Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e31362e3133362e302f32322d3232203d3e203437353833.roa
File: 3137382e31362e3133362e302f32322d3232203d3e203437353833.roa (raw, json)
Hash identifier: bmJsyuRO0PDmLACibt3JIPNwzdKpeSmSMWrzaA4GxTM=
Subject key identifier: 7B:A4:ED:D3:93:B9:9A:CE:83:B5:CD:07:05:0F:EC:46:63:12:B8:85
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3A361C9F86C87F12B21DE940057CAF8622CA5F0C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e31362e3133362e302f32322d3232203d3e203437353833.roa
Signing time: Tue 17 Oct 2023 06:29:50 +0000
ROA not before: Tue 17 Oct 2023 06:24:50 +0000
ROA not after: Tue 15 Oct 2024 06:29:50 +0000
asID: 47583
IP address blocks: 178.16.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 16:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:36:1c:9f:86:c8:7f:12:b2:1d:e9:40:05:7c:af:86:22:ca:5f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 17 06:24:50 2023 GMT
Not After : Oct 15 06:29:50 2024 GMT
Subject: CN=7BA4EDD393B99ACE83B5CD07050FEC466312B885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:98:81:7a:64:29:00:55:af:36:d5:96:08:11:
78:2b:be:ff:51:4e:e1:58:25:8f:56:f8:55:4e:7e:
28:d6:fb:46:e7:74:00:db:45:a6:12:ec:38:50:31:
c0:84:cf:e3:cd:a9:c1:c6:5c:26:fc:16:f3:1e:2d:
61:2c:47:e3:8d:1b:02:46:cc:f8:67:79:fa:77:f7:
21:e2:88:16:36:5c:74:82:1b:72:77:3e:21:b0:5e:
8c:fd:d4:98:2a:97:3f:cd:8b:3a:a0:40:81:7e:f7:
13:f8:3c:0a:43:a2:b0:8e:1d:71:ac:68:10:83:6d:
a1:66:23:ad:bb:8a:e4:c1:7c:80:f0:24:99:ce:b8:
53:82:8c:9a:ef:7d:27:3f:64:dc:20:f9:b9:36:89:
c0:1d:38:a0:d2:a9:02:03:28:ce:38:db:cb:98:56:
9c:27:1a:fb:4b:ad:f0:c9:f6:07:6e:90:60:32:52:
bf:b3:4f:a7:96:00:ea:7f:e8:07:d6:1f:22:6a:98:
d1:f7:b3:c0:07:1b:73:2f:58:dc:0a:d6:bf:97:a1:
97:26:2a:de:13:54:b3:3b:79:3e:5e:97:a7:6d:23:
57:32:0d:e2:78:ff:0c:b2:ab:d0:dd:08:e8:9c:3f:
7f:7e:71:91:4d:66:fc:df:c5:86:df:2d:d7:54:cd:
ec:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A4:ED:D3:93:B9:9A:CE:83:B5:CD:07:05:0F:EC:46:63:12:B8:85
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e31362e3133362e302f32322d3232203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.16.136.0/22
Signature Algorithm: sha256WithRSAEncryption
54:89:70:74:c0:39:26:2a:d1:8b:8c:6b:2d:59:bd:1e:8a:6d:
fc:2a:85:a5:85:f5:7a:1c:2e:67:a5:f0:78:d2:b0:01:17:ae:
fb:b4:6b:d2:9c:47:01:0d:43:c3:a3:55:9f:45:27:a3:1d:da:
86:a2:f9:08:b5:b8:e4:fa:fb:d0:02:d4:63:d0:99:d1:f7:52:
5d:aa:d7:90:aa:59:c1:72:61:a8:dc:9a:36:d3:3f:49:e1:b9:
51:b9:4b:1b:3a:16:52:00:fa:eb:ea:2d:42:3b:45:22:3f:62:
9b:44:39:56:6d:1c:58:4a:07:5d:8e:7e:e0:a6:d9:19:f6:ee:
11:7f:19:dc:10:ff:0e:cd:fe:7a:ce:52:4c:71:b2:1e:bf:47:
7a:bc:1d:d0:a4:ea:02:e5:84:87:e0:ad:04:47:71:07:4f:6b:
98:d3:6d:3c:86:72:82:6e:a5:f4:53:b2:4a:a4:8a:a6:af:26:
52:a3:91:92:a3:ae:c4:79:6a:9c:fe:a8:a0:92:6c:fe:ca:6f:
02:6e:20:c1:81:9e:17:cc:3f:7d:c4:cc:59:55:b9:d6:5d:80:
6b:2d:77:4c:0f:4e:12:17:1c:72:c5:24:7c:21:f9:e7:22:67:
a4:3c:48:0b:de:2f:f7:89:c0:ff:14:4a:2a:cf:b5:84:56:45:
f8:76:cb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 20:18:09 2024 by rpki-client on console-ams.rpki-client.org