Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e302e302f32322d3234203d3e20323036323634.roa
File: 33312e3232302e302e302f32322d3234203d3e20323036323634.roa (raw, json)
Hash identifier: W6VaCVbgc3XrebIM1ymBJNvh2Gdu12HcqrF9xZZtQfo=
Subject key identifier: 78:D5:8E:18:88:B9:22:44:F7:B4:05:38:97:7F:4D:E7:F4:DA:23:0A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7AC0EBFFE691E7962875D13A7E9AA31A5E6FD7CC
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e302e302f32322d3234203d3e20323036323634.roa
Signing time: Mon 26 Feb 2024 08:53:30 +0000
ROA not before: Mon 26 Feb 2024 08:48:30 +0000
ROA not after: Mon 24 Feb 2025 08:53:30 +0000
asID: 206264
IP address blocks: 31.220.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 16:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:c0:eb:ff:e6:91:e7:96:28:75:d1:3a:7e:9a:a3:1a:5e:6f:d7:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:30 2024 GMT
Not After : Feb 24 08:53:30 2025 GMT
Subject: CN=78D58E1888B92244F7B40538977F4DE7F4DA230A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:70:d7:8c:ae:8a:ec:2f:07:0e:dc:dc:60:e2:
e9:73:85:c8:da:b8:49:af:88:d2:7f:14:2f:8c:d6:
e6:83:57:24:f6:ae:da:a5:c7:36:ef:f3:87:9e:ac:
e5:6b:fc:ab:fe:7e:e0:7d:b4:70:1c:20:59:f5:b3:
04:8c:90:b4:0c:20:f7:02:7d:14:4c:4a:a5:f7:fe:
8b:c1:c0:7a:7b:2c:86:09:cf:04:b8:c3:dd:b5:26:
4e:da:5d:fe:25:f6:6f:fa:9f:6f:60:87:45:71:be:
e4:14:da:e0:d4:ec:ec:43:3c:61:20:80:c5:5c:fd:
ac:70:05:e0:41:e5:76:13:67:f3:53:a7:da:23:ce:
4f:d9:bb:64:cb:7f:01:80:0e:d7:b9:97:4a:5e:1f:
cc:25:53:a6:c6:2d:33:4d:c6:1c:55:5e:c4:fd:66:
cf:4c:28:f9:e3:1c:23:9f:b1:63:ce:bf:24:eb:00:
f5:68:8c:e4:8f:77:24:77:f6:a1:ff:05:70:76:fe:
68:64:c4:b9:49:3f:db:c0:f8:ce:e8:65:f2:08:4d:
26:37:1b:b1:fc:f6:67:29:8c:6d:7d:bf:00:df:94:
97:6e:01:f1:37:34:c6:76:9a:21:75:2c:f4:e4:08:
6b:63:6f:b8:87:57:f7:7e:7f:5b:c7:84:3d:1a:fc:
d8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D5:8E:18:88:B9:22:44:F7:B4:05:38:97:7F:4D:E7:F4:DA:23:0A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e302e302f32322d3234203d3e20323036323634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.0.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:c3:d4:dc:14:94:e2:1f:7b:c0:11:e9:3d:ec:33:ad:f2:a5:
08:82:5c:30:41:98:f3:4a:ec:0f:d6:2b:0c:87:a7:b1:a6:60:
df:32:cb:5a:5e:df:1f:64:23:93:1e:99:82:21:b2:ef:7f:4f:
03:9b:27:45:d4:a4:e1:6c:f7:0a:05:ac:63:27:75:b6:01:ff:
5e:0e:da:ee:29:07:90:27:9a:9b:4c:a8:91:63:ef:3a:3a:1a:
66:21:ca:86:f6:4e:f8:13:75:e0:8f:65:6e:34:2e:08:11:80:
d1:7c:4a:d8:7f:6f:c4:40:e4:95:93:44:6f:0a:ab:c1:91:f0:
58:95:92:af:98:ea:1f:75:d3:9c:93:09:9e:90:d2:09:41:5d:
e4:24:87:79:72:8f:b8:ae:cd:a1:d8:bf:24:9e:33:1a:07:a5:
d7:3a:2f:b7:be:29:ce:13:a4:34:ea:8d:ba:82:1e:a5:54:e6:
fa:2e:c1:5a:1f:d0:22:03:a2:81:83:01:f9:70:4c:df:f2:fa:
21:46:f3:04:78:95:bd:aa:bd:2a:50:5e:e2:9f:f0:40:56:e5:
9e:8d:26:ae:b4:d0:f0:72:22:d7:ce:5b:b6:46:28:e5:07:0b:
48:e6:6b:c9:81:84:65:04:88:24:e3:bd:74:6b:d4:2e:15:7b:
a9:da:f0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 19:28:04 2024 by rpki-client on console-fra.rpki-client.org