Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138342e3138382e302f32342d3332203d3e203430303231.roa
File: 3138352e3138342e3138382e302f32342d3332203d3e203430303231.roa (raw, json)
Hash identifier: /ym9M2gMdZBoVa7Y1OiQZdaOYu3v8xLq9rdjjB0ytek=
Subject key identifier: 47:D2:C9:43:3E:EF:A3:AA:E9:CD:BC:CF:D6:1D:DB:0F:0D:56:82:A2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 686735DA8E103C23B324F8C92874DECEC59376F0
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138342e3138382e302f32342d3332203d3e203430303231.roa
Signing time: Thu 09 Nov 2023 09:56:35 +0000
ROA not before: Thu 09 Nov 2023 09:51:35 +0000
ROA not after: Thu 07 Nov 2024 09:56:35 +0000
asID: 40021
IP address blocks: 185.184.188.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:67:35:da:8e:10:3c:23:b3:24:f8:c9:28:74:de:ce:c5:93:76:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Nov 9 09:51:35 2023 GMT
Not After : Nov 7 09:56:35 2024 GMT
Subject: CN=47D2C9433EEFA3AAE9CDBCCFD61DDB0F0D5682A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0d:66:6e:20:8d:f3:71:6f:74:b6:d9:ef:5a:
d5:87:b7:19:68:25:77:8d:07:0f:9d:32:17:4f:c2:
d3:a0:1d:d1:dd:36:45:7b:39:81:78:06:10:e5:6f:
68:fb:d6:bc:2d:62:3f:5c:64:4a:38:57:f6:45:2a:
e6:2a:b3:74:e2:e4:f6:a2:e6:d1:d3:2a:f8:ca:89:
50:0d:ac:ab:e3:98:2e:98:ba:21:21:ca:cc:0c:b3:
80:ee:53:5b:5e:57:e9:3f:67:3b:55:bb:2f:7c:30:
03:3d:b3:8e:70:bd:57:68:9c:58:43:18:c7:00:88:
98:f8:df:9c:7b:08:af:58:37:96:de:86:db:8f:2c:
f2:05:24:40:3d:60:b1:a3:bb:17:7d:48:70:2c:c8:
c3:3a:f7:35:1d:f1:38:c8:e0:25:af:35:c2:d4:55:
83:8c:60:c2:81:c4:3a:bf:9f:f5:85:50:52:39:32:
bf:0a:26:6f:c4:b0:85:41:d6:85:1f:2e:a7:c4:cd:
f6:db:e3:54:47:3f:7f:81:77:dd:27:da:e0:6e:94:
80:4a:9f:36:64:4c:fd:10:34:55:75:2a:49:f2:b5:
03:47:f8:c8:ec:59:c4:7e:3b:5e:b3:fb:d6:d2:a8:
05:8b:a2:de:31:fb:38:b2:12:30:70:b4:16:b7:22:
ed:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D2:C9:43:3E:EF:A3:AA:E9:CD:BC:CF:D6:1D:DB:0F:0D:56:82:A2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138342e3138382e302f32342d3332203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.188.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:18:dc:20:52:46:87:e8:e8:1f:e1:43:9f:8b:da:c4:10:4b:
24:56:dc:eb:09:2a:83:eb:04:0b:27:46:ba:29:11:46:bc:29:
8e:f2:35:58:b8:23:44:6e:93:0d:e1:c4:5c:36:90:30:f1:74:
56:5c:2b:98:2d:47:61:4a:54:b7:d4:b9:6a:43:e6:ac:80:a6:
0f:7c:80:f4:d2:15:2f:04:fa:ab:0a:13:d7:d9:41:4e:54:94:
11:13:f6:c4:af:bd:cf:8f:cc:d2:7e:a4:bd:bd:10:00:99:df:
c7:34:5b:1e:05:1b:9c:d2:9e:1f:a0:57:cb:86:54:14:56:c8:
58:b3:c3:cb:12:6d:fc:3b:bb:37:3c:6f:e2:1a:89:c4:fe:0b:
a3:69:1c:cd:dc:b4:31:79:f5:49:88:79:76:3d:b1:ce:e5:7d:
95:78:48:4c:25:67:48:da:4b:bb:63:e8:9e:d7:ae:d8:a6:12:
fe:6c:39:41:c2:90:04:15:01:e6:70:9e:f7:81:54:cc:3c:60:
e9:df:0b:b6:52:6d:d5:4b:dc:bc:49:35:74:5a:c2:06:75:58:
b5:01:8a:e8:e3:7e:ae:5b:a9:65:ca:43:c1:a0:a8:d9:52:99:
a4:5f:4f:00:e5:46:98:dd:44:f9:06:de:e6:8f:98:b7:4e:ba:
04:ab:f9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:47:06 2024 by rpki-client on console-ams.rpki-client.org