Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3139362e34382e302f32312d3231203d3e203437353833.roa
File: 3231372e3139362e34382e302f32312d3231203d3e203437353833.roa (raw, json)
Hash identifier: Vw+DeBhp4fkOx+P61RxOle3GHg1U2+8JDG6GKNwX5/g=
Subject key identifier: EA:E8:24:26:50:30:9B:3C:E4:9F:51:F5:27:DA:18:BA:5C:8F:6D:AF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 559FBFCAE0E5CA94998CAB0A2BA7051350543CC3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3139362e34382e302f32312d3231203d3e203437353833.roa
Signing time: Thu 30 Nov 2023 19:00:23 +0000
ROA not before: Thu 30 Nov 2023 18:55:23 +0000
ROA not after: Thu 28 Nov 2024 19:00:23 +0000
asID: 47583
IP address blocks: 217.196.48.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:9f:bf:ca:e0:e5:ca:94:99:8c:ab:0a:2b:a7:05:13:50:54:3c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Nov 30 18:55:23 2023 GMT
Not After : Nov 28 19:00:23 2024 GMT
Subject: CN=EAE8242650309B3CE49F51F527DA18BA5C8F6DAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d2:21:77:2c:af:68:e2:8d:52:6d:03:f8:41:
a2:89:85:1f:7c:0d:6f:ae:78:de:c7:49:7e:62:c8:
34:c0:2c:cb:a2:47:db:a7:b1:24:a2:ad:ba:dd:5d:
b7:18:47:d0:f2:47:a7:bb:4b:d8:7c:3b:9d:98:92:
7d:76:62:83:bd:76:d7:93:ed:d3:a5:9b:d5:5c:a9:
9c:02:9c:88:c1:76:9a:d6:4e:72:39:e8:a2:c8:09:
d7:08:1a:b8:99:f4:11:35:cc:36:a7:8d:ee:03:f5:
b4:70:32:a5:3c:5b:33:db:28:70:7b:2e:f2:71:56:
da:34:28:91:17:dd:98:3f:20:83:6d:19:4b:d3:05:
78:0e:ff:77:5b:03:4a:1c:cc:c4:0a:1b:88:ed:c7:
1f:0f:ad:26:a5:4d:73:93:82:b7:8a:ed:48:cd:e2:
3d:e8:9c:5f:e0:fc:b9:ea:49:19:e6:18:26:4c:6d:
63:73:94:6e:14:f9:99:f2:af:9a:f2:3e:94:cd:f9:
cf:7e:f9:97:5a:74:dd:5f:01:dc:00:d7:b8:72:87:
02:b8:2d:33:87:fd:1b:71:b8:66:5b:d5:f8:15:a8:
c4:72:21:0c:be:e8:f0:b4:37:58:a4:43:8d:a8:dc:
6c:5d:48:cc:be:fe:be:19:a0:77:9a:6f:07:9c:9f:
65:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E8:24:26:50:30:9B:3C:E4:9F:51:F5:27:DA:18:BA:5C:8F:6D:AF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e3139362e34382e302f32312d3231203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.196.48.0/21
Signature Algorithm: sha256WithRSAEncryption
89:b2:f2:7d:f6:b8:7e:49:bb:c0:8b:e3:69:52:6f:b8:5e:a3:
4f:4b:06:71:48:ad:e2:f8:09:ae:60:54:1b:f8:9e:9c:c7:27:
9b:df:d8:ce:3c:82:75:fd:63:3d:a5:15:6d:ac:40:16:77:3d:
49:f3:1e:ca:d1:8e:ac:39:3a:42:61:ae:20:23:66:7d:ca:87:
65:8d:37:c8:7b:f1:c3:92:80:de:4d:a8:26:72:42:7c:4b:fd:
47:b7:65:22:64:4f:fd:69:61:b1:76:e0:29:a4:d0:6c:03:f0:
67:64:14:a3:a3:f8:22:5e:0d:4e:73:9c:9c:9c:0c:bd:fc:6b:
f3:3b:b9:e9:22:25:84:60:8d:bf:c5:b3:09:9a:46:14:de:81:
1c:6d:5c:1d:6a:05:78:8b:4c:97:f6:4e:87:51:df:53:b5:32:
12:7c:f1:62:81:7d:06:d1:72:83:2d:1a:38:ce:50:6e:9c:a3:
70:f0:88:39:fa:ff:a5:b3:3e:38:f9:2b:4f:5b:b4:73:c6:1f:
f7:ef:bc:c3:ce:db:69:b0:48:f0:ce:d3:3a:83:3d:16:ee:37:
c5:50:30:68:22:7f:38:ff:ad:db:19:ef:f5:bd:0f:ec:93:f3:
2a:96:6b:62:09:e5:99:c2:5f:0e:ff:7e:3e:08:e5:e9:d7:64:
46:16:26:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:47:07 2024 by rpki-client on console-ams.rpki-client.org