Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e34302e302f32332d3234203d3e20323036323634.roa
File: 33312e3232302e34302e302f32332d3234203d3e20323036323634.roa (raw, json)
Hash identifier: OXddyXwnr99L/+5TbUi4hsDgsS5gf4qB3sfSTZW9Xaw=
Subject key identifier: 6C:EF:CF:B4:82:1A:A3:56:68:1D:0B:BC:E7:BA:E8:DA:33:6B:7B:28
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 67794205F6194584A6F5D602060D58E020051FB2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e34302e302f32332d3234203d3e20323036323634.roa
Signing time: Mon 26 Feb 2024 08:53:10 +0000
ROA not before: Mon 26 Feb 2024 08:48:10 +0000
ROA not after: Mon 24 Feb 2025 08:53:10 +0000
asID: 206264
IP address blocks: 31.220.40.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:79:42:05:f6:19:45:84:a6:f5:d6:02:06:0d:58:e0:20:05:1f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:10 2024 GMT
Not After : Feb 24 08:53:10 2025 GMT
Subject: CN=6CEFCFB4821AA356681D0BBCE7BAE8DA336B7B28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:61:3f:b0:93:7c:d0:61:71:e8:16:24:05:2d:
25:fe:c2:4f:0b:2f:6f:74:dc:1a:6e:44:67:f8:cd:
df:dd:05:26:bb:cc:86:6a:62:b8:05:df:c1:63:5a:
7d:e0:21:10:91:89:30:7e:93:1c:1a:0b:0c:7f:36:
58:c6:40:3f:f9:e9:d7:a9:36:a9:55:0a:0a:65:6a:
84:98:c0:09:cd:21:c8:8d:56:83:5d:57:0a:cb:0f:
b2:c9:da:f3:b8:44:e8:16:bd:6b:c2:49:89:87:57:
89:59:13:5b:a0:26:63:47:4c:9e:3c:8c:ba:e6:68:
d4:ee:c0:23:93:61:6c:cc:97:46:16:47:93:62:b6:
73:7d:50:87:3a:1a:6b:b7:61:77:49:f7:30:b0:cc:
7c:6c:59:c1:e0:98:f5:97:ba:7d:b5:3d:6b:50:02:
07:77:46:5f:07:81:1a:33:72:97:0f:c1:88:6e:24:
5c:9e:08:2b:af:41:4a:31:e4:22:dc:ee:22:0a:d3:
f2:f5:b7:8f:8e:ea:91:3e:9b:bb:70:8c:0a:21:f0:
eb:9b:a7:1f:b6:e4:4e:a9:8c:b9:b0:8c:54:36:02:
2a:aa:cc:e5:08:a2:0f:a0:39:af:0f:b5:fb:01:b9:
98:ac:a6:07:75:bd:57:94:15:22:08:5f:3a:3b:28:
f5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:EF:CF:B4:82:1A:A3:56:68:1D:0B:BC:E7:BA:E8:DA:33:6B:7B:28
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e34302e302f32332d3234203d3e20323036323634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.40.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:48:cf:58:5d:bd:f1:2b:53:3f:a0:4d:39:31:7f:ea:64:23:
0f:df:a7:c0:4c:5d:8f:de:1f:9f:e1:62:37:96:12:a3:9f:c1:
48:8e:9a:16:81:27:81:38:7a:43:28:34:a0:1c:63:c3:c8:bb:
84:96:88:81:a4:95:1f:20:96:42:fd:8d:ae:63:66:81:35:21:
ce:6f:db:d2:30:57:c8:ad:79:94:ff:1c:26:04:e6:70:09:ec:
b6:42:65:f2:1b:6b:2e:36:31:90:ac:ee:1b:15:da:62:15:aa:
7d:5e:04:28:03:c5:57:a4:46:a0:20:f1:d0:92:ce:20:77:c8:
84:29:e0:1a:75:4e:d4:bf:df:ca:dc:3b:1f:db:99:a5:08:58:
a7:6a:e7:ed:78:9f:ca:f0:41:de:90:a8:fb:02:bc:5d:74:20:
03:f2:d9:91:e3:02:b7:d2:96:43:19:ba:c6:bf:df:eb:22:19:
d0:ae:ab:d1:63:a9:87:8f:09:82:7f:83:29:f8:bd:66:80:ce:
a3:9b:98:ed:a6:88:be:24:a5:5f:d5:d6:38:11:9a:93:c4:55:
cc:9e:de:38:ea:43:86:14:88:b7:a6:2c:4e:be:92:bd:90:27:
4c:3b:3e:f1:98:78:29:a9:6b:14:c5:b0:4c:6d:8e:0b:43:40:
75:46:0c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 14:35:47 2024 by rpki-client on console-fra.rpki-client.org