Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31312e302f32342d3234203d3e20313333373532.roa
File: 3135352e3133332e31312e302f32342d3234203d3e20313333373532.roa (raw, json)
Hash identifier: pF6BaYopwKBaRrE84Xo4Li719DzbW0dUS8Yak6GRdek=
Subject key identifier: B1:AC:C4:E8:67:18:4F:9E:D9:E4:F8:64:2C:6C:77:02:A9:2D:7B:FC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6190A56CE064B43A2E9C73DB7175922B39847A4C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31312e302f32342d3234203d3e20313333373532.roa
Signing time: Wed 08 May 2024 16:08:41 +0000
ROA not before: Wed 08 May 2024 16:03:41 +0000
ROA not after: Wed 07 May 2025 16:08:41 +0000
asID: 133752
IP address blocks: 155.133.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 16:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:90:a5:6c:e0:64:b4:3a:2e:9c:73:db:71:75:92:2b:39:84:7a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 8 16:03:41 2024 GMT
Not After : May 7 16:08:41 2025 GMT
Subject: CN=B1ACC4E867184F9ED9E4F8642C6C7702A92D7BFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f4:34:2a:bd:08:db:7a:06:7b:30:54:e9:82:
ba:2f:32:49:a8:3d:1d:33:11:0f:75:bb:d3:17:07:
7b:bc:17:7a:e6:99:c0:24:e4:29:e8:a2:60:a0:e2:
03:93:fe:b8:d9:3f:21:2c:1e:2a:2f:38:2f:0c:05:
40:4d:9a:f0:89:f1:28:a8:3a:aa:ea:66:15:84:e4:
ce:0c:28:aa:05:0c:77:29:59:be:f2:f0:f9:62:8b:
8d:c0:d6:d8:63:34:4e:85:ad:ab:f0:72:b0:1d:5c:
a8:c1:7f:53:4a:41:c0:ed:35:85:7c:1a:1d:2b:15:
b8:70:83:64:37:1e:ed:44:74:c2:d2:fe:0b:57:36:
e3:f8:d5:ff:cd:eb:80:00:3a:31:b8:b0:a9:c7:6b:
3b:8b:02:52:7b:b7:33:45:78:75:2b:3e:c5:ee:2b:
e2:36:9b:4a:79:65:e3:1c:49:c8:d4:bf:82:1c:09:
41:d6:21:17:93:9f:64:64:6b:49:9e:84:30:19:f2:
b2:31:dc:85:e2:89:c6:de:6e:95:7d:44:de:23:75:
08:90:e4:f6:20:24:fa:c0:41:2a:ae:e4:51:ee:d1:
24:6a:8c:11:28:5e:7b:65:0e:e8:c3:0b:2c:bd:bf:
5c:a5:7d:44:e5:8d:00:8e:09:d2:9e:c9:f3:03:f6:
98:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AC:C4:E8:67:18:4F:9E:D9:E4:F8:64:2C:6C:77:02:A9:2D:7B:FC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31312e302f32342d3234203d3e20313333373532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.11.0/24
Signature Algorithm: sha256WithRSAEncryption
60:1b:f8:31:ea:e4:45:c6:45:ad:20:37:9a:a8:13:fb:12:de:
72:aa:e6:ce:d5:60:28:e6:44:2b:98:c6:08:45:b4:8a:87:71:
f8:a8:51:dc:eb:95:b4:68:06:b9:d3:7e:a3:1d:0d:77:58:44:
11:7e:81:29:5e:64:d6:77:3e:f8:24:65:18:84:5c:23:62:41:
c3:b8:a8:fe:ba:ef:e8:d6:7a:7f:65:d4:37:34:35:e4:28:2a:
16:b1:16:6b:a3:9e:7e:1d:80:3c:63:f0:6f:53:25:e2:30:df:
a9:35:23:ac:15:37:29:15:60:b9:ae:f9:f9:fa:23:68:52:e8:
bd:2b:b3:4e:a4:ec:77:10:17:f0:5b:b9:56:c5:e8:f2:c9:d1:
10:82:ab:88:03:9f:b2:7b:cf:23:75:70:b9:13:28:74:71:4e:
e3:a7:0b:89:24:32:db:63:a3:88:c3:a4:c9:41:f2:41:3e:e8:
89:ed:e8:da:66:24:9c:a7:2e:c5:85:1c:a7:2f:67:84:f1:42:
b7:67:ac:7f:e1:dd:e7:1f:00:96:ec:19:d2:32:65:e3:a9:3a:
22:a4:06:d7:38:ec:0c:77:d2:c3:57:02:88:af:64:c4:5b:78:
40:5c:ba:3c:91:8f:76:c0:cd:be:4a:85:42:6c:5a:fb:6e:84:
28:8f:82:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 19:28:03 2024 by rpki-client on console-fra.rpki-client.org