Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230332e3231392e302f32342d3234203d3e20313431303339.roa
File: 3138352e3230332e3231392e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier: 1o59bxijoP2RFGwuxhwY4t4CmL26Iz0FB0wVqrmRh5k=
Subject key identifier: ED:BE:68:F9:A6:C6:67:4B:D0:86:B0:BA:F9:02:B9:07:47:46:D7:B5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 65F21DDB55E797496A0A794C385133501F471986
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230332e3231392e302f32342d3234203d3e20313431303339.roa
Signing time: Fri 20 Oct 2023 13:41:48 +0000
ROA not before: Fri 20 Oct 2023 13:36:48 +0000
ROA not after: Fri 18 Oct 2024 13:41:48 +0000
asID: 141039
IP address blocks: 185.203.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 16:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:f2:1d:db:55:e7:97:49:6a:0a:79:4c:38:51:33:50:1f:47:19:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 20 13:36:48 2023 GMT
Not After : Oct 18 13:41:48 2024 GMT
Subject: CN=EDBE68F9A6C6674BD086B0BAF902B9074746D7B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:03:ba:04:6c:80:4d:4c:8e:01:33:f4:ba:3a:
0a:19:1e:df:5b:63:54:d5:73:f7:78:6b:e7:f6:60:
50:15:de:48:6c:df:03:92:af:04:ca:65:1d:f5:04:
06:4a:0c:6c:1b:3a:df:d8:95:5f:87:b9:7e:62:1f:
e4:0c:66:a3:1c:c3:fd:1e:52:25:0a:46:3c:70:a1:
12:e8:be:b5:f8:59:fc:50:16:c8:5b:ad:f2:41:e6:
23:0b:0b:49:5d:7e:b5:d9:12:05:e3:af:e1:86:f4:
cc:2b:51:91:ca:58:1d:ff:a0:cd:9b:79:67:10:75:
0b:1c:82:94:1d:a7:40:f4:f7:a0:e7:1a:8f:18:91:
ff:c6:d2:b6:d3:9b:8c:c0:1a:be:48:88:0f:c9:2d:
bb:19:51:1b:c7:16:a2:bc:46:ab:b8:3c:3b:ca:48:
09:33:63:d8:db:6a:71:7c:69:ad:09:5f:37:16:eb:
f7:4b:ce:18:68:8a:93:5e:1d:ed:13:91:93:55:52:
7c:29:83:24:e6:ee:f9:e3:30:f4:5e:6f:f1:23:cd:
af:bf:45:a5:9c:c3:53:81:00:da:c5:9c:4f:18:11:
9a:05:e6:50:0e:16:ce:3c:af:b2:64:06:c9:a6:e7:
dc:fc:d2:34:b1:99:0f:f5:3c:7c:db:f0:d2:58:41:
11:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:BE:68:F9:A6:C6:67:4B:D0:86:B0:BA:F9:02:B9:07:47:46:D7:B5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3230332e3231392e302f32342d3234203d3e20313431303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.219.0/24
Signature Algorithm: sha256WithRSAEncryption
33:15:94:c9:9e:3d:ee:94:e5:09:f8:d8:ca:6f:e2:df:ed:cc:
9f:96:5b:5c:f0:78:ec:c4:33:da:65:99:22:0f:ee:19:e7:10:
a5:d2:50:2e:77:08:92:df:65:fb:18:39:2e:7b:a8:61:b4:0d:
30:76:5e:17:c0:a3:0e:90:02:5d:e1:40:79:81:1d:d0:6f:50:
c0:e6:ef:5c:8f:5a:47:d9:c5:00:3a:f2:46:75:47:07:2a:be:
46:cf:9a:5c:26:64:6f:22:9a:67:f9:aa:df:6a:68:6f:69:c8:
f1:62:26:77:4a:82:69:e8:86:17:e2:47:ac:e6:bf:aa:1b:db:
99:81:43:12:2b:a1:f6:0f:c7:1d:4a:fe:90:13:65:f6:fa:f9:
36:ad:5a:16:d5:b1:2a:e9:ef:57:c1:f0:7c:85:6b:6e:b2:ac:
31:0b:56:73:46:5a:41:b3:a9:13:55:ff:6b:ec:60:86:e2:c2:
3e:db:d2:82:e7:cf:0e:82:09:cb:d8:0e:38:6c:69:87:aa:13:
48:b3:42:c7:a9:24:2d:a4:f0:f3:27:0a:14:21:a3:6a:94:b2:
59:02:73:f5:da:6a:78:02:a0:2b:22:81:88:00:e8:73:14:56:
d6:2a:d9:96:75:c9:d1:0e:ec:f1:f0:19:ef:94:da:bd:59:e2:
bc:3d:18:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 20:18:10 2024 by rpki-client on console-ams.rpki-client.org