Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3139392e39362e302f32302d3332203d3e203531313637.roa
File: 3130392e3139392e39362e302f32302d3332203d3e203531313637.roa (raw, json)
Hash identifier: BAXrW5OUNj1od3dOPPXZH2/UCkQggVd56AbuagibOUg=
Subject key identifier: 64:BD:51:C5:B7:CB:8A:61:DD:A3:C9:A8:35:AC:FA:10:21:9A:72:4D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6976550FD78979FE6B41EEFF9C73750C28A07ADE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3139392e39362e302f32302d3332203d3e203531313637.roa
Signing time: Wed 14 Feb 2024 12:38:05 +0000
ROA not before: Wed 14 Feb 2024 12:33:05 +0000
ROA not after: Wed 12 Feb 2025 12:38:05 +0000
asID: 51167
IP address blocks: 109.199.96.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:76:55:0f:d7:89:79:fe:6b:41:ee:ff:9c:73:75:0c:28:a0:7a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 14 12:33:05 2024 GMT
Not After : Feb 12 12:38:05 2025 GMT
Subject: CN=64BD51C5B7CB8A61DDA3C9A835ACFA10219A724D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:08:ce:47:54:52:24:9e:92:f2:dd:6f:55:94:
cc:93:eb:cf:15:f8:2d:ec:ea:07:ff:9c:df:ab:d9:
6c:1f:90:34:50:40:7f:46:42:21:0d:17:6c:9c:01:
63:ef:8f:1c:46:da:62:95:91:72:88:ee:4e:30:17:
1e:5e:0d:72:ec:10:04:18:97:0a:b4:8a:5e:aa:ca:
f6:1b:06:07:83:78:8c:8c:ed:3e:78:f1:27:bb:ae:
36:af:c0:2c:71:31:ab:f1:f5:b5:25:c1:ed:2c:c6:
1e:ca:86:c0:75:6a:97:72:57:9a:5d:0d:37:93:6b:
a8:1d:25:ef:d6:f9:24:66:b3:97:78:ac:31:73:65:
56:a4:d1:a2:d0:9f:f6:af:19:25:ea:cf:24:71:11:
78:62:a0:90:f5:a6:16:ef:d8:f1:54:91:e0:9d:4e:
21:f7:ee:a4:55:18:6b:90:5b:f9:20:60:9e:d4:d6:
f6:43:12:74:2b:5f:13:65:36:3c:de:40:39:8e:43:
a4:9d:4c:9f:c9:c7:df:ad:81:19:c5:3b:1c:13:51:
23:00:44:00:9d:51:bc:1d:a3:33:c9:9e:41:f2:4c:
b1:84:76:a3:2b:fd:f5:c8:e2:99:5c:4b:82:5c:6c:
85:e6:7e:76:88:79:18:58:54:d3:22:9d:2e:66:32:
de:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BD:51:C5:B7:CB:8A:61:DD:A3:C9:A8:35:AC:FA:10:21:9A:72:4D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3139392e39362e302f32302d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.199.96.0/20
Signature Algorithm: sha256WithRSAEncryption
a2:08:fa:a4:1b:74:ca:18:c1:79:79:0a:16:ad:a8:fa:92:ff:
66:a6:f3:cf:64:0b:1b:64:97:2e:5f:42:06:7b:ce:05:74:94:
9b:f3:f8:94:0a:9e:0f:8e:67:ea:be:55:35:2d:8b:f6:e7:bb:
69:37:d6:ae:7b:b0:99:f6:7b:c9:54:ae:7e:79:e9:b5:91:84:
dd:92:2f:31:71:2f:f2:ad:70:74:88:b3:b8:63:9f:1c:e9:71:
ed:ac:8f:30:cb:d4:65:3f:d1:32:30:8a:50:cc:67:a3:06:2b:
06:3f:0a:a0:3e:c0:b7:9e:da:e3:88:79:e1:e2:2e:1b:80:1c:
07:8e:fd:45:5f:e9:b4:92:a1:11:7a:d6:af:28:ed:10:c6:0b:
4d:70:3d:b5:35:82:2a:e3:05:df:e3:6a:a7:66:5e:cd:18:6a:
a0:21:38:77:3e:e6:a4:bc:61:78:57:67:43:9a:cd:6e:68:c6:
59:54:67:a2:8d:06:87:d4:0d:f1:e0:f6:5a:ae:01:18:a3:36:
4c:14:79:ba:3e:36:cc:b8:71:eb:a3:fd:93:38:bc:55:85:2f:
ab:d0:ca:c1:c2:f6:bf:dd:e8:ac:fe:82:9d:1e:8e:39:c0:54:
6b:bd:5a:67:e2:ea:ae:02:ad:88:3f:e8:92:00:3a:00:24:83:
71:16:2b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 14:35:46 2024 by rpki-client on console-fra.rpki-client.org