Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37362e302f32332d3234203d3e20313336373837.roa
File: 3135382e3232302e37362e302f32332d3234203d3e20313336373837.roa (raw, json)
Hash identifier: QKiiuEWS2FakDfr8NGynJDhlSZZU3a65N2rYEks/ocI=
Subject key identifier: 92:FC:36:B7:6B:1C:0E:DD:35:DB:3C:1D:D5:E0:1A:75:F9:43:CD:17
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 51217B4B200A00D88228473D6F347267610EE47A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37362e302f32332d3234203d3e20313336373837.roa
Signing time: Sun 12 May 2024 11:03:38 +0000
ROA not before: Sun 12 May 2024 10:58:38 +0000
ROA not after: Sun 11 May 2025 11:03:38 +0000
asID: 136787
IP address blocks: 158.220.76.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 16:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:21:7b:4b:20:0a:00:d8:82:28:47:3d:6f:34:72:67:61:0e:e4:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 12 10:58:38 2024 GMT
Not After : May 11 11:03:38 2025 GMT
Subject: CN=92FC36B76B1C0EDD35DB3C1DD5E01A75F943CD17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c2:ca:f5:a4:a5:a9:ac:56:f1:99:28:61:68:
c0:82:d6:4d:38:14:d2:d3:3a:75:f4:12:da:d3:d4:
4e:41:cc:2b:4f:d6:28:b2:18:b6:80:6e:ee:53:a3:
3e:d9:c7:d4:d6:6b:ab:5f:54:76:97:b3:a8:f7:49:
c6:a5:8b:50:0e:8e:61:8d:69:5f:53:18:e4:11:3d:
fd:df:4d:0b:f5:6c:d9:34:00:92:4e:34:0d:99:b8:
b3:4f:12:de:79:3a:c5:32:17:e9:bd:f4:ed:4e:a2:
43:b9:b4:b7:72:bb:2d:2e:b2:d9:41:12:ea:01:09:
c3:f1:9c:60:f7:47:88:99:93:b9:a3:41:ae:29:f6:
23:97:cd:9a:2d:ef:9c:c8:a6:45:8b:06:81:ce:97:
fc:e0:7c:89:47:e7:b2:2a:b9:a1:23:ab:92:4a:d4:
01:c4:c1:e0:2e:67:85:ff:e5:c4:ee:2e:70:0a:fb:
0e:3f:29:8b:41:a1:8c:e3:d5:02:7c:7d:16:86:a1:
48:c3:3f:68:21:6b:91:ad:ae:8a:79:37:a9:5d:99:
38:b1:5b:8d:c6:94:29:26:07:da:42:2d:58:3d:3f:
ff:e8:85:5a:56:35:a3:fb:ce:d3:10:72:8c:01:11:
22:96:98:b5:66:3d:19:4c:69:5c:3c:01:b9:b6:85:
a6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FC:36:B7:6B:1C:0E:DD:35:DB:3C:1D:D5:E0:1A:75:F9:43:CD:17
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37362e302f32332d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.220.76.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:4b:f5:97:ed:df:d0:85:dd:fb:2f:d0:a2:31:94:2b:af:a1:
70:aa:69:48:89:98:4c:ae:12:bf:d1:e1:52:3c:67:93:02:7d:
e6:05:ce:96:68:59:13:b6:5f:4c:e3:8c:b6:89:e8:2e:89:37:
f6:eb:2b:f5:5a:1a:01:fa:ce:d0:0a:3b:8b:cb:29:c9:93:aa:
bc:a4:f3:55:af:e6:25:cc:a6:e0:d8:dd:17:c8:db:4c:7b:45:
2b:45:50:cc:e7:8c:bc:6a:9b:f7:87:fe:be:c7:38:13:aa:08:
cd:98:1f:f9:d0:d5:05:11:3b:20:00:2f:3f:ed:41:e6:39:9e:
94:43:e1:c1:ad:60:9d:80:a6:b1:a1:ea:aa:2b:32:46:e3:e3:
ea:d1:fa:53:a1:9f:35:51:7d:6f:6d:35:ff:68:a1:50:66:06:
ea:0c:9f:1d:3d:01:5d:cb:9d:28:ba:57:1b:56:fe:31:af:a5:
22:ff:11:45:3f:02:5b:02:d8:37:c1:8f:85:5e:83:13:04:8e:
9f:5b:8f:8f:a0:1c:09:bd:fd:de:e3:09:cd:a5:95:9e:d3:33:
63:5c:ef:5a:ff:65:60:3d:4a:7b:51:45:45:1c:80:53:f1:8b:
b8:a6:bc:b9:da:de:3f:bb:48:d8:ac:eb:56:af:25:ca:b3:9b:
66:a0:83:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 19:28:04 2024 by rpki-client on console-fra.rpki-client.org