Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3235302e33392e302f32342d3234203d3e203631333137.roa
File: 3138352e3235302e33392e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier: A2PFdFh5mfSBqdkaJC9/EI6J1eGE39p6dt1/mwA+vn0=
Subject key identifier: C8:0B:27:D6:18:58:DC:10:02:AB:1A:FB:26:5F:DB:3B:C6:E4:BC:5A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 58ECE1CC67305CF1D8242539063E562C9A4B4A6F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3235302e33392e302f32342d3234203d3e203631333137.roa
Signing time: Fri 20 Oct 2023 13:41:44 +0000
ROA not before: Fri 20 Oct 2023 13:36:44 +0000
ROA not after: Fri 18 Oct 2024 13:41:44 +0000
asID: 61317
IP address blocks: 185.250.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:ec:e1:cc:67:30:5c:f1:d8:24:25:39:06:3e:56:2c:9a:4b:4a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 20 13:36:44 2023 GMT
Not After : Oct 18 13:41:44 2024 GMT
Subject: CN=C80B27D61858DC1002AB1AFB265FDB3BC6E4BC5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1d:bd:e8:62:f4:2f:34:ac:fc:61:81:f7:9e:
74:09:b4:39:a2:1e:18:7a:50:d3:27:21:96:b5:d7:
97:ed:87:78:10:6d:f5:c7:13:c0:81:8e:58:57:e3:
2f:ec:78:dc:d8:f0:12:8c:83:0e:d6:ef:35:71:da:
71:5c:b4:7b:a9:6e:f4:1f:ea:9a:0e:e0:eb:04:68:
15:18:67:72:e5:15:84:87:fa:1d:8e:2f:7a:f4:33:
ca:44:e7:94:8a:95:91:96:18:95:5e:f7:bd:0c:01:
59:6b:3b:63:d0:93:cc:0f:ab:71:ca:46:e9:da:c4:
94:5d:95:81:59:9a:bd:02:f4:bb:fb:28:d4:f2:a4:
25:a7:4e:69:1d:80:76:08:37:d1:7d:d9:41:9b:84:
a0:f2:dd:54:48:44:8f:c2:bc:e9:00:5c:a4:fc:90:
88:27:63:d4:ef:c0:a4:28:b0:b0:10:9e:ec:1d:cf:
c7:28:44:34:4f:d4:92:01:c2:c8:8e:e4:c7:24:ec:
42:1c:f7:04:86:3e:09:70:2f:f6:36:bc:f0:2e:a9:
b3:b3:12:81:85:9a:c9:1f:0c:6b:e6:d3:21:6c:17:
3f:f2:bf:72:90:e6:1c:0f:2a:1f:7d:d1:1b:22:42:
0c:55:c4:69:f0:a1:07:de:af:37:a7:12:af:2f:53:
04:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0B:27:D6:18:58:DC:10:02:AB:1A:FB:26:5F:DB:3B:C6:E4:BC:5A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3235302e33392e302f32342d3234203d3e203631333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.39.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:b7:a6:8b:42:2c:8b:d7:02:85:6c:8c:68:3a:67:79:24:78:
00:07:8e:d8:84:90:0d:89:a3:bf:d3:f9:d0:a0:4f:be:df:f6:
e4:5d:fd:61:e8:85:0e:6c:2f:61:fd:32:eb:e8:65:87:0a:4a:
8e:3f:e9:b0:64:41:2d:30:db:66:fe:0a:f7:1d:b6:71:88:e8:
44:6b:31:72:10:9f:1e:68:3f:ce:be:ae:28:d6:78:6b:d5:eb:
61:cb:57:4c:1a:cc:10:2a:4c:bc:73:c3:b9:aa:43:87:3d:23:
1b:6e:39:3b:18:6a:e8:fa:15:51:cc:7a:fd:fd:be:ac:ee:12:
d9:8a:af:79:3d:1a:56:03:f0:6b:da:ab:ba:5b:37:a4:45:8c:
a0:56:16:07:f5:05:67:ee:b3:8f:33:94:09:03:9d:18:d2:0e:
6d:bd:94:67:5a:f2:8e:4c:d3:40:69:64:64:4a:f8:2f:b2:63:
f6:a3:90:ef:7f:46:00:93:1b:d7:81:58:41:b6:9d:07:31:1f:
1b:bf:9f:ca:05:98:4d:ac:6b:55:71:3e:21:36:a6:69:6d:e1:
b7:1a:7f:ad:0e:60:4f:43:e0:49:69:d2:2d:13:e0:f2:7d:3e:
9b:d3:97:d1:83:fe:3d:e3:55:48:a8:d7:4f:63:96:a8:e1:96:
d6:68:99:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:29:15 2024 by rpki-client on console-ams.rpki-client.org