Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138382e3234392e302f32342d3332203d3e203531313637.roa
File: 3138352e3138382e3234392e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: 6yIrxckIKti2YkSOPWWE3E1zLkB//vYQ4h89V3KKGUY=
Subject key identifier: F2:F3:7A:C4:C1:15:A2:46:8F:91:D7:7D:33:47:FF:4E:83:C8:B4:62
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2E28BD02057BA2B752F663726A3082AA4F3A723C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138382e3234392e302f32342d3332203d3e203531313637.roa
Signing time: Mon 26 Feb 2024 08:53:00 +0000
ROA not before: Mon 26 Feb 2024 08:48:00 +0000
ROA not after: Mon 24 Feb 2025 08:53:00 +0000
asID: 51167
IP address blocks: 185.188.249.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:28:bd:02:05:7b:a2:b7:52:f6:63:72:6a:30:82:aa:4f:3a:72:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:00 2024 GMT
Not After : Feb 24 08:53:00 2025 GMT
Subject: CN=F2F37AC4C115A2468F91D77D3347FF4E83C8B462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:53:8e:72:b8:89:1b:6e:70:85:e2:39:08:29:
bf:84:cb:28:d1:5c:fa:a4:8d:58:4a:4e:f5:22:10:
7b:68:54:e2:66:ae:9d:15:63:5c:57:f9:62:49:68:
de:91:94:e0:0b:6b:c7:a6:12:3c:03:32:f0:02:03:
92:3a:84:8e:80:82:f9:8d:6b:75:52:45:2a:10:17:
90:40:ee:45:af:79:36:81:cb:3b:c1:16:90:3e:fd:
43:3f:74:00:46:63:bd:a7:60:37:ee:63:3d:7f:84:
ba:ac:9c:8b:bc:05:5b:68:ef:4e:e0:83:b3:08:e5:
22:80:f5:24:cb:85:6b:97:f6:91:af:7d:d8:d6:0e:
fa:4b:77:ad:17:2e:da:80:f8:bf:6d:fa:d0:6d:e5:
4d:9c:16:90:7f:06:fd:43:c6:6e:0c:f7:56:64:f0:
1e:7e:fb:c5:73:0a:31:cf:f8:1e:04:5c:9e:0e:77:
26:65:81:15:b1:16:11:62:67:62:a6:f0:f1:29:61:
22:64:40:e2:a1:e0:d1:fc:5a:de:cc:f8:f2:b9:42:
1b:70:59:28:94:ed:8a:8c:c8:0e:fb:89:84:df:42:
61:69:4d:9f:ee:0a:b8:24:92:87:c0:a6:b3:f7:28:
59:f7:95:7e:13:13:6f:c4:6e:52:5e:03:f2:e6:b1:
66:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F3:7A:C4:C1:15:A2:46:8F:91:D7:7D:33:47:FF:4E:83:C8:B4:62
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138382e3234392e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.249.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:55:a5:3c:dd:5e:f4:84:23:48:87:c1:dd:e3:8e:31:3c:eb:
43:d8:12:d9:1a:bc:59:77:07:48:49:a1:0b:d9:ec:1f:5d:0f:
c7:8d:1e:d6:4c:82:a8:44:6e:36:44:bd:59:78:f1:bf:fd:69:
71:1b:29:0d:bb:59:f8:45:37:4e:12:5f:d7:8d:19:09:fc:89:
9c:c7:73:1b:42:cd:09:69:a8:28:78:0b:7e:51:28:24:89:db:
b0:2b:ca:42:76:b6:fd:02:4e:49:81:03:76:bf:7c:46:13:87:
5c:fa:a1:d2:58:48:b4:41:58:fc:ee:1b:3f:4a:3c:80:58:ca:
fa:7c:2b:dd:b3:f3:5e:33:14:78:4e:b1:d8:a0:cb:da:b4:36:
44:08:60:d2:92:ef:fd:52:63:5c:dc:7d:04:6d:bb:10:ba:cd:
33:f1:21:f3:98:2f:d2:a5:b8:bf:27:cb:16:2b:bc:f6:15:b7:
13:b7:9e:69:4a:cf:e0:92:86:d0:89:bc:35:04:02:aa:e2:ed:
68:2a:13:c5:08:c2:96:18:14:f3:23:38:09:e7:e1:d7:69:0b:
f3:8b:f0:73:2f:dc:fc:0c:aa:8e:10:79:6d:c7:27:63:cc:e9:
3d:b8:1c:fd:b2:90:82:59:e9:e9:c3:15:d5:e4:23:7c:b6:2b:
b2:b3:b9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:47:06 2024 by rpki-client on console-ams.rpki-client.org