Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230322e3232312e302f32342d3234203d3e20313431303339.roa
File: 3138352e3230322e3232312e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier: ElF1B3rb3kUYTaHY9uU+LQyOVZSMO5Vvv0RrQ48VIio=
Subject key identifier: 3B:0A:7E:9F:7C:B1:0D:C0:11:33:2D:00:60:A1:B7:4D:FD:B3:D0:5E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 690B672293DD4CA1FC6DD49F7C1DCFE4CBF7BDBE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230322e3232312e302f32342d3234203d3e20313431303339.roa
Signing time: Fri 20 Oct 2023 13:41:59 +0000
ROA not before: Fri 20 Oct 2023 13:36:59 +0000
ROA not after: Fri 18 Oct 2024 13:41:59 +0000
asID: 141039
IP address blocks: 185.202.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 16:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:0b:67:22:93:dd:4c:a1:fc:6d:d4:9f:7c:1d:cf:e4:cb:f7:bd:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 20 13:36:59 2023 GMT
Not After : Oct 18 13:41:59 2024 GMT
Subject: CN=3B0A7E9F7CB10DC011332D0060A1B74DFDB3D05E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a4:64:79:ef:ed:be:90:ed:89:61:bc:8f:87:
18:bd:03:cc:59:65:84:4e:0f:4c:0f:87:30:d3:8c:
75:53:ac:d2:18:e3:67:1e:76:38:2c:dd:2e:82:c4:
bd:f6:0d:61:e6:ca:9a:40:6e:a1:e2:39:04:63:11:
96:8c:96:e5:b6:f9:52:47:01:a6:32:08:05:db:1b:
5a:5b:3b:3f:23:23:41:af:e4:23:0d:c5:75:b4:36:
83:73:d4:5e:42:13:38:56:7f:32:ab:a7:87:3a:83:
5b:7c:52:59:a5:54:1e:4d:ae:37:77:75:fe:4e:48:
b1:f5:10:6c:68:2d:27:ee:3f:c5:a2:2c:f0:59:50:
6e:89:41:fa:8b:0c:a5:31:c8:07:a4:80:09:f8:cc:
4a:96:32:f2:40:88:23:db:77:36:db:66:a1:91:22:
81:8d:3c:a5:e9:cd:59:34:70:6a:b6:c2:1d:5d:86:
91:f8:62:d9:84:ad:83:42:b0:77:30:a8:c5:31:b6:
77:5b:86:5f:3b:03:95:00:d5:3b:9f:55:da:a9:6b:
02:05:a0:53:ff:e4:da:9d:85:3c:e2:6a:53:33:9e:
7b:25:6b:de:f2:0d:5f:59:94:47:fd:83:3e:af:f4:
50:00:71:ad:f7:f7:45:86:c7:e1:37:07:ac:aa:5c:
09:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0A:7E:9F:7C:B1:0D:C0:11:33:2D:00:60:A1:B7:4D:FD:B3:D0:5E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230322e3232312e302f32342d3234203d3e20313431303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.221.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:dc:6c:46:f7:86:58:d8:08:4d:32:57:c5:08:9b:d5:32:6a:
25:78:8d:1e:ec:de:8d:2a:92:23:e8:04:47:64:d3:b6:71:ce:
41:7c:db:52:bb:c4:b2:8a:57:e2:f6:d8:e9:29:7e:c5:44:9c:
a5:7a:37:b3:b5:7e:17:d6:c2:59:54:9a:75:9b:6b:51:0c:db:
82:c9:3b:ba:73:18:e1:5d:a6:57:1a:02:d5:65:47:7b:84:7a:
e6:f4:0b:f3:e7:2c:f7:fd:40:9d:dc:d2:6b:5b:f0:63:f2:57:
67:e2:5e:ca:46:51:2b:60:cc:fb:27:42:c5:04:72:59:cf:ce:
cf:dc:fe:86:ab:d2:31:25:96:30:07:e2:81:53:7f:04:42:bb:
f7:17:f6:d1:15:9e:76:4d:69:e1:2e:47:34:06:4d:ed:7d:84:
75:3d:fa:65:10:57:d1:14:90:84:a7:61:ca:72:5d:70:0f:45:
34:f2:ff:3e:87:ef:a1:93:79:c1:0d:42:5a:a1:9b:de:23:bf:
3e:a0:fc:5f:a3:a2:39:fc:54:8d:b4:1a:01:9d:66:08:f7:ba:
7d:1e:8d:f2:da:9e:15:dd:6e:e4:e1:e0:59:43:71:8b:fe:29:
7f:3a:4c:f5:87:f2:4e:bc:09:34:02:51:a6:63:41:f1:8f:74:
71:e8:0f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 20:18:10 2024 by rpki-client on console-ams.rpki-client.org