Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3136332e302e302f32302d3234203d3e20323034313730.roa
File: 3139342e3136332e302e302f32302d3234203d3e20323034313730.roa (raw, json)
Hash identifier: wBOlgXHrVbF0ZjnqgxYyrqFZYcCrK/lgeWdOSDmgrPc=
Subject key identifier: E0:A9:C1:BC:4E:71:EA:C2:99:B1:BA:31:A2:0C:AB:A9:45:07:00:F5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 43520A7FDDF4592C4B478F60B5945E876819238A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3136332e302e302f32302d3234203d3e20323034313730.roa
Signing time: Mon 26 Feb 2024 08:53:33 +0000
ROA not before: Mon 26 Feb 2024 08:48:33 +0000
ROA not after: Mon 24 Feb 2025 08:53:33 +0000
asID: 204170
IP address blocks: 194.163.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 16:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:52:0a:7f:dd:f4:59:2c:4b:47:8f:60:b5:94:5e:87:68:19:23:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:33 2024 GMT
Not After : Feb 24 08:53:33 2025 GMT
Subject: CN=E0A9C1BC4E71EAC299B1BA31A20CABA9450700F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:01:69:11:ea:57:73:06:f6:fa:66:f1:32:05:
33:13:33:f3:15:ac:d3:e6:a5:b0:29:2b:33:68:6d:
8d:f3:fd:8d:b2:11:a8:78:2b:f3:b9:c6:31:9a:eb:
fd:63:92:dc:25:f7:2a:9f:f7:10:98:68:01:33:a0:
59:d3:fb:91:01:30:b0:f7:5e:c0:be:fe:a8:20:d4:
0a:71:5a:a2:35:a9:8f:54:a0:45:7b:2d:84:5a:02:
41:e0:52:f8:33:f5:d6:80:a3:0f:0e:c9:6a:9a:03:
51:a4:e0:05:3c:5f:fc:30:70:60:02:4b:12:90:40:
44:61:15:7c:40:c1:c7:5d:3b:0e:1a:42:4b:90:77:
09:1c:9a:aa:9e:f6:67:5d:e9:82:71:42:29:18:00:
12:33:8d:49:23:47:1e:5b:2f:a7:f4:b7:2b:7e:ed:
e7:ac:83:5c:50:66:4f:a3:76:fc:f7:74:34:1b:45:
d0:5d:8f:7b:d5:dd:76:9f:39:50:30:ba:de:56:e2:
88:31:d3:f4:93:86:ac:f1:b7:ce:0a:10:ca:80:7c:
66:6b:30:46:9b:3d:4c:66:55:54:08:8c:ae:d2:47:
7a:ca:90:1f:71:8f:d2:6a:21:68:67:54:52:da:4c:
82:51:28:f8:ef:66:e6:c2:e2:e2:7c:fb:c5:c0:ca:
85:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A9:C1:BC:4E:71:EA:C2:99:B1:BA:31:A2:0C:AB:A9:45:07:00:F5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3136332e302e302f32302d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.163.0.0/20
Signature Algorithm: sha256WithRSAEncryption
44:88:16:3b:07:8a:5f:ea:42:2f:45:ea:3d:14:b5:9a:b3:f8:
f1:b6:4e:c3:39:01:21:93:05:9c:b8:41:16:a0:1f:c3:85:20:
68:89:0b:ee:6f:c4:a1:0e:d5:ec:cf:81:cd:56:6c:0a:d7:73:
40:57:f6:46:c0:b9:0d:b1:f1:22:96:09:9e:ce:6c:8f:ab:2e:
84:62:05:4f:b3:f5:5b:43:62:37:7d:0f:4f:d9:98:ea:ac:72:
ee:f1:15:f8:0c:ce:33:ee:e5:b7:f6:1e:46:90:f5:1f:97:e2:
22:da:9d:e2:08:6a:a2:e8:93:49:10:f4:4c:2b:26:17:a8:fc:
e9:a1:7b:a6:12:02:0a:49:41:05:c2:c6:4a:9c:5b:5a:74:fc:
d5:de:8f:9e:00:d8:a3:bc:9e:1a:49:b7:26:94:ea:b8:31:4d:
74:ed:ba:72:c0:90:36:39:31:68:d0:a9:64:c9:88:f0:4b:28:
c3:35:1b:f2:34:46:d0:ca:9a:1c:44:81:fc:05:06:a5:4c:79:
35:69:5c:4a:ad:73:ef:59:7e:ae:3b:17:6c:c2:e9:51:87:8e:
fc:dd:96:02:04:5a:8d:04:2f:71:cd:66:35:b5:6c:8c:c4:b7:
8a:71:be:e6:77:3a:2b:49:87:7b:5e:aa:7c:46:70:42:c1:12:
4d:8d:54:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 20:18:10 2024 by rpki-client on console-ams.rpki-client.org