Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e34322e3133362e302f32342d3234203d3e203437353833.roa
File: 3139332e34322e3133362e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: iLRxDiuAhR+x3G+D6JFouHTIvsC/rqctsyx/1f8IQuk=
Subject key identifier: BC:B8:EF:EF:C1:82:9C:B6:E3:66:0C:9D:88:E1:A7:A3:5E:A5:93:D7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0CCDEAF9B49B3B867C051CF1E8BD510AB187CC9A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e34322e3133362e302f32342d3234203d3e203437353833.roa
Signing time: Mon 26 Feb 2024 08:53:04 +0000
ROA not before: Mon 26 Feb 2024 08:48:04 +0000
ROA not after: Mon 24 Feb 2025 08:53:04 +0000
asID: 47583
IP address blocks: 193.42.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:cd:ea:f9:b4:9b:3b:86:7c:05:1c:f1:e8:bd:51:0a:b1:87:cc:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:04 2024 GMT
Not After : Feb 24 08:53:04 2025 GMT
Subject: CN=BCB8EFEFC1829CB6E3660C9D88E1A7A35EA593D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c2:f3:62:f3:02:02:99:b7:f4:a9:dd:bd:cd:
8d:21:d5:cc:2d:69:2d:e2:88:f5:d3:da:f7:c8:47:
23:db:c1:89:90:07:6a:4e:fb:04:45:0c:46:0c:1d:
7d:c8:90:ab:78:e4:9f:06:f4:ae:25:19:e5:3e:46:
e9:ce:86:f7:dc:a5:cc:c8:79:54:86:fa:57:b7:5c:
8e:53:db:8f:48:c7:5d:ec:17:3d:94:b7:cb:50:93:
ca:50:08:7f:82:4f:b4:05:b2:72:09:fe:d5:df:04:
b3:00:f2:cf:bc:5c:8a:3a:47:41:36:50:e1:71:5d:
39:4b:f1:63:4a:51:2c:92:64:d1:5f:7a:cb:b3:95:
e8:2c:a5:e4:b7:70:0e:83:a1:1c:c7:25:a6:3d:57:
56:c2:43:f4:83:69:fd:69:9f:bc:b9:52:51:ef:b9:
03:e3:f4:06:2a:2e:b5:50:06:7f:7e:24:66:91:65:
85:ab:a7:3f:51:58:18:21:e2:9b:a4:60:73:f3:0a:
85:c5:e7:86:b7:35:38:81:d7:bd:47:c8:b8:f7:de:
3d:c5:1f:2a:64:e4:b3:28:28:1f:09:10:17:89:f0:
73:94:bb:a2:37:12:32:6f:3b:54:17:48:96:58:0c:
47:5c:fc:dd:28:2f:59:7e:ff:3c:cc:5d:5b:dc:1b:
36:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B8:EF:EF:C1:82:9C:B6:E3:66:0C:9D:88:E1:A7:A3:5E:A5:93:D7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e34322e3133362e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.136.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:cf:e9:20:2e:20:06:55:68:1c:61:ff:f7:bb:6b:0d:83:9d:
89:2d:f1:60:7c:b6:11:ec:e7:6c:02:0f:cb:86:ee:92:d6:38:
9d:63:f5:ac:93:08:07:c2:32:3b:a4:c1:07:c5:97:90:91:b6:
84:7e:bf:30:c2:13:64:99:e8:7f:43:c6:d4:c6:c6:ac:c8:af:
42:cd:71:8e:91:ae:b7:ff:bd:14:c4:64:be:8a:7c:b6:56:06:
d7:f2:96:cb:15:a6:8e:6d:3f:ab:15:c6:9f:2d:3a:22:9b:1a:
4e:1b:e0:de:65:36:60:69:c4:df:34:98:95:da:36:e8:8d:97:
58:0d:a9:b7:0e:51:48:c8:fd:3a:81:33:d9:6e:dc:9a:7d:c2:
23:05:af:5c:e6:21:b8:13:96:aa:b4:e0:38:fb:d2:7f:07:32:
96:ec:8e:9e:b8:28:50:b7:26:5c:2b:72:b7:6c:fa:25:39:43:
8a:9e:54:0d:e3:79:e6:97:4f:0d:e3:38:94:4c:39:35:c9:15:
32:b6:0b:7f:79:cf:43:4b:eb:b7:ca:ce:51:39:ae:e5:eb:e2:
fe:7a:bc:9a:82:29:25:f0:8c:08:e4:11:9c:55:c1:ec:dd:68:
e1:1f:5f:27:6a:f8:8d:fa:38:0a:4d:64:88:cd:77:8d:8c:fa:
05:78:9a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:47:07 2024 by rpki-client on console-ams.rpki-client.org