Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e36342e302f32342d3234203d3e203530363733.roa
File: 33312e3138372e36342e302f32342d3234203d3e203530363733.roa (raw, json)
Hash identifier: p1GjooD7mK4NJesjap0Mj4qt49dRPNEIATdZD2niQq0=
Subject key identifier: 70:67:67:7D:27:68:7A:FA:B2:E2:37:E5:C2:B4:00:88:16:3B:B3:FF
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 57FA264ABF9D6DF3E3EC9DACBA2F936B2BD6D8AD
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e36342e302f32342d3234203d3e203530363733.roa
Signing time: Mon 26 Feb 2024 08:52:58 +0000
ROA not before: Mon 26 Feb 2024 08:47:58 +0000
ROA not after: Mon 24 Feb 2025 08:52:58 +0000
asID: 50673
IP address blocks: 31.187.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 16:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:fa:26:4a:bf:9d:6d:f3:e3:ec:9d:ac:ba:2f:93:6b:2b:d6:d8:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:47:58 2024 GMT
Not After : Feb 24 08:52:58 2025 GMT
Subject: CN=7067677D27687AFAB2E237E5C2B40088163BB3FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5d:19:3b:3d:10:72:eb:0d:63:ab:8f:9f:3f:
d3:dd:78:f2:40:6d:7c:41:fe:c5:42:8f:be:75:99:
84:f7:b8:69:7e:a3:26:d8:5e:c8:f3:b1:db:ea:72:
b9:a4:0b:14:39:6f:f0:08:22:9b:61:c4:5b:25:02:
20:22:a5:ce:d5:12:09:a3:7a:84:c4:4f:a8:8e:b4:
ed:2a:ea:4a:80:68:ee:42:55:b9:c6:47:2a:f1:48:
76:af:9f:d4:37:cf:a9:c6:3c:60:e5:4b:c0:bc:2c:
24:0f:99:3e:59:0c:7e:23:86:6d:4a:b0:7b:b6:c6:
b7:91:be:ee:60:d5:d6:c7:7e:3e:1f:dd:ad:da:23:
af:c4:a4:ba:6f:c8:42:8c:82:06:6f:5a:91:04:75:
9f:4d:c9:98:fa:72:49:ec:2c:22:b8:2c:13:52:a1:
50:8c:86:eb:8b:a3:89:99:5e:14:ff:fc:85:b4:e4:
e5:8d:bb:e9:26:f6:0f:de:83:05:ba:3d:fb:a4:c9:
41:43:c8:09:e1:b6:56:18:ee:7b:fe:df:16:1f:60:
0c:b9:a5:57:7f:60:d0:df:62:1a:47:25:a3:f6:c7:
7f:20:8a:c0:3f:90:23:e8:ca:3e:16:ff:2e:c0:0b:
63:58:0b:b4:4c:18:d1:d4:16:70:4d:01:2f:6c:1d:
c6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:67:67:7D:27:68:7A:FA:B2:E2:37:E5:C2:B4:00:88:16:3B:B3:FF
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3138372e36342e302f32342d3234203d3e203530363733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.64.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:1b:b2:4d:83:a2:e6:0c:7f:6a:1b:51:54:1e:02:de:62:35:
55:67:4e:b3:94:bc:7d:1a:36:f4:0c:8b:f4:c2:9f:df:1d:5d:
53:5f:25:c2:49:2f:eb:d0:ca:f2:be:16:0e:c2:ea:56:7e:5d:
e1:d0:a0:ba:de:d9:5f:c6:2a:c0:48:02:5e:51:f2:87:0a:b7:
ba:9d:42:65:40:79:3c:3b:45:d3:8d:2c:b3:1d:ba:a9:3b:ba:
58:41:98:33:ac:68:9e:2b:e0:9d:0d:97:96:ff:54:50:de:d7:
82:e7:a8:9d:35:a3:75:ad:45:2d:c9:5d:a9:9c:aa:8d:74:ed:
a5:d3:1f:a2:a4:34:88:1e:f9:85:23:ce:a1:e3:14:2b:14:ea:
a1:d0:b3:4f:d8:40:9b:ad:07:49:5a:2a:f0:a2:06:72:1f:12:
70:10:9c:e6:0e:0e:d2:70:8d:6a:6a:c2:97:9b:40:2d:e0:48:
a6:8d:83:4d:f7:b1:63:64:32:a1:b0:46:fd:3f:a7:3f:5b:28:
e7:48:b2:c4:87:8c:b7:b6:be:c4:5d:73:12:f6:7e:85:78:7c:
f6:ea:b0:a4:26:a1:b2:ba:af:73:1f:a8:0f:91:d9:88:cc:52:
c6:e8:a3:6e:39:8a:a1:9c:e1:3a:08:0b:f0:58:0d:2d:8b:77:
9a:fc:fa:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 19:28:04 2024 by rpki-client on console-fra.rpki-client.org