Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3230332e3136302e302f32322d3234203d3e203437353833.roa
File: 3139332e3230332e3136302e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: ATk+lV4ziDN2NrOvWKL8MTXgak4EhaqQBSOsPCrPLnw=
Subject key identifier: D2:CE:04:CF:6B:7A:FC:D9:AF:44:47:8E:C5:67:74:EC:8F:CF:82:38
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 77A529D23247FC4FA8DCCEB2E7965C2F25D8F19A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3230332e3136302e302f32322d3234203d3e203437353833.roa
Signing time: Fri 01 Sep 2023 10:54:24 +0000
ROA not before: Fri 01 Sep 2023 10:49:24 +0000
ROA not after: Fri 30 Aug 2024 10:54:24 +0000
asID: 47583
IP address blocks: 193.203.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:a5:29:d2:32:47:fc:4f:a8:dc:ce:b2:e7:96:5c:2f:25:d8:f1:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 1 10:49:24 2023 GMT
Not After : Aug 30 10:54:24 2024 GMT
Subject: CN=D2CE04CF6B7AFCD9AF44478EC56774EC8FCF8238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fa:eb:60:f7:25:e8:9b:a2:79:9a:3c:94:42:
ff:4a:93:f0:50:fe:f7:88:b6:38:3c:2b:e1:49:6e:
c9:13:ca:8a:3a:17:98:c7:d9:b5:77:a4:9b:3f:ef:
f0:21:52:44:b4:8b:3b:47:e9:e2:c6:7f:30:a0:9e:
07:44:6f:0f:cf:53:3e:e9:4d:9f:72:e7:21:62:40:
a5:2c:f0:51:16:d6:63:20:f5:c5:49:ed:69:9a:f0:
c5:60:bf:6e:3c:7e:64:a3:e8:20:44:18:c8:a3:95:
09:19:24:68:60:fd:f4:74:97:3a:09:4f:81:d8:05:
09:69:22:9c:d3:e3:2e:fd:20:8d:a0:e3:9b:39:05:
07:f5:2f:94:27:50:ba:7f:52:31:b1:d2:78:e0:e0:
f3:89:95:0f:8a:3d:75:6a:96:6b:ee:d4:4e:d6:31:
ec:b0:e8:23:90:20:d1:08:5e:86:20:18:59:30:15:
ee:59:59:a7:8e:bb:1e:e4:4f:39:0d:f3:95:48:73:
25:b0:17:f1:17:21:35:d7:5e:65:21:b4:e2:50:50:
99:06:13:74:02:86:8f:0d:39:9f:60:3c:99:6b:22:
c9:5c:ed:78:fd:99:62:97:04:a2:e3:1e:b3:55:be:
74:23:fb:88:70:66:a9:4e:c7:44:8b:4d:4d:ad:c6:
73:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CE:04:CF:6B:7A:FC:D9:AF:44:47:8E:C5:67:74:EC:8F:CF:82:38
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e3230332e3136302e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.203.160.0/22
Signature Algorithm: sha256WithRSAEncryption
46:89:26:51:af:e6:af:6c:6d:03:d1:ec:0e:42:90:ed:9c:60:
82:fa:a5:3b:f4:38:b8:a2:33:85:55:2a:87:c4:1c:b8:57:af:
60:91:af:af:00:b0:0b:ae:de:d4:e0:3f:b9:03:6f:45:bd:f0:
08:05:d2:96:81:cc:d8:ff:db:34:be:a2:23:d4:1e:4d:45:f0:
a8:55:7d:6a:38:72:4f:c5:6a:12:29:50:71:0e:1f:a1:ac:ab:
91:be:60:ef:c3:bd:dc:92:3b:bc:75:a9:20:b5:c2:ae:76:12:
86:47:6c:3f:53:95:17:6d:92:f4:5d:31:98:bf:44:b8:b3:d5:
79:41:e7:bd:84:3a:78:d2:6b:e6:23:c5:ff:00:ce:d3:e4:69:
45:65:b8:f2:95:ff:f2:60:54:7e:97:71:4a:ad:61:cf:3e:f4:
bd:ce:fc:11:64:8f:d5:39:48:de:78:1e:45:41:47:70:94:a0:
01:b0:8f:5c:5f:fd:f2:a4:1e:e0:fa:10:5f:24:17:ed:3e:41:
27:a6:b2:1d:fe:2a:af:46:60:cc:ce:2f:ba:31:42:d2:40:07:
b0:c6:ce:43:20:cf:21:66:0f:01:fb:25:0c:78:c6:21:80:08:
c0:6b:d0:5d:ea:07:bc:66:de:ac:fb:1e:b4:5a:22:e7:8f:0f:
49:09:50:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 14:35:47 2024 by rpki-client on console-fra.rpki-client.org