Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39302e302f32342d3332203d3e20313431393935.roa
File: 3139342e3139352e39302e302f32342d3332203d3e20313431393935.roa (raw, json)
Hash identifier: BuFEdhkfW0WmnVXn250yPAr8cD83fE+//7+eLwkLxto=
Subject key identifier: B6:75:CE:E1:91:5C:44:4E:85:7F:94:17:11:41:16:5E:81:9F:8A:74
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 62253C6D1B0136E81A8963BAB9911EF20FDE4DC7
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39302e302f32342d3332203d3e20313431393935.roa
Signing time: Mon 26 Feb 2024 08:53:07 +0000
ROA not before: Mon 26 Feb 2024 08:48:07 +0000
ROA not after: Mon 24 Feb 2025 08:53:07 +0000
asID: 141995
IP address blocks: 194.195.90.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:25:3c:6d:1b:01:36:e8:1a:89:63:ba:b9:91:1e:f2:0f:de:4d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:07 2024 GMT
Not After : Feb 24 08:53:07 2025 GMT
Subject: CN=B675CEE1915C444E857F94171141165E819F8A74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:57:8e:b4:3a:55:05:e9:1c:27:c3:5a:1a:37:
64:18:18:ea:45:dd:8e:c4:ae:fd:63:16:76:a1:83:
45:60:0c:7d:38:b1:c2:8e:02:03:6a:af:98:81:5d:
46:76:06:ca:c8:e2:23:01:cf:5f:da:a1:e8:ee:71:
00:c3:5f:51:01:13:19:64:73:35:23:27:56:af:53:
cb:ce:ff:29:cf:1f:81:0e:e2:d0:04:52:ab:3c:46:
bf:c1:d9:10:dd:80:a9:f4:1e:16:0b:71:e9:a3:e3:
da:a7:12:d9:85:6c:9e:59:78:ca:41:bd:f9:27:f6:
62:23:f8:6e:f2:72:2a:cc:9c:34:29:f7:96:be:79:
e0:11:62:64:28:1f:71:48:79:14:b1:77:ad:3e:c3:
e1:9a:52:6c:16:8e:a8:3c:ad:5b:97:04:ff:26:3e:
43:d4:7f:5a:59:88:c4:5b:83:6a:32:6d:35:4f:dd:
9e:bd:11:e4:71:2e:fc:9c:bb:7d:56:9e:95:ea:0d:
06:78:34:f6:05:58:3b:9b:94:52:50:b5:ac:49:c2:
d2:5c:23:af:56:b7:85:cb:5a:ed:a2:70:a6:8b:2c:
76:fe:b6:e5:66:c2:7f:8a:3f:00:8b:74:cf:c0:89:
d1:50:b2:b6:aa:9d:c0:9e:32:61:06:65:a2:b5:cc:
e9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:75:CE:E1:91:5C:44:4E:85:7F:94:17:11:41:16:5E:81:9F:8A:74
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3139352e39302e302f32342d3332203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.195.90.0/24
Signature Algorithm: sha256WithRSAEncryption
77:61:f1:c4:37:d0:55:c0:d8:67:66:55:57:cb:3f:f2:23:ac:
06:0b:50:3c:62:d4:d4:9c:79:49:28:b4:bd:03:ad:68:7f:18:
83:d9:32:5b:0b:d8:a9:2b:dd:a0:d3:7b:50:d0:63:0e:4f:66:
a0:bb:a7:47:fd:c3:43:90:cc:14:1f:fd:18:05:28:6e:d5:1f:
ee:d5:e9:94:60:f2:b1:e7:c3:85:b1:65:6e:7c:02:7e:14:48:
4e:17:95:2b:94:bb:c8:99:ff:99:be:e9:09:ed:fe:b7:94:55:
33:80:91:7a:48:87:4e:5b:99:e6:8a:8a:78:36:be:6f:8a:c4:
48:ef:42:0f:8f:4d:c6:79:30:27:ed:b0:b2:5f:95:f2:e0:e2:
bf:49:da:f1:f9:1b:bf:c1:69:3d:d4:13:9a:22:35:9c:d4:23:
55:31:7e:dd:d0:9d:5c:4a:e0:77:0e:d2:79:81:67:47:0c:2a:
31:01:f3:9c:4e:f1:8c:08:d7:06:88:86:4f:c5:0c:1c:cd:a2:
a3:fb:00:78:d9:7e:5d:15:f1:6f:f9:0e:12:04:d3:00:75:52:
76:f7:b2:8a:e6:87:0f:43:9e:73:c5:42:95:6b:97:f2:67:c9:
ca:69:1b:5f:80:89:42:14:0e:e2:f2:a4:1a:33:bc:2d:1b:ff:
13:0c:2d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:47:07 2024 by rpki-client on console-ams.rpki-client.org