3:ef:35:e4:7b:55:cc:5c:3d:7e:ac:5f:43:9d:ed:0c:0a:0d:
02:13:49:14:05:83:33:a2:78:51:bf:63:24:26:af:85:b2:01:
2a:74:6e:d5:e6:85:88:56:f7:b0:51:bc:9a:c8:d8:48:b4:3e:
71:0f:9c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 08:34:17 2024 by rpki-client on console-fra.rpki-client.org