Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e34322e302f32342d3234203d3e203633343733.roa
File: 33312e3232302e34322e302f32342d3234203d3e203633343733.roa (raw, json)
Hash identifier: yGAb9Yqk5u5L57TcyLylDrvBvsbJ4M3Y0/b37LQTyh4=
Subject key identifier: 0D:C4:2B:E0:9E:03:9A:10:D5:BF:FE:B4:F5:7F:01:3B:53:AA:34:11
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 19789A50DF4C4B26948E62FA2F9E736E4EBC78FF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e34322e302f32342d3234203d3e203633343733.roa
Signing time: Mon 26 Feb 2024 08:53:04 +0000
ROA not before: Mon 26 Feb 2024 08:48:04 +0000
ROA not after: Mon 24 Feb 2025 08:53:04 +0000
asID: 63473
IP address blocks: 31.220.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:78:9a:50:df:4c:4b:26:94:8e:62:fa:2f:9e:73:6e:4e:bc:78:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:04 2024 GMT
Not After : Feb 24 08:53:04 2025 GMT
Subject: CN=0DC42BE09E039A10D5BFFEB4F57F013B53AA3411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:65:bf:d4:c2:9b:d1:38:88:44:df:9c:6c:7b:
ee:da:9a:39:9d:79:25:85:b5:28:cf:a7:ad:cf:7b:
19:66:5a:68:39:04:81:02:99:37:a2:fe:47:0a:1c:
b8:40:f2:80:f6:ed:58:8b:a9:fd:ff:31:d9:a6:25:
23:33:e5:f6:a0:43:b6:82:f4:f4:b7:00:ac:bf:a0:
38:01:02:01:cf:5f:70:d0:a8:fe:3f:f2:40:f0:0d:
bb:77:75:9c:5c:b2:7b:46:74:8a:18:ef:f9:f0:1b:
26:a6:e2:3d:39:02:9e:5e:d7:5d:3c:50:20:5b:c7:
0b:56:a5:79:ca:09:92:92:ae:c5:00:60:c5:2a:3a:
78:29:4f:13:66:53:56:01:e2:8c:a3:41:8a:b0:1c:
f7:4a:4a:9a:de:0d:fe:1e:f2:f3:d4:0b:23:52:ff:
fb:0f:67:61:60:c2:23:b2:4d:b3:01:04:be:dc:61:
95:19:18:b2:f5:ae:d9:7f:40:bc:22:b2:4f:55:c8:
ef:02:5f:09:c9:0e:98:3a:8d:5d:7f:c5:06:a3:44:
87:5c:bf:9f:18:d0:a9:dc:4f:4a:d0:ed:04:cf:29:
ba:44:90:cd:c4:b5:93:b1:9f:aa:78:d5:1a:62:df:
7a:c0:ea:31:46:7f:79:dd:eb:30:bd:09:34:92:ff:
01:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C4:2B:E0:9E:03:9A:10:D5:BF:FE:B4:F5:7F:01:3B:53:AA:34:11
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33312e3232302e34322e302f32342d3234203d3e203633343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.220.42.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:ff:d9:f9:e5:d7:be:50:86:6e:05:cd:cf:b8:91:cb:4c:3d:
40:ed:7b:67:ae:80:a3:c1:d1:9a:50:4b:a3:71:bc:53:7e:26:
1a:88:76:97:95:0c:23:63:f0:b6:00:7c:de:0a:72:09:d5:fa:
b6:12:64:ed:68:0f:ed:ec:5a:9d:e0:3b:5f:d0:bb:e7:75:f5:
f8:7e:bc:e4:e7:5b:59:37:4a:7b:8f:3f:7e:cc:41:a0:1b:44:
db:c8:f0:41:17:54:46:bb:1f:8a:86:33:2a:0a:9f:6e:40:41:
b7:b4:20:af:d5:54:ff:57:fd:30:27:00:db:bc:8e:f3:9e:f0:
62:ec:86:ca:ed:8a:d3:38:71:a5:af:72:fa:dc:01:f7:9e:1b:
d2:8f:8b:fb:49:1b:77:f2:02:b2:6f:61:bc:02:0d:c3:30:21:
0a:d9:7b:21:f8:1d:12:6d:16:95:3a:d9:9d:40:22:39:ad:a4:
4e:ca:37:85:82:81:f9:2f:73:56:a6:21:0e:5c:cd:a9:bf:ea:
f9:4a:9e:d0:96:9e:6d:e1:83:f4:da:d1:b6:e7:aa:37:2f:1b:
11:8d:cf:c9:b2:49:ef:fb:76:75:84:a7:7a:cb:4e:95:3d:4b:
b0:4a:1a:4b:fa:71:8f:75:99:8c:fc:d8:e5:12:0a:3a:cc:aa:
05:fb:12:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:47:07 2024 by rpki-client on console-ams.rpki-client.org