Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e35362e302f32322d3234203d3e203437353833.roa
File: 3139352e33352e35362e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: ZdY54zC2e4PqckBTxbs/cyQehIRO46Jv4JrKaDD9Hx4=
Subject key identifier: 4D:3B:4D:86:0B:0B:18:00:D5:D4:EA:5F:05:CE:E9:AF:C8:B7:FE:4F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5F22B4D1A3F93C8D069527BDF4122E164B1241FD
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e35362e302f32322d3234203d3e203437353833.roa
Signing time: Fri 15 Sep 2023 07:09:03 +0000
ROA not before: Fri 15 Sep 2023 07:04:03 +0000
ROA not after: Fri 13 Sep 2024 07:09:03 +0000
asID: 47583
IP address blocks: 195.35.56.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:22:b4:d1:a3:f9:3c:8d:06:95:27:bd:f4:12:2e:16:4b:12:41:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 15 07:04:03 2023 GMT
Not After : Sep 13 07:09:03 2024 GMT
Subject: CN=4D3B4D860B0B1800D5D4EA5F05CEE9AFC8B7FE4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:23:59:14:1d:04:d5:fc:2d:a3:05:4b:49:bc:
cb:ab:00:58:a8:35:94:33:de:5d:8c:ad:57:87:14:
b0:bd:a1:97:f4:11:27:5c:36:9c:bd:bb:24:e8:bc:
f3:02:12:ac:3e:7e:63:c0:ec:78:73:44:7d:b8:1f:
c3:8f:fd:6e:5c:02:bb:3a:09:e7:72:dc:c1:52:18:
62:be:16:22:37:91:d0:ed:03:06:be:97:31:79:e9:
20:29:40:9e:3c:0b:94:74:57:12:32:79:a4:5e:ea:
85:fa:29:bc:3f:2b:09:48:80:49:45:5f:61:60:55:
84:2e:d0:df:3b:f1:60:49:c3:24:78:ca:b3:ad:cd:
ea:76:10:94:72:8a:d7:58:20:ac:6e:9e:f4:95:fc:
b2:bf:93:8e:cf:a7:45:cf:1a:e5:8a:5d:e7:e9:e9:
f3:53:ae:a1:2a:7d:1e:97:25:20:c5:54:42:c0:c5:
5a:d0:04:15:c6:02:01:1a:15:8a:36:95:6e:cc:53:
67:a8:f7:c9:4f:c5:95:25:47:91:f7:c9:b4:3d:c3:
20:48:d8:4c:b1:89:82:51:10:89:50:a2:ea:7b:1c:
87:d3:8e:7a:8a:39:75:7c:49:6f:c4:8a:30:a8:f6:
91:96:14:74:bf:34:4a:d7:f9:e6:36:2c:4e:f8:45:
e0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3B:4D:86:0B:0B:18:00:D5:D4:EA:5F:05:CE:E9:AF:C8:B7:FE:4F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3139352e33352e35362e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.35.56.0/22
Signature Algorithm: sha256WithRSAEncryption
83:e1:a7:56:95:92:6b:a8:56:c6:88:f5:9a:51:c6:a1:da:77:
6d:39:b8:ac:32:51:65:50:2a:f5:08:0a:ec:57:3c:fb:d7:4e:
04:8d:1e:e5:75:2c:40:f5:35:61:0c:9d:9a:e2:68:e4:fc:2e:
6a:3d:6f:da:68:5f:48:39:85:50:a7:95:2b:fb:b3:2a:61:aa:
98:e7:f5:20:ac:f6:fc:f1:f3:1d:26:77:62:39:fd:f0:75:0f:
fe:2e:9c:30:6d:e9:b7:5e:c8:13:2b:27:b5:a4:9a:15:ca:4d:
34:83:a8:8e:1e:60:e3:59:6d:c1:b9:87:a5:02:9c:34:0b:72:
90:c9:11:61:36:b6:33:85:2e:a3:92:3b:58:9b:02:38:89:c9:
ad:e8:c5:aa:e4:a9:d5:93:21:7f:2e:3b:16:d4:e6:88:0a:2a:
e1:77:97:00:17:cf:74:06:e0:5a:1d:6a:b1:86:54:70:c5:54:
70:92:4f:cd:89:39:3d:12:6c:84:b3:87:ec:02:6a:2f:c8:dc:
26:dd:40:59:20:42:be:c5:ec:ac:35:93:be:17:22:58:99:cc:
76:51:dd:22:a7:eb:34:ce:ca:1d:73:3a:35:c3:4a:3a:34:c5:
2e:f7:78:1c:20:4f:e9:52:d3:a7:00:fa:a8:ef:08:70:e3:67:
83:d3:c4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:47:07 2024 by rpki-client on console-ams.rpki-client.org