Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232392e3131382e302f32342d3234203d3e203437353833.roa
File: 3138352e3232392e3131382e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: bvb9L3L5pkLVZV5mdihLbGBeU9YGR2jHI6VzUCfpml8=
Subject key identifier: 4A:9E:46:57:7B:E5:04:07:59:F3:49:D3:42:FC:2E:6D:33:30:A8:31
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6C8A04E4B723A822809AE82509B82DED9D800F94
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232392e3131382e302f32342d3234203d3e203437353833.roa
Signing time: Fri 20 Oct 2023 13:41:54 +0000
ROA not before: Fri 20 Oct 2023 13:36:54 +0000
ROA not after: Fri 18 Oct 2024 13:41:54 +0000
asID: 47583
IP address blocks: 185.229.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:8a:04:e4:b7:23:a8:22:80:9a:e8:25:09:b8:2d:ed:9d:80:0f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 20 13:36:54 2023 GMT
Not After : Oct 18 13:41:54 2024 GMT
Subject: CN=4A9E46577BE5040759F349D342FC2E6D3330A831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5d:e7:21:40:10:f0:7c:10:53:ee:f0:7a:36:
82:9b:13:82:43:de:6f:a3:37:35:27:dd:aa:fa:e7:
79:01:92:dd:b5:e9:3b:12:87:ed:40:9b:ee:63:2f:
df:d5:50:e8:67:a1:e7:2b:59:40:f8:6c:64:41:eb:
61:85:9c:d1:8e:67:28:81:81:42:ef:b0:0f:c7:7b:
33:cc:a3:20:34:5d:8e:b0:1b:24:3e:88:98:ac:7e:
6a:df:67:95:05:6e:31:18:43:7c:83:bc:73:dc:21:
19:52:5b:3d:fb:7a:95:73:70:3e:eb:ee:1b:13:cd:
7a:f9:c8:72:ad:6c:ba:51:7d:76:70:de:46:87:88:
d6:a1:21:03:7d:b9:d5:40:c4:5d:db:ff:ad:c1:1e:
92:da:29:f1:3d:03:ab:e4:1d:df:7b:dd:1d:64:8c:
50:8c:ea:d0:23:91:95:1e:43:06:61:a1:66:fb:c5:
78:37:ef:ff:de:c6:56:3e:44:b7:88:96:95:18:d2:
d2:ea:a6:ba:30:bc:9d:33:34:f0:40:67:76:df:33:
c0:6b:3e:6a:23:bb:1e:3e:fd:88:cd:07:30:3a:10:
e3:ce:5d:e4:51:f0:50:c6:9c:8b:65:e0:a8:ae:0a:
85:2b:72:f4:d3:fe:33:d2:51:b2:42:9c:7a:6d:db:
75:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9E:46:57:7B:E5:04:07:59:F3:49:D3:42:FC:2E:6D:33:30:A8:31
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3232392e3131382e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.118.0/24
Signature Algorithm: sha256WithRSAEncryption
30:96:15:71:b1:1c:90:b1:d8:86:97:d5:c8:d2:ec:d5:1a:44:
93:05:bd:b1:e7:7a:ed:4f:fd:07:85:4f:c6:ab:8d:d5:0b:94:
a4:bc:85:ba:6a:8d:1b:3b:1e:3d:90:08:e7:2b:e0:06:ed:47:
5c:d1:ad:98:11:ea:9e:bd:29:e8:26:88:94:83:3e:93:0a:ee:
da:f1:ea:13:98:b7:4a:bf:35:6e:e7:27:1e:88:b0:d9:7f:ff:
4b:d6:13:0f:3f:0d:3f:6a:f7:dd:50:87:4d:d0:55:e5:c6:58:
92:ee:3b:25:28:1d:55:51:d2:aa:55:6f:11:79:b8:76:02:18:
17:e4:db:b3:a4:73:88:5a:a3:0b:f9:8f:28:df:45:2c:58:21:
8d:e7:ce:b7:76:33:f4:56:a0:7c:c8:b7:c2:a1:a4:00:e0:6f:
c8:5d:33:8f:b8:9b:e7:36:88:82:18:f9:7a:1b:fb:3f:4d:c3:
41:9c:e9:d5:2b:59:ab:12:35:c9:20:f5:bb:a0:e1:ad:15:f9:
8e:85:f9:c5:47:b6:59:93:02:17:91:ee:a7:6f:35:fe:65:65:
28:a3:87:64:f7:28:d8:24:ea:57:26:7f:24:14:be:db:db:93:
ec:cb:47:36:b3:aa:a8:92:45:00:90:6f:b9:1c:ca:53:8d:3d:
8f:bb:bf:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:47:06 2024 by rpki-client on console-ams.rpki-client.org