Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e31362e3134302e302f32322d3232203d3e203437353833.roa
File: 3137382e31362e3134302e302f32322d3232203d3e203437353833.roa (raw, json)
Hash identifier: QCtfZSyeChEmCtNoWkcMdRA7SYvwOSfUZO0rjNP+Yuk=
Subject key identifier: 8A:76:B5:F1:AA:F9:66:52:57:AB:81:59:8F:1E:9C:9E:95:FD:51:12
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7EC095A75E25A75716EA788155201506EB3DA526
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e31362e3134302e302f32322d3232203d3e203437353833.roa
Signing time: Tue 17 Oct 2023 06:30:04 +0000
ROA not before: Tue 17 Oct 2023 06:25:04 +0000
ROA not after: Tue 15 Oct 2024 06:30:04 +0000
asID: 47583
IP address blocks: 178.16.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:c0:95:a7:5e:25:a7:57:16:ea:78:81:55:20:15:06:eb:3d:a5:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 17 06:25:04 2023 GMT
Not After : Oct 15 06:30:04 2024 GMT
Subject: CN=8A76B5F1AAF9665257AB81598F1E9C9E95FD5112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6c:19:91:9b:17:1b:82:fa:e6:96:67:d0:0c:
bf:31:2e:64:45:3f:99:72:d2:ea:cf:bc:3b:46:6a:
bd:c8:38:01:78:14:9d:a5:8d:b7:76:19:94:a3:10:
3b:2b:cb:f6:3d:e3:09:86:1e:fd:db:b6:14:a5:1f:
5b:bc:ca:24:42:a1:d0:9b:b3:ae:d9:4b:98:09:59:
a7:ee:83:72:41:bc:be:02:ad:0c:71:e4:2e:88:63:
74:e1:14:08:87:6a:1e:ee:cb:73:ef:25:85:7c:58:
8b:5a:6a:39:d4:ef:fb:43:e8:b4:52:dc:61:7d:16:
62:1d:af:04:bf:7b:10:67:b4:73:6d:a6:5d:a2:5b:
f0:63:57:03:95:79:ac:3f:e6:aa:d1:a4:b7:4e:e1:
a2:4f:e5:7b:7a:b7:84:1f:2d:1f:93:75:08:92:6b:
6f:1a:80:89:9f:82:98:81:ba:cd:68:6c:8a:42:fa:
fb:11:af:78:23:b9:4d:e0:9d:ea:fc:64:37:af:0d:
83:91:95:7a:c2:67:69:88:06:77:1d:ee:41:44:09:
4b:1c:22:16:9f:aa:11:ec:27:5d:88:55:67:19:67:
51:d2:ce:40:e5:cd:84:c1:0f:f0:06:e7:7f:2e:f4:
5e:1a:2a:8f:02:1c:1f:f7:3c:66:b5:5a:0f:32:58:
f7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:76:B5:F1:AA:F9:66:52:57:AB:81:59:8F:1E:9C:9E:95:FD:51:12
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e31362e3134302e302f32322d3232203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.16.140.0/22
Signature Algorithm: sha256WithRSAEncryption
66:8b:1c:09:95:62:3c:60:d0:44:c6:b3:f5:dc:66:f3:c7:3e:
93:cf:54:7a:d4:74:2a:18:02:65:bf:c5:10:63:0a:aa:60:1f:
e4:bc:64:c0:44:23:f9:1b:f7:9a:5b:01:1b:2e:c9:33:b1:2b:
ca:87:a5:d6:d6:4c:ce:04:2d:1b:8e:5e:dc:c6:4b:ec:ba:46:
db:df:50:1c:da:6a:01:e4:b3:c4:be:db:a9:91:cb:83:80:30:
11:00:54:86:4b:dd:d0:12:70:aa:eb:d4:6b:18:29:36:34:cd:
9b:4e:ef:17:c3:b1:76:a4:02:ed:fe:ec:50:6c:a6:5b:9c:a9:
55:bf:f1:0a:af:ed:46:5e:76:12:b7:39:d6:c2:e0:d3:f3:64:
92:36:35:e3:cd:da:01:46:22:ae:97:ea:36:c9:a8:88:90:dc:
e8:b6:a3:50:46:a6:70:d7:fc:c4:c5:a8:23:33:f9:6e:ba:9b:
67:0c:d2:82:d1:da:8b:c1:95:0c:1a:7e:48:a6:64:32:64:0e:
28:aa:b3:0c:ff:a1:2a:c7:23:73:f1:1c:d1:35:cf:02:08:0f:
10:df:72:bb:5b:4b:5c:37:53:c7:ec:39:64:3c:8a:07:3f:24:
46:53:1e:0d:66:1e:fa:8f:65:b6:37:c7:80:77:92:95:21:2a:
7d:73:a5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 14:35:46 2024 by rpki-client on console-fra.rpki-client.org