Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e3139362e302f32322d3232203d3e20323031333431.roa
File: 3135352e3133332e3139362e302f32322d3232203d3e20323031333431.roa (raw, json)
Hash identifier: 5p2hNqzbaTbyfElrA4Ig9HpYNGYCt7+XJrm+u4B3Bi0=
Subject key identifier: 40:5C:D6:3D:DB:62:E7:19:9A:62:78:51:A1:17:39:22:41:88:49:0C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6C39B7F7E018ECFA31A1CB3CAA4ED83D6F74883E
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e3139362e302f32322d3232203d3e20323031333431.roa
Signing time: Mon 26 Feb 2024 08:53:28 +0000
ROA not before: Mon 26 Feb 2024 08:48:28 +0000
ROA not after: Mon 24 Feb 2025 08:53:28 +0000
asID: 201341
IP address blocks: 155.133.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:39:b7:f7:e0:18:ec:fa:31:a1:cb:3c:aa:4e:d8:3d:6f:74:88:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:28 2024 GMT
Not After : Feb 24 08:53:28 2025 GMT
Subject: CN=405CD63DDB62E7199A627851A11739224188490C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a6:1d:39:e4:17:fc:39:80:66:76:e9:16:9f:
e6:74:21:3a:41:4c:94:a7:de:5a:97:e8:1c:bf:4a:
4f:40:2b:24:f2:ba:a7:e5:71:45:70:20:29:2b:f4:
a9:16:36:30:fd:62:6c:05:7e:28:f7:90:28:a3:50:
ac:b4:d3:bf:fb:3d:68:72:fa:ee:a0:60:f9:2d:91:
41:8e:fb:ee:90:98:00:2f:a7:03:ed:2d:1f:20:6f:
b2:aa:f0:39:ac:47:16:70:48:20:1e:1a:27:02:f3:
37:ac:20:4a:fc:9e:f1:34:3d:f1:3d:b5:f3:34:8c:
10:83:17:ba:ac:87:3d:2a:b8:8a:88:4b:e4:f6:45:
4a:07:2d:fd:34:ef:50:18:eb:85:4c:73:83:20:80:
6f:f1:bd:48:a9:5e:a9:fa:72:17:a9:0e:93:b9:2b:
c5:0e:4f:eb:41:2f:6d:a0:ee:03:cd:e1:c8:77:41:
cc:a6:66:81:0e:f4:14:20:08:f0:a6:42:c5:30:1e:
f7:b5:20:de:3d:70:2e:9e:49:72:dc:97:d9:cc:24:
17:df:d9:8d:09:24:39:b5:ad:ef:b0:72:3c:5c:b2:
ca:af:bd:63:06:b2:7c:65:32:09:80:c1:ad:e0:b2:
01:9a:f1:9e:10:12:f7:0d:a8:05:28:b0:06:36:e4:
16:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5C:D6:3D:DB:62:E7:19:9A:62:78:51:A1:17:39:22:41:88:49:0C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e3139362e302f32322d3232203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.196.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:5d:47:25:d5:8b:80:c7:45:1a:38:33:e4:2f:ec:0c:9f:14:
eb:00:63:5b:78:20:fd:3a:b0:4e:c2:b2:33:dc:73:a5:f7:d9:
09:94:3d:cb:ce:71:a6:f2:72:0e:99:b7:c1:04:1b:91:43:c6:
40:a4:9a:e5:7d:b5:2a:60:db:99:cb:12:3b:a8:30:02:21:a7:
f1:45:01:94:bf:2f:dc:39:f9:4a:15:a3:d9:e3:c2:ee:1d:f4:
af:4b:a8:ff:05:48:86:16:71:a7:d2:3d:28:d7:16:8f:90:6e:
f3:1b:69:10:2d:9e:00:73:ff:07:e3:79:a2:ad:89:16:16:03:
a2:ae:c2:7e:41:3a:32:e8:a2:b0:b6:d9:30:16:52:c6:34:11:
91:56:b6:aa:bc:c3:5c:1c:7b:7a:26:f5:49:97:2c:d7:52:e5:
4c:a4:72:ed:bc:17:e7:21:d6:c5:6b:40:35:f3:d9:e6:68:bf:
3b:9a:b5:47:a6:2c:3d:65:f9:79:b1:99:f9:6e:17:47:d4:24:
86:4d:cf:f0:be:04:82:c3:59:d7:fa:23:e5:42:8c:bb:30:7b:
cb:67:02:39:83:3b:85:d0:0b:c2:85:85:23:b9:83:0f:a1:a4:
c7:ac:fb:a3:b8:13:af:f0:18:de:4d:ee:87:86:c7:f5:70:2e:
50:12:d9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 14:35:46 2024 by rpki-client on console-fra.rpki-client.org