Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e34322e302f32342d3234203d3e203432373038.roa
File: 33312e3232302e34322e302f32342d3234203d3e203432373038.roa (raw, json)
Hash identifier: Vy+L/xPHSCHjn18ouxc3h/WL1tC8VaEl+H0nk7yCxXE=
Subject key identifier: 00:E3:79:BA:97:31:91:C9:34:F4:B5:34:33:01:DD:E4:3E:C1:29:C7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1CADE7B2A05213B735B6BF5413E57A554D0B9AE0
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e34322e302f32342d3234203d3e203432373038.roa
Signing time: Mon 26 Feb 2024 08:53:14 +0000
ROA not before: Mon 26 Feb 2024 08:48:14 +0000
ROA not after: Mon 24 Feb 2025 08:53:14 +0000
asID: 42708
IP address blocks: 31.220.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:ad:e7:b2:a0:52:13:b7:35:b6:bf:54:13:e5:7a:55:4d:0b:9a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:14 2024 GMT
Not After : Feb 24 08:53:14 2025 GMT
Subject: CN=00E379BA973191C934F4B5343301DDE43EC129C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:17:c7:45:95:04:5e:f7:70:8c:39:c6:97:d4:
58:e5:4e:2c:b2:41:71:31:43:ed:23:73:d9:3c:d6:
d8:bc:37:c9:1f:77:e8:8e:fa:23:2c:75:ff:ac:25:
4b:a4:d6:9a:8a:91:da:39:f9:c5:b7:76:da:8b:e3:
33:85:a1:4b:df:77:68:67:8b:51:8e:16:d5:aa:5e:
d0:3c:ed:13:65:30:45:3f:e0:13:75:00:de:72:a6:
6c:d5:4a:ca:a9:32:69:4c:e8:23:64:d3:80:0c:50:
77:88:6b:a1:68:f9:9f:fe:3c:4c:9a:39:bd:1c:d6:
60:7e:23:b5:46:72:63:21:03:98:39:ac:06:f1:f1:
2c:46:39:66:99:b2:41:5c:81:eb:41:78:7d:9d:b0:
a5:e5:c8:3e:29:cb:68:6b:49:3e:1d:63:0b:c6:8c:
f3:12:dd:0b:eb:bf:cc:12:d4:dd:27:c3:46:9e:44:
15:9b:54:76:96:94:49:1b:cd:f5:d1:d2:a6:9c:75:
fc:44:ee:e2:da:ce:8c:da:7c:ab:80:9e:05:47:45:
71:a7:18:55:f3:7c:6e:36:c0:80:f1:0d:60:e6:36:
4e:10:6b:e1:e5:7f:17:06:97:6b:6f:cd:3a:c5:23:
0a:3f:64:27:9d:16:43:bc:e0:f1:08:0a:8f:0b:c7:
9e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E3:79:BA:97:31:91:C9:34:F4:B5:34:33:01:DD:E4:3E:C1:29:C7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e34322e302f32342d3234203d3e203432373038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.42.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:7a:29:02:7d:b5:94:95:ce:1a:2b:24:f0:60:2b:34:40:17:
33:e0:fb:36:ff:5b:f1:02:00:88:64:06:3c:32:0e:7a:69:2c:
e2:43:90:c4:ae:fa:b8:72:1d:76:bc:d6:5c:1f:e5:a1:3e:d9:
e1:61:e9:36:19:59:8b:bd:e0:9c:9c:0e:c9:97:40:4d:75:80:
da:c8:a4:31:67:5e:27:97:13:b0:28:b7:e8:7b:7a:99:d5:e5:
72:ce:a2:a2:0d:b8:77:a3:4e:7b:e0:e2:31:1c:d2:ed:11:82:
88:88:28:b3:08:ef:9b:17:6d:63:69:01:d7:61:ee:05:72:9e:
b5:21:0b:02:c1:0b:f8:10:c9:b6:68:29:c3:7c:79:c1:b2:29:
16:1f:78:0b:b8:c4:a1:06:ac:4a:df:eb:e4:34:b3:2c:12:3d:
5e:b8:21:b5:cd:99:51:a4:cb:16:11:72:b6:50:80:59:07:3f:
3d:f3:5e:d8:12:70:ba:19:50:0c:20:19:fe:24:cd:a5:e5:ed:
23:7e:f9:bc:5c:40:66:39:8a:4c:00:a4:19:6a:b3:18:15:b1:
67:b6:2b:9e:57:69:1e:b1:46:f0:a7:5c:58:18:71:80:65:69:
b9:db:28:41:63:78:9a:d6:e2:c9:87:1b:83:74:c6:21:71:0c:
1a:f1:25:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 14:35:47 2024 by rpki-client on console-fra.rpki-client.org