Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3136342e35322e302f32322d3232203d3e2030.roa
File: 3138352e3136342e35322e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier: m2pJ4QQxgTS6sVWHVquqA2rJrKl55wBXK2DcFL7C+Ao=
Subject key identifier: B9:60:8C:00:2B:D1:39:4F:40:1E:F4:5E:13:18:B5:09:30:13:12:D3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 19EB1BF1B082D3462ACE2D7874495AF8E1D34967
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3136342e35322e302f32322d3232203d3e2030.roa
Signing time: Fri 12 Apr 2024 08:48:58 +0000
ROA not before: Fri 12 Apr 2024 08:43:58 +0000
ROA not after: Fri 11 Apr 2025 08:48:58 +0000
asID: 0
IP address blocks: 185.164.52.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 08:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:eb:1b:f1:b0:82:d3:46:2a:ce:2d:78:74:49:5a:f8:e1:d3:49:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 12 08:43:58 2024 GMT
Not After : Apr 11 08:48:58 2025 GMT
Subject: CN=B9608C002BD1394F401EF45E1318B509301312D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c2:82:74:aa:ce:a5:0a:5f:48:2b:da:6b:6d:
5c:76:a7:22:33:db:40:a6:3c:da:69:ca:0d:8e:76:
e7:fd:e4:71:b0:13:fc:94:63:75:de:1b:11:9f:4c:
80:e7:91:45:d5:88:9f:9d:cb:72:e8:bd:f0:9f:bb:
8c:d6:ab:03:63:f0:de:a9:35:ec:d6:91:e1:9a:91:
bb:b4:b9:9f:4e:92:36:16:07:79:8d:62:34:40:1d:
e4:ce:c1:57:7b:b6:62:43:a2:f8:7d:e2:89:0d:de:
ea:3c:de:e0:40:ea:36:cc:af:da:c6:50:c1:c6:2d:
2f:73:68:fc:86:90:27:78:31:19:5b:94:88:e3:15:
0b:51:1a:b8:c4:db:cc:ef:eb:e3:74:ef:66:5a:a0:
b6:d9:74:e8:a9:94:49:c9:d4:45:64:66:22:40:68:
1a:a1:f9:eb:76:db:3f:91:b4:40:6c:95:fc:71:6c:
bf:19:43:8e:dd:d1:ab:1b:c7:e6:76:9e:3d:39:c4:
db:6a:5d:89:3c:76:c3:a8:52:99:75:6a:e0:3d:82:
95:5b:dc:98:d8:b7:25:dd:63:4b:8b:b4:8d:4d:2e:
e5:16:07:e7:43:f8:a2:d7:42:ba:7e:8c:5d:e0:a8:
9a:44:bf:06:f4:a9:44:d1:c0:ee:2c:d9:4a:54:8a:
49:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:60:8C:00:2B:D1:39:4F:40:1E:F4:5E:13:18:B5:09:30:13:12:D3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3136342e35322e302f32322d3232203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.52.0/22
Signature Algorithm: sha256WithRSAEncryption
56:e8:a9:de:aa:11:88:ea:e4:71:f0:75:31:3a:e5:16:07:3d:
c1:e4:75:32:fd:e8:95:e7:d5:42:73:53:81:8a:87:e8:c4:3b:
21:0a:b5:2a:1d:43:4b:e3:b3:35:c6:21:b3:af:1e:e6:32:01:
9c:61:8d:cd:9f:32:52:0d:3f:4f:12:19:04:ac:14:7f:5c:4a:
2e:1d:c7:aa:80:d8:f6:da:ef:18:e9:8c:cd:c0:d5:b2:84:fd:
4a:d1:2c:75:ba:f2:df:61:c8:36:24:d7:b6:8a:bc:bd:7b:65:
19:5c:05:a4:32:cf:2f:24:27:a0:b2:4d:a2:1d:91:7f:c8:bc:
c3:25:f3:02:c4:61:51:d2:44:31:a5:73:42:1c:fb:d6:e5:83:
73:a8:a3:b7:7d:84:48:44:28:59:ee:7c:12:20:86:95:2f:6e:
32:c2:a4:d6:aa:06:94:cc:d8:3e:2e:0b:b7:fc:ed:b9:b2:44:
4f:57:d4:f6:1a:94:b7:40:ca:9c:e4:50:ac:a9:99:cb:3f:6e:
08:c7:a1:66:a4:9b:5e:3e:8e:b6:9b:62:f7:ce:c2:c1:62:d8:
ad:1b:fa:b1:11:fd:08:6e:be:31:0d:f6:0d:71:39:42:a9:59:
bd:8a:4a:7f:b6:a4:77:fd:ed:a1:7e:18:4f:e7:ca:af:fb:c4:
54:6c:0e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 09:50:14 2024 by rpki-client on console-fra.rpki-client.org