Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e32382e32312e302f32342d3234203d3e20323031333431.roa
File: 3139352e32382e32312e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier: n7nb/ddhAfLteb693ZGAWwksgES7aSk3iiwFUqMS7jE=
Subject key identifier: 6C:FB:35:71:CE:E6:24:65:20:B2:BE:9E:36:91:2D:85:5B:57:43:2C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 17CA26A8D267763F7DAF4441FA9A1A74A0EEE25C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e32382e32312e302f32342d3234203d3e20323031333431.roa
Signing time: Mon 26 Feb 2024 08:53:09 +0000
ROA not before: Mon 26 Feb 2024 08:48:09 +0000
ROA not after: Mon 24 Feb 2025 08:53:09 +0000
asID: 201341
IP address blocks: 195.28.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 16:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:ca:26:a8:d2:67:76:3f:7d:af:44:41:fa:9a:1a:74:a0:ee:e2:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:09 2024 GMT
Not After : Feb 24 08:53:09 2025 GMT
Subject: CN=6CFB3571CEE6246520B2BE9E36912D855B57432C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3d:22:5c:86:83:d3:96:ed:bb:d0:3d:d4:16:
6d:8e:d8:c0:fa:52:8c:48:b7:2e:8f:1e:aa:69:f8:
a4:cf:c1:f1:83:5b:b1:a2:ad:66:72:8a:dc:7a:18:
b2:3c:be:a5:5d:0f:09:3e:f9:a5:c8:df:6c:e7:12:
80:74:f6:0f:c6:77:32:71:33:92:de:7c:81:c2:db:
a6:9f:e9:15:3b:8a:72:04:38:b7:6c:0e:8a:bf:9b:
44:fe:71:b1:2d:91:1f:59:75:a5:c0:51:11:56:95:
6a:b4:fb:ab:03:d5:e9:99:a5:66:68:7e:68:09:46:
f9:b9:78:6b:ed:de:1a:ee:c0:b8:04:ec:bf:0c:47:
80:a5:0d:af:f2:e7:f2:3c:09:9e:65:04:95:73:a8:
f3:72:2b:9a:47:99:b8:1d:1d:4b:c4:d0:f6:fd:1b:
4c:f3:ab:d9:6c:10:93:df:8f:d7:1f:7e:4d:1d:f7:
32:94:bf:3c:e8:0b:1c:c1:11:52:45:16:c0:8e:57:
6f:4b:a7:07:34:cb:27:9b:64:a7:5a:7f:68:c2:3b:
4a:54:1b:cd:6c:78:16:b6:5b:aa:e0:1c:6b:5c:05:
1f:a1:bd:6e:e9:f8:9c:37:b6:9f:57:a6:a3:3a:db:
e9:d6:9b:8f:2d:73:59:a9:41:6b:bd:8f:96:fa:2a:
aa:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FB:35:71:CE:E6:24:65:20:B2:BE:9E:36:91:2D:85:5B:57:43:2C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e32382e32312e302f32342d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.28.21.0/24
Signature Algorithm: sha256WithRSAEncryption
00:c9:ff:a8:b8:4b:be:77:06:b4:87:a8:4d:4a:8d:fc:c1:40:
97:a6:6f:38:ae:de:c3:8e:44:77:c6:22:6b:dd:d5:97:4e:48:
60:94:cf:50:64:49:0f:c8:e9:78:f7:85:02:8e:d9:05:23:49:
8a:95:a2:7c:bd:5d:8a:79:b0:1d:ab:21:44:46:bf:42:30:89:
9a:89:f1:7b:46:55:3f:c7:45:41:16:ff:e1:e3:ed:c9:a4:0e:
11:d8:25:36:a5:6d:91:44:59:6b:9f:3b:71:35:d7:f1:09:30:
26:8a:8a:4f:45:86:c9:3d:e5:c8:38:97:3c:dd:81:58:49:77:
5d:77:a5:51:ba:95:db:16:06:00:ee:28:99:3c:3c:03:38:b0:
5e:e1:e3:e9:65:ff:6d:d2:07:93:fc:c0:6e:0f:cc:74:70:e0:
44:94:d5:14:a1:a5:6d:2c:a0:fe:2b:51:56:c3:87:66:3b:71:
04:60:0e:a6:6f:9d:95:57:62:46:67:60:26:5e:3e:4c:ab:ba:
77:04:20:d4:fa:ec:1e:54:17:cf:56:d2:5a:28:e0:a8:35:92:
6d:6d:16:b8:82:15:e1:f8:d4:1e:25:ad:ae:d2:2c:ee:5c:af:
93:dd:82:85:17:03:ed:f1:c0:74:48:62:44:3f:29:71:fa:d1:
54:80:94:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 20:18:10 2024 by rpki-client on console-ams.rpki-client.org