Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37332e302f32342d3234203d3e20313336373837.roa
File: 3135382e3232302e37332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 5b1KTIZzOvOcKxsGzPdMIjBPT9dwIA+iFVS3qI5clYM=
Subject key identifier: 48:88:A5:AA:92:65:3E:31:F3:58:92:17:DA:6C:55:2C:88:BE:6F:BE
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 417044C7113CBC5A99335513185EF1AA3F09A472
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37332e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 12 May 2024 11:03:37 +0000
ROA not before: Sun 12 May 2024 10:58:37 +0000
ROA not after: Sun 11 May 2025 11:03:37 +0000
asID: 136787
IP address blocks: 158.220.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:70:44:c7:11:3c:bc:5a:99:33:55:13:18:5e:f1:aa:3f:09:a4:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 12 10:58:37 2024 GMT
Not After : May 11 11:03:37 2025 GMT
Subject: CN=4888A5AA92653E31F3589217DA6C552C88BE6FBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b5:b0:0a:d4:26:49:cf:cc:60:88:55:f6:8d:
6a:84:c4:2d:2f:0f:92:52:ea:2e:59:c8:42:a8:0a:
25:ac:f0:27:87:e5:49:e6:c0:36:2f:f6:8d:a3:c2:
9c:aa:8e:a5:3d:c4:2a:5b:56:bd:67:46:00:a4:ae:
a3:b5:39:3d:95:51:12:c3:05:1a:68:0c:b5:ba:8e:
da:3f:4c:6f:b1:74:74:d1:4b:e9:22:ca:8e:4c:ae:
19:e8:ff:94:65:38:50:c4:2b:57:a6:1d:c6:2a:d5:
6c:94:90:d3:47:41:78:f8:21:2f:3d:6b:de:c7:51:
a4:11:0c:29:75:76:59:2d:7e:61:e7:f0:88:70:b4:
ea:4a:59:f7:83:47:df:b3:70:ac:fd:46:bb:18:98:
aa:a1:65:44:71:9a:e2:93:51:62:94:8f:b2:ea:0c:
cd:e5:95:6e:95:9b:b6:61:12:f9:e2:d6:e0:f7:e1:
47:48:48:9a:44:f2:81:bc:f0:88:87:ff:d0:7d:2a:
a6:ab:9b:09:ec:43:03:08:25:fe:7b:f3:3f:7f:47:
c7:2e:51:c2:df:53:05:5e:d3:c4:56:28:64:62:00:
b9:ae:57:e4:f5:d3:5b:be:e1:06:12:92:94:ff:3f:
86:e7:a2:49:0a:52:cc:52:2f:8c:1a:90:a9:a2:2c:
27:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:88:A5:AA:92:65:3E:31:F3:58:92:17:DA:6C:55:2C:88:BE:6F:BE
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.220.73.0/24
Signature Algorithm: sha256WithRSAEncryption
12:3d:15:15:f6:63:fb:a3:6a:79:ac:59:74:35:11:d3:ac:1c:
bb:36:a5:7a:09:b2:0f:a4:4a:fc:36:aa:50:92:57:1e:e7:1a:
1f:5b:b5:c0:0d:22:4b:14:63:e8:6b:4e:09:61:48:6a:84:fa:
45:c3:99:bb:d5:bf:5f:ae:da:a8:8a:eb:39:46:bf:a1:98:6d:
5f:02:fd:21:55:4c:9d:8c:f1:9d:16:2f:3b:36:27:34:ed:78:
66:e3:11:76:e2:c9:31:9e:f8:2a:3d:1d:18:0c:f1:87:41:39:
5d:9f:94:09:05:24:e9:f3:05:dd:eb:7c:e1:9a:7c:ae:07:b1:
47:a0:f7:c7:47:b2:1c:32:be:53:17:d5:e5:95:ad:3d:12:3d:
c8:fc:f3:f1:51:26:a9:54:17:91:9f:c2:08:2c:cf:74:fc:22:
6d:6e:20:08:8c:08:2d:69:a8:59:87:6d:3b:fb:1e:e4:28:77:
d2:bc:03:e9:46:07:cd:97:37:ec:5b:61:86:91:c8:4d:2b:b4:
df:6f:77:c1:9f:bb:e1:ec:5e:a1:86:56:55:46:fa:e4:ea:4b:
c1:72:a5:77:1e:a1:24:bd:90:00:81:39:36:11:97:13:61:54:
92:e4:92:f7:58:f6:6f:a6:10:9e:8e:f7:51:d5:0c:a9:70:4d:
08:47:1b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 01:41:13 2024 by rpki-client on console-fra.rpki-client.org