Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e32312e36342e302f32322d3234203d3e203437353833.roa
File: 3231372e32312e36342e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: k+ug0kB/s8aVtg0UgoHmr2QHPyFu128OmUOUPNTSb+4=
Subject key identifier: 09:FA:E9:01:3A:2F:A5:6F:B4:DD:12:39:36:D5:1D:23:15:2D:06:89
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5CFA0D303AB33D7670BACEAE745CAA44F3D0ADA2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e32312e36342e302f32322d3234203d3e203437353833.roa
Signing time: Mon 26 Feb 2024 08:53:08 +0000
ROA not before: Mon 26 Feb 2024 08:48:08 +0000
ROA not after: Mon 24 Feb 2025 08:53:08 +0000
asID: 47583
IP address blocks: 217.21.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:fa:0d:30:3a:b3:3d:76:70:ba:ce:ae:74:5c:aa:44:f3:d0:ad:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:08 2024 GMT
Not After : Feb 24 08:53:08 2025 GMT
Subject: CN=09FAE9013A2FA56FB4DD123936D51D23152D0689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8a:33:2c:97:15:9b:a3:0c:ac:00:1b:0f:55:
4a:d5:32:20:f0:1d:fc:2f:93:8d:a8:86:34:ce:a2:
46:38:a3:db:26:1e:57:25:66:ec:39:c6:a2:a1:51:
2c:bd:53:68:ff:84:2f:aa:d3:de:1e:4c:7e:f9:dd:
72:5a:71:a4:32:8a:6a:58:b8:2a:59:cc:ef:bc:f2:
f0:ba:c0:83:75:cb:36:63:5f:ae:a3:bd:5e:b7:0e:
81:5e:1a:77:33:9e:2f:5c:14:5a:e3:71:a7:94:5d:
62:fb:fc:89:28:87:74:d9:c0:5e:35:f1:09:39:79:
94:bd:76:b9:39:d2:20:91:d3:85:1d:e8:b1:6f:69:
a8:a9:d4:b0:47:49:fe:a0:bc:ec:99:56:37:48:2c:
04:7d:7c:ac:d7:84:ba:19:a2:2e:89:5e:85:d2:0d:
b8:37:a7:60:a2:e6:f5:3f:8a:8e:ad:4f:e4:3d:d6:
23:8e:0c:90:e7:c3:7b:1e:cc:ac:9b:d2:dc:67:e2:
b1:a9:aa:f5:2a:7e:76:a4:7d:63:72:4d:13:d0:f6:
38:71:ff:02:71:e9:c7:06:c5:9d:58:13:2d:bf:5d:
52:c4:58:28:e9:25:17:3b:0c:f7:c6:b3:ea:eb:78:
8a:82:eb:58:69:a5:67:b7:71:80:a4:7d:92:c8:2b:
04:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FA:E9:01:3A:2F:A5:6F:B4:DD:12:39:36:D5:1D:23:15:2D:06:89
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3231372e32312e36342e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.21.64.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:e2:9d:76:58:75:c5:45:6b:c4:e0:10:c8:b2:8c:a8:77:89:
36:61:16:a1:bb:37:10:e0:43:c4:43:46:a3:7e:77:af:c8:62:
2c:91:1a:f6:ea:2e:e6:3a:18:dd:5a:b2:a5:5c:c2:e7:c2:45:
9c:08:4b:16:49:7a:5e:30:a6:ef:ed:3c:76:15:c2:3d:fc:2c:
98:a4:30:03:53:73:de:79:af:f1:b5:b2:e5:8a:e8:ed:5a:81:
94:65:cd:ee:35:4f:f7:98:ea:97:26:6f:56:78:9d:34:57:b1:
04:9e:05:28:22:2f:a8:67:b3:eb:21:8b:a2:57:51:82:c3:ed:
1d:d2:77:e1:10:1d:ee:5d:01:ce:4d:b2:8d:79:30:65:1c:86:
3a:51:c6:16:17:2a:c7:cf:9b:b6:3c:11:bf:5d:1d:4c:41:fd:
52:bc:8c:23:8a:2e:c4:3b:5d:5e:f8:a1:33:46:6a:da:5d:00:
b7:01:6b:3d:3d:b0:3e:63:13:21:25:12:28:7d:52:4b:83:61:
ba:c1:a9:81:8e:71:c5:85:d1:3e:cc:45:2d:c4:94:ca:26:93:
b7:e3:80:78:c6:bf:8b:ef:cf:91:ca:f5:cd:c9:dc:c2:8f:23:
35:e4:09:d3:4a:e3:bc:54:ba:9e:96:ca:47:04:c5:82:1b:d7:
e8:86:df:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:47:07 2024 by rpki-client on console-ams.rpki-client.org