Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135332e39322e3139302e302f32342d3234203d3e20323031333431.roa
File: 3135332e39322e3139302e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier: 95NZGCTc5aSE3VTvbcCXJ+fTI9FlJSSUedEZk4SyMpc=
Subject key identifier: 52:D5:A5:2E:13:43:6C:C9:0E:23:F2:06:8A:40:5C:5A:88:91:26:4D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5B6E4571D8C54BC42957500E2648D7FE11A66680
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135332e39322e3139302e302f32342d3234203d3e20323031333431.roa
Signing time: Mon 26 Feb 2024 08:53:23 +0000
ROA not before: Mon 26 Feb 2024 08:48:23 +0000
ROA not after: Mon 24 Feb 2025 08:53:23 +0000
asID: 201341
IP address blocks: 153.92.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:6e:45:71:d8:c5:4b:c4:29:57:50:0e:26:48:d7:fe:11:a6:66:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:23 2024 GMT
Not After : Feb 24 08:53:23 2025 GMT
Subject: CN=52D5A52E13436CC90E23F2068A405C5A8891264D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:eb:9f:82:b4:32:67:00:77:fa:f7:73:63:be:
22:1f:a6:e1:f1:33:52:03:ce:19:2f:c5:91:d5:50:
5e:65:7f:fa:ca:b5:82:10:a5:3c:e7:42:68:8c:d8:
27:2d:ab:98:f5:21:ad:d2:55:43:a6:6d:10:8d:38:
99:5b:05:c3:b8:d7:74:f1:da:f6:be:25:83:7c:c8:
0d:38:c2:87:e9:82:ce:97:6e:92:31:4f:0d:80:78:
ec:80:91:45:47:87:83:bd:57:ca:1c:3d:ec:0c:18:
e0:b5:21:8d:ba:41:91:e1:78:2b:1b:86:5c:2f:c9:
4e:5c:29:ed:db:4e:95:28:fe:ad:e3:cf:8d:09:58:
e7:6c:3b:8a:51:18:34:4f:02:5e:d6:20:cb:37:20:
4b:93:ca:3a:f3:57:0f:d1:ca:20:c7:80:d9:30:47:
0c:90:af:10:68:20:5b:25:72:33:fb:bf:de:df:39:
af:64:d3:22:83:74:49:55:99:f8:b6:a6:55:90:95:
8c:2a:92:fa:3d:73:c2:4b:91:be:64:c1:01:5d:0a:
8b:f6:65:c5:46:66:a2:3e:96:0f:44:6e:e3:20:9e:
bf:8e:25:cf:6f:f9:e8:7b:cc:9f:eb:aa:de:e0:24:
4a:82:66:d6:b7:51:17:d9:47:a3:6d:a3:40:c1:df:
5e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D5:A5:2E:13:43:6C:C9:0E:23:F2:06:8A:40:5C:5A:88:91:26:4D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135332e39322e3139302e302f32342d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.92.190.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:98:b2:6a:26:6c:55:d1:67:e1:8b:4b:ee:0a:b9:11:c8:c2:
08:92:bd:0e:2f:35:89:c4:2b:e4:95:ae:9c:d6:f2:4d:7f:db:
0b:22:41:80:7c:37:54:14:cd:c2:72:9c:fb:fc:5d:b0:6f:56:
ba:5d:cd:81:6b:00:ad:25:af:86:78:dc:2e:f1:4b:b7:2a:ce:
15:02:46:35:73:0d:df:25:4c:46:3d:56:95:09:19:a5:63:8f:
a3:4b:53:6b:67:0e:82:3b:7e:24:6e:99:46:0b:65:c3:e4:80:
3a:b4:52:0c:18:49:dd:3e:36:c8:73:db:87:48:cd:37:d3:d3:
18:c6:d0:03:3a:d3:0d:6c:9f:c2:f1:e8:34:96:c6:53:1b:2f:
51:61:41:e9:ee:9c:75:d7:89:70:99:bb:06:16:80:40:97:cc:
14:22:c3:84:03:4a:0d:9a:62:d1:23:f4:d1:82:1c:93:43:c1:
38:2f:e3:3d:fb:75:98:58:a8:8d:1b:0f:9d:3a:c3:96:d2:5e:
e0:4c:38:e1:31:bc:29:de:65:2b:ea:34:8a:d8:4e:27:a0:45:
5f:ad:3d:a1:e2:81:4f:4a:ac:d2:a7:c6:cb:b3:b9:23:d6:d4:
78:54:3a:24:7e:b4:1f:52:11:9b:8e:ec:90:0d:e6:e0:42:22:
0d:da:a3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 14:35:46 2024 by rpki-client on console-fra.rpki-client.org