Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3137332e3232342e302f32342d3234203d3e20323033333830.roa
File: 3138352e3137332e3232342e302f32342d3234203d3e20323033333830.roa (raw, json)
Hash identifier: 1kgsnshlfBWwDt/IY20bRDYJ4VkkPRTqo/ycQiYwGFE=
Subject key identifier: 93:D2:4D:87:FD:55:D5:01:80:2A:68:6F:F5:84:2D:B4:AD:DA:5B:D2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1C50E4E31976531BA1B07D522081B64EF1CFAAFD
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3137332e3232342e302f32342d3234203d3e20323033333830.roa
Signing time: Mon 26 Feb 2024 08:53:00 +0000
ROA not before: Mon 26 Feb 2024 08:48:00 +0000
ROA not after: Mon 24 Feb 2025 08:53:00 +0000
asID: 203380
IP address blocks: 185.173.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:50:e4:e3:19:76:53:1b:a1:b0:7d:52:20:81:b6:4e:f1:cf:aa:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:00 2024 GMT
Not After : Feb 24 08:53:00 2025 GMT
Subject: CN=93D24D87FD55D501802A686FF5842DB4ADDA5BD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:58:14:1d:c5:59:9c:17:62:fd:f6:50:4a:27:
a1:bf:9b:83:1c:0a:3f:a2:9d:a1:c2:19:fa:3a:ad:
91:29:e9:9c:7b:2b:26:ca:c6:dc:bd:d9:3a:44:53:
21:42:c2:b7:db:8b:c8:9f:33:90:02:9f:a4:09:a0:
aa:cf:1c:28:55:00:7c:c5:2d:04:db:2f:c3:a0:97:
58:00:31:af:11:93:66:35:83:26:24:07:bf:e5:81:
24:2a:f2:71:ca:a3:2f:e9:27:38:e3:b0:27:62:7f:
7f:9f:01:4e:3d:07:07:b8:65:b5:20:fa:07:21:9f:
e2:e8:85:32:b1:ba:c1:86:96:7e:e3:c7:8c:1c:17:
87:72:37:d3:b7:69:10:4e:53:cb:1f:f7:46:b0:ca:
c7:4f:5d:ae:8c:09:b5:79:f7:25:43:f6:4c:e6:19:
2b:c4:eb:c6:9c:ab:7b:d0:43:4f:80:6b:19:6d:cc:
82:1c:03:b7:17:79:89:44:ff:f5:4c:ad:50:e7:23:
b9:d6:72:95:cb:a3:bb:c5:25:2e:d5:b6:f4:22:96:
a6:c3:37:ea:cc:89:18:69:2e:63:0b:f6:7a:68:82:
a8:df:ca:61:44:3c:f2:7d:40:ac:5d:2d:f9:ca:9c:
4d:55:92:dd:b8:8b:24:4b:75:a4:3a:56:7f:62:12:
58:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D2:4D:87:FD:55:D5:01:80:2A:68:6F:F5:84:2D:B4:AD:DA:5B:D2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3137332e3232342e302f32342d3234203d3e20323033333830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.224.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:98:71:d7:82:85:4a:67:4d:d7:1c:09:e9:95:23:14:8b:63:
9a:85:87:0d:82:de:ba:46:06:7b:21:92:9e:bd:6d:2c:a6:79:
77:fc:41:59:71:c1:a7:a2:1c:04:20:26:31:ea:68:11:ce:6b:
50:dc:e5:95:c1:de:3a:58:11:11:2f:b3:30:34:57:d1:94:0a:
13:93:e2:90:f9:13:d4:bf:3a:cb:03:a0:9f:0f:38:ae:f2:50:
c7:52:0e:79:77:b4:77:91:3d:ae:79:56:b4:c3:c0:e9:e7:dc:
a1:b4:9e:04:a3:b8:b3:c4:c5:51:66:46:06:a9:55:04:9d:6a:
c5:fb:fe:14:36:59:ce:e1:47:c6:9c:bd:24:7e:ae:06:bb:8e:
5c:fd:ad:d4:2b:5a:f1:e0:92:1d:c5:67:de:17:26:1e:61:ff:
d9:06:6d:d6:fb:96:85:b1:0d:2d:40:36:78:e1:f2:45:a5:40:
73:53:a8:f2:72:dd:3d:fe:cc:c9:ea:0d:a3:7b:31:76:bb:dc:
1c:a6:16:1e:11:73:40:61:6b:d7:1d:7f:fd:17:c8:9b:32:27:
aa:7c:dc:8d:15:e4:ed:e8:a1:25:97:bd:24:83:86:0c:68:9d:
15:2c:3b:32:6c:d7:bb:48:09:55:ec:5d:ae:64:d7:ee:3b:f6:
85:11:2b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 14:35:46 2024 by rpki-client on console-fra.rpki-client.org