Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e34362e3232312e302f32342d3234203d3e20323035363539.roa
File: 3139332e34362e3232312e302f32342d3234203d3e20323035363539.roa (raw, json)
Hash identifier: TxNAz1bOKTHhkfy4XQK8mNqn+GbF3eARmQqV5Tm00Z4=
Subject key identifier: D7:7B:F4:9F:03:2F:54:9D:18:AB:F0:9B:6D:62:44:5E:87:6E:0C:A4
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5AA4C7D53A4B56195497C8F5B1AD866FFAA4A7B4
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e34362e3232312e302f32342d3234203d3e20323035363539.roa
Signing time: Fri 20 Oct 2023 13:41:46 +0000
ROA not before: Fri 20 Oct 2023 13:36:46 +0000
ROA not after: Fri 18 Oct 2024 13:41:46 +0000
asID: 205659
IP address blocks: 193.46.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 16:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:a4:c7:d5:3a:4b:56:19:54:97:c8:f5:b1:ad:86:6f:fa:a4:a7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 20 13:36:46 2023 GMT
Not After : Oct 18 13:41:46 2024 GMT
Subject: CN=D77BF49F032F549D18ABF09B6D62445E876E0CA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3b:3c:1b:ce:fd:f4:b4:d9:44:48:cb:2c:8a:
a1:ad:e0:ee:bf:47:87:23:73:83:d0:23:31:d3:c7:
be:53:9a:f3:dc:13:3a:ab:44:66:62:cd:b8:8e:5c:
dc:f5:f2:8f:15:4b:1f:98:e2:a8:d9:5f:ab:ff:b8:
1f:25:04:e6:bf:66:3a:1b:78:d7:55:95:2e:4a:12:
25:b0:e5:fb:2f:c9:46:c8:89:0b:5f:a8:01:00:10:
59:28:5c:47:22:f6:1f:83:9a:b9:a3:5c:ed:ee:1d:
67:fd:5e:40:4e:26:ff:26:99:9c:44:f0:f3:cc:f2:
d4:0a:eb:98:e4:e2:f6:16:de:2e:a9:a9:ad:cd:0c:
7e:d8:5c:d0:58:67:a5:83:a4:76:14:f2:8b:6a:ed:
0b:59:8d:50:14:88:bd:23:42:53:64:53:14:5d:37:
56:7b:92:f8:ae:b7:ae:37:b7:86:6e:1b:ef:85:10:
35:f5:ee:d2:8a:f0:c3:9e:45:2d:fc:ac:4d:09:c1:
ae:21:0e:91:8d:54:cf:6c:a7:27:3d:c7:3b:b5:65:
2a:77:93:b8:1a:6f:6f:78:d1:fa:82:11:c2:a2:00:
e6:cf:b9:5d:bd:f3:73:d7:45:ca:23:8d:4e:bf:df:
0c:d4:b9:48:1a:62:7a:01:88:c8:3c:17:08:58:15:
02:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7B:F4:9F:03:2F:54:9D:18:AB:F0:9B:6D:62:44:5E:87:6E:0C:A4
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139332e34362e3232312e302f32342d3234203d3e20323035363539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.221.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:cf:61:5a:a5:b4:0a:f1:ba:e5:3d:57:b7:8b:91:ec:21:57:
c3:ed:c6:07:ed:97:cf:a0:36:c9:8d:64:d7:c0:4a:f5:01:a4:
3b:2a:1c:a9:47:60:26:9e:4b:1f:0b:ff:0b:59:ce:9f:1b:a7:
f4:7c:0d:e3:08:18:63:ab:4b:02:f8:ea:3e:71:54:80:3b:f7:
f5:7b:f8:53:ef:af:70:8e:76:7f:b9:9b:df:6f:95:3c:d9:e1:
6a:79:03:79:3f:93:4a:67:2c:fd:07:67:34:1f:d1:6d:87:03:
ac:b7:df:38:3f:1f:d4:07:e2:0e:37:e5:b0:dd:e6:ff:05:f3:
2a:6e:6b:76:84:1b:7a:46:b1:ad:d4:ac:05:53:ad:91:9f:78:
01:da:83:b9:75:9c:fc:0f:af:85:83:ad:6f:68:ee:c1:eb:66:
10:e8:1b:a9:9f:59:f7:7b:7e:e1:9b:0a:01:4c:96:4c:36:f0:
cb:f8:84:3f:c7:70:54:e3:aa:58:d2:fc:7e:ca:8a:bc:41:1e:
e7:6c:98:6b:c6:13:e8:79:8f:0a:4d:18:3d:49:1a:3c:52:18:
39:fb:d6:4f:66:c3:3c:6d:c1:17:5a:9b:cb:0f:e1:e8:0d:38:
ca:10:c1:61:07:40:81:52:28:29:82:dd:19:e0:ee:c7:fb:f7:
f3:41:10:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 19:28:04 2024 by rpki-client on console-fra.rpki-client.org