Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233332e3130382e302f32322d3234203d3e20323034313730.roa
File: 3139342e3233332e3130382e302f32322d3234203d3e20323034313730.roa (raw, json)
Hash identifier: qXGqpqR8l7uYchDdsOwW7AgzeDNMhCgAKC6l/L6rkHE=
Subject key identifier: 67:C6:5C:A6:E6:69:58:00:AA:60:01:2D:FD:55:2A:13:7F:CE:EA:D3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 496BEE2A1C560A9E2826EBB43B30EC8243DAC2F0
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233332e3130382e302f32322d3234203d3e20323034313730.roa
Signing time: Mon 26 Feb 2024 08:53:11 +0000
ROA not before: Mon 26 Feb 2024 08:48:11 +0000
ROA not after: Mon 24 Feb 2025 08:53:11 +0000
asID: 204170
IP address blocks: 194.233.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 16:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:6b:ee:2a:1c:56:0a:9e:28:26:eb:b4:3b:30:ec:82:43:da:c2:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:11 2024 GMT
Not After : Feb 24 08:53:11 2025 GMT
Subject: CN=67C65CA6E6695800AA60012DFD552A137FCEEAD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3b:de:78:2a:b3:33:ce:78:88:3a:f2:a4:4d:
20:6b:32:92:3f:af:b9:06:31:bd:05:21:b2:16:4a:
25:8c:7c:3c:a3:43:4a:84:6a:ab:ab:26:61:d6:81:
8c:b5:53:a3:17:a9:87:e1:a5:b3:80:b4:19:a0:ec:
41:44:f9:16:e1:a4:9c:a9:da:5b:98:1d:2c:72:92:
64:f1:04:68:19:99:28:f0:86:ab:41:13:f1:a6:32:
7c:5a:72:83:9b:51:f4:7c:8e:22:4f:55:2d:62:25:
39:d8:46:a5:06:3b:ff:f9:ec:08:fa:ad:d3:27:0a:
a3:58:e4:e6:f7:22:78:8f:54:58:2c:d5:fa:39:c7:
ab:5c:a1:dc:63:da:59:33:91:a2:e5:02:cb:63:79:
3f:45:52:26:9d:43:66:24:55:1e:53:ec:ba:04:9d:
a3:74:84:73:34:9e:08:0d:f0:03:6c:04:56:70:4c:
05:1b:cd:ba:21:2c:61:27:63:3d:be:06:88:dd:6f:
30:95:5b:c7:e8:3f:4b:81:34:4d:9a:a0:a7:84:00:
13:88:21:74:2b:aa:51:71:c8:dd:0c:5e:73:47:09:
1d:f0:3e:99:bf:d9:07:9e:d9:f4:bc:5f:1c:aa:fc:
5a:11:2d:22:b9:b6:70:f1:92:b4:de:ed:74:4e:68:
dc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C6:5C:A6:E6:69:58:00:AA:60:01:2D:FD:55:2A:13:7F:CE:EA:D3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139342e3233332e3130382e302f32322d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.233.108.0/22
Signature Algorithm: sha256WithRSAEncryption
37:d9:6a:19:34:a8:9e:dd:85:9e:39:99:e8:b3:ea:95:b7:ba:
0c:8f:3a:62:05:2a:92:d6:ac:09:5c:cf:e8:02:63:d2:39:b1:
2f:be:3b:37:02:1c:ea:51:30:95:07:86:a1:af:92:5a:0a:82:
8d:a2:33:2d:0f:c7:5c:6a:3c:af:2f:ad:cb:9d:37:e2:de:b2:
f4:5a:b2:cf:e4:fd:fc:63:4f:cb:76:e7:f5:92:76:d2:53:ff:
fa:12:8a:43:6e:31:f2:d7:70:79:83:ae:2e:02:d6:28:e5:e9:
be:1e:3b:cd:98:88:81:07:f2:19:00:17:01:d5:d8:6a:87:ce:
64:a1:6a:1c:50:8a:b2:f2:68:f4:e4:04:3c:77:16:b5:57:ba:
cc:b8:bb:74:98:ba:1a:60:85:b4:3d:cb:46:7a:39:62:14:65:
4a:0c:1f:27:bb:09:60:7e:4e:09:bb:17:f7:5c:07:bf:e8:21:
62:ca:0b:8e:89:73:3f:89:e2:41:54:58:e4:0d:36:cd:71:cf:
ad:70:10:4b:93:1b:e4:f4:b8:01:d7:9a:64:6d:23:f8:a5:bf:
b7:bb:3a:ff:32:8a:9d:26:81:15:7f:e7:00:bb:4a:0a:45:5d:
58:38:f9:4f:d1:80:67:1b:8a:0e:db:52:d7:b7:48:ec:7d:6a:
8a:9a:9c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 20:18:10 2024 by rpki-client on console-ams.rpki-client.org