Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233342e36392e302f32342d3332203d3e203531313637.roa
File: 3138352e3233342e36392e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: w4NqQ0jSUm3G/6RJyH9QGtaYIv1epXe3JVNR0Su9rPE=
Subject key identifier: 5F:A6:EF:45:D1:15:47:A7:0F:3F:45:8C:A5:B6:D5:01:67:EA:A7:3E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2542AA370600BEDD9BE6996DC398FF7524CDD3D3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233342e36392e302f32342d3332203d3e203531313637.roa
Signing time: Fri 20 Oct 2023 13:41:46 +0000
ROA not before: Fri 20 Oct 2023 13:36:46 +0000
ROA not after: Fri 18 Oct 2024 13:41:46 +0000
asID: 51167
IP address blocks: 185.234.69.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 16:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:42:aa:37:06:00:be:dd:9b:e6:99:6d:c3:98:ff:75:24:cd:d3:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 20 13:36:46 2023 GMT
Not After : Oct 18 13:41:46 2024 GMT
Subject: CN=5FA6EF45D11547A70F3F458CA5B6D50167EAA73E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:88:b7:31:81:0b:a8:11:88:dc:fd:5f:0d:26:
f6:8d:72:ad:1c:cc:78:c6:e2:74:fb:d1:86:fd:ee:
c1:9e:c3:bf:55:3d:a1:df:3e:1f:6c:c3:08:bf:ea:
1b:84:5d:52:b7:61:52:e5:5f:c2:d5:39:15:09:db:
dd:35:9b:4e:92:37:8c:fe:b1:ab:62:9a:42:79:77:
e3:8c:f8:38:37:15:1f:e2:10:6d:f3:4f:85:e0:56:
6a:63:0c:6c:10:c3:72:59:bb:62:37:1d:9b:b8:ec:
ef:0d:39:24:82:85:29:5c:f7:59:1e:76:82:95:1c:
35:02:07:0c:c6:86:5d:40:11:9c:d4:f4:7d:2b:a4:
33:9e:fe:28:c7:22:c4:ca:38:db:a5:c8:34:bf:e3:
d3:29:34:0d:4b:38:8f:f9:03:4a:2a:6a:41:72:47:
79:03:c9:24:5a:80:e3:95:9d:ea:2c:83:dc:dd:e0:
32:2a:e1:d4:30:17:bc:5d:fd:8a:65:ec:37:e6:ff:
90:8b:af:56:96:87:45:da:fd:03:da:ec:95:22:4b:
3a:6b:4f:ed:6a:76:a0:49:c8:e2:c8:59:b9:7b:e2:
c5:89:b7:3f:0b:54:aa:9e:e0:fe:b5:cb:96:1f:71:
f1:0a:20:55:42:0f:8b:86:19:b8:c0:1f:4d:e1:8c:
33:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A6:EF:45:D1:15:47:A7:0F:3F:45:8C:A5:B6:D5:01:67:EA:A7:3E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3233342e36392e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.69.0/24
Signature Algorithm: sha256WithRSAEncryption
61:5f:f0:10:42:95:1f:34:dc:58:a2:35:ca:94:d2:cb:1b:5c:
d7:6d:ea:9b:19:6a:b0:c3:6b:f3:89:8d:17:8c:b3:c4:5c:a2:
b4:ba:12:3a:84:aa:12:b0:15:f5:a5:e9:c7:6e:7a:6e:f2:6d:
23:2d:ef:fa:57:99:74:02:80:33:8c:1a:53:99:79:bc:8d:0c:
dd:3a:ba:72:1d:a2:1e:ff:13:71:44:b0:c4:90:08:e6:e7:a4:
a0:ac:fe:19:a4:c1:6d:a5:36:4f:7f:2a:94:6d:41:80:8c:16:
8c:ef:f4:68:e1:d2:fc:a1:ff:99:61:b7:c6:5f:b6:b0:05:df:
f8:df:bf:34:1f:17:8a:e3:4e:ae:90:fe:e5:79:db:d3:12:17:
bd:9b:83:11:cc:cf:e5:be:b5:12:eb:fe:f0:24:f0:f0:0d:c4:
9e:4d:7b:82:85:54:df:97:79:ff:44:36:6e:56:2e:13:bc:bb:
45:fa:cc:47:06:77:17:fe:ac:4e:15:e6:ce:d0:b6:32:ac:24:
51:98:2f:2a:65:98:77:87:22:a3:34:7a:e8:cd:3e:ad:15:00:
9e:4a:c9:a6:f5:e3:5b:86:63:ef:73:ae:b7:cb:f9:62:28:45:
51:c9:23:e4:d4:a8:1d:28:2b:16:73:8c:55:8f:e3:37:77:6e:
f9:4f:6f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 20:18:10 2024 by rpki-client on console-ams.rpki-client.org