Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39302e3132302e302f32332d3332203d3e203531313637.roa
File: 3231322e39302e3132302e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: sumVx/SJaA3aSUB4r1OeMXQ4wlXpIGkzq7I4UqMLub4=
Subject key identifier: 2E:D6:D9:D8:08:AD:B4:21:E5:86:14:89:C4:66:3F:73:C5:84:7D:17
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 51BEB7755A968DFD20D17FDD287E720D610A2FE2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39302e3132302e302f32332d3332203d3e203531313637.roa
Signing time: Fri 20 Oct 2023 13:41:51 +0000
ROA not before: Fri 20 Oct 2023 13:36:51 +0000
ROA not after: Fri 18 Oct 2024 13:41:51 +0000
asID: 51167
IP address blocks: 212.90.120.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 16:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:be:b7:75:5a:96:8d:fd:20:d1:7f:dd:28:7e:72:0d:61:0a:2f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 20 13:36:51 2023 GMT
Not After : Oct 18 13:41:51 2024 GMT
Subject: CN=2ED6D9D808ADB421E5861489C4663F73C5847D17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0c:fc:b1:d1:24:a8:95:67:03:35:da:e6:7f:
95:6d:c5:73:74:43:a2:42:aa:dc:24:bc:71:4b:ed:
3d:6f:cc:d2:c9:4d:da:a1:d2:be:a1:c4:2f:a7:76:
95:1c:96:1d:bc:fc:d6:ad:41:f7:ce:83:4f:8e:55:
3f:cd:4e:62:ae:22:9f:f9:ba:50:9f:c4:36:93:51:
c8:c6:cf:8a:ff:86:1c:dd:a9:7a:43:6b:d1:b1:c2:
24:1f:b6:c6:1f:bd:57:03:51:dc:50:21:b7:7a:85:
c1:b5:26:e3:9d:d0:6c:87:66:0e:05:26:7a:14:bf:
e2:ac:7f:09:5b:b2:47:57:98:68:ed:f2:00:b2:88:
e7:1c:27:72:f7:db:67:ba:f4:16:cc:ad:c2:c4:e4:
b6:fa:d0:8f:d4:81:06:4a:69:2c:e7:e9:14:46:0f:
6a:5f:1d:e7:ab:3a:88:6d:7c:25:35:c9:ac:c1:82:
7f:88:25:94:7f:af:47:1e:71:b3:f3:cd:c4:42:c8:
66:f6:90:b9:db:ac:49:51:15:1a:55:52:1f:91:39:
74:db:0e:bf:e2:21:fa:55:c6:7a:c9:43:ac:ae:ca:
1a:bb:f3:32:10:20:b3:b1:35:cd:c2:20:8b:04:e8:
50:2d:e3:3b:a0:5a:45:54:ef:95:79:0f:6b:99:f6:
2b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D6:D9:D8:08:AD:B4:21:E5:86:14:89:C4:66:3F:73:C5:84:7D:17
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231322e39302e3132302e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.90.120.0/23
Signature Algorithm: sha256WithRSAEncryption
25:e7:0e:51:35:b3:0b:ec:96:eb:f1:f4:f6:05:1d:3d:b8:12:
35:c7:47:ea:f3:b8:45:71:0a:13:87:1a:12:f9:6c:2c:6e:6c:
f4:69:ff:81:dd:e6:34:f7:4f:56:3e:fa:51:1f:9a:8b:a5:15:
5c:cc:07:f9:e2:db:fc:d2:c3:5f:09:61:da:0a:b5:e6:a3:89:
be:a5:59:73:58:99:9d:b9:87:58:c6:7f:7a:0f:67:3c:d0:d7:
15:4f:7d:61:5f:9e:29:23:75:dc:30:46:3d:46:4a:12:b7:67:
b1:54:d0:e7:f4:cb:66:c3:30:39:af:7e:26:a4:94:25:70:00:
42:06:40:eb:33:cd:af:0f:86:c5:29:b7:bb:a6:29:fa:d0:6c:
56:8b:01:8b:4e:a8:bb:6f:d1:c6:99:fc:03:96:b7:51:f1:02:
78:98:d5:f5:f7:b1:86:e2:05:b3:11:00:9b:01:5d:7d:38:86:
14:66:53:c8:5d:02:8b:43:19:20:9c:54:3f:1f:c0:7a:f4:b7:
8f:18:5e:97:51:7a:92:89:76:bf:81:97:63:7c:bc:6b:d3:65:
14:7c:c0:a0:e3:3f:8a:39:61:48:d9:3c:76:35:29:f2:83:69:
81:18:b6:90:c5:03:7f:8c:dd:17:64:7c:e8:df:79:68:85:43:
93:a8:9c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 20:18:10 2024 by rpki-client on console-ams.rpki-client.org