Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232312e3133322e302f32342d3234203d3e20323036383034.roa
File: 3138352e3232312e3133322e302f32342d3234203d3e20323036383034.roa (raw, json)
Hash identifier: QioayJ1e+jP8RoZOOINW9sJBG5YmzmxG3nUytV606J4=
Subject key identifier: 6F:EC:35:9D:89:BC:CA:78:56:0C:45:86:DD:D2:39:EF:12:63:9E:70
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0C8AEDDC5F7C800F7EFDB432A37D0BC3A41837B3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232312e3133322e302f32342d3234203d3e20323036383034.roa
Signing time: Fri 20 Oct 2023 13:41:53 +0000
ROA not before: Fri 20 Oct 2023 13:36:53 +0000
ROA not after: Fri 18 Oct 2024 13:41:53 +0000
asID: 206804
IP address blocks: 185.221.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:8a:ed:dc:5f:7c:80:0f:7e:fd:b4:32:a3:7d:0b:c3:a4:18:37:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 20 13:36:53 2023 GMT
Not After : Oct 18 13:41:53 2024 GMT
Subject: CN=6FEC359D89BCCA78560C4586DDD239EF12639E70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a6:a4:41:03:43:e6:00:e4:93:50:96:7b:0e:
5f:c5:0b:65:c9:0b:86:e7:c7:c2:3c:f8:70:47:4c:
8d:0e:c6:78:c9:bd:0d:c6:26:a9:db:e0:eb:52:72:
b2:22:ad:30:92:26:79:13:13:44:75:9b:99:6d:b6:
f8:c3:37:83:cf:6e:ad:ff:26:49:44:b5:94:37:45:
33:49:0d:75:d6:33:17:3f:43:12:dd:9e:16:c7:9b:
ba:30:73:73:28:f9:c6:82:b5:9e:e8:de:c8:ed:2b:
01:94:b1:04:b9:8c:a0:3e:7f:72:07:20:c2:40:48:
bb:46:69:9d:66:57:96:10:f2:d1:36:27:d7:ca:44:
91:91:db:a2:76:be:3a:4c:07:89:c0:9c:c8:73:69:
db:9c:60:fe:1e:b6:d4:2a:93:23:4b:e5:ce:d8:f5:
fb:80:60:84:a7:e6:2b:57:de:6a:8a:1c:01:66:57:
eb:b2:96:68:a6:9e:ad:1c:c7:90:48:55:b4:3d:0e:
7d:bb:3a:3f:15:1f:4b:6f:ce:7d:8e:88:a7:a7:83:
b1:31:51:62:37:ce:4b:92:6c:79:06:63:b6:b2:5f:
89:31:5a:07:eb:88:83:ea:f7:44:ca:f6:ef:6e:8f:
ad:50:50:b2:a2:2c:6f:c9:ad:85:70:1d:fd:01:3d:
cf:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:EC:35:9D:89:BC:CA:78:56:0C:45:86:DD:D2:39:EF:12:63:9E:70
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232312e3133322e302f32342d3234203d3e20323036383034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.132.0/24
Signature Algorithm: sha256WithRSAEncryption
07:c2:ad:83:72:e4:84:f5:9a:10:f3:1b:c7:3c:7e:a4:d0:30:
5b:2a:e3:7d:df:24:f1:f5:ba:3f:02:2a:ef:53:56:70:7c:b3:
aa:1e:74:f9:55:4d:98:08:c5:e0:b8:ff:f2:f1:76:dd:96:51:
87:98:31:8d:55:ee:6f:d8:8e:04:a1:08:dc:8a:57:40:62:08:
67:3e:5f:46:87:8f:36:4b:3f:7e:88:a7:89:e5:64:ec:d9:cf:
c3:68:8b:52:79:70:20:39:14:90:57:94:90:d6:e3:23:ae:de:
f0:77:6d:99:ac:4a:8f:a9:4c:12:56:38:17:4d:2e:e4:b0:88:
f1:3e:af:19:14:eb:a2:56:19:ac:99:88:87:21:3b:cc:12:36:
6a:34:a4:f5:0c:7c:4d:d7:6c:7c:fd:15:68:29:1b:1e:65:68:
41:ff:ba:5f:f7:30:9f:c0:ce:14:d7:06:40:e7:1d:0a:c8:6c:
b0:03:68:b4:59:cd:5d:ad:78:b3:db:06:bb:6b:30:32:96:78:
64:3c:25:95:79:16:29:03:e4:17:42:70:60:6d:4d:f2:15:6d:
94:b1:64:9c:8a:2c:8d:c4:d9:96:d1:61:8e:fb:84:4b:a8:62:
26:3d:f2:fd:4c:9e:d5:66:08:90:6d:95:b9:89:ac:79:d1:ba:
88:ca:65:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:47:06 2024 by rpki-client on console-ams.rpki-client.org