Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133302e3232382e302f32322d3234203d3e203437353833.roa
File: 34352e3133302e3232382e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: 1fODP/r+LHG6eWl0CzrVGFmC/8Kv/fEngqr9VpYlS4E=
Subject key identifier: 2E:B1:37:19:50:75:14:87:A3:4D:A8:51:FD:F1:B0:73:E4:5B:B3:26
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7ADFE97DD70D65E1051E39E7B92A22B270AA631D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133302e3232382e302f32322d3234203d3e203437353833.roa
Signing time: Mon 26 Feb 2024 08:53:30 +0000
ROA not before: Mon 26 Feb 2024 08:48:30 +0000
ROA not after: Mon 24 Feb 2025 08:53:30 +0000
asID: 47583
IP address blocks: 45.130.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:df:e9:7d:d7:0d:65:e1:05:1e:39:e7:b9:2a:22:b2:70:aa:63:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:30 2024 GMT
Not After : Feb 24 08:53:30 2025 GMT
Subject: CN=2EB1371950751487A34DA851FDF1B073E45BB326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:09:b0:ee:2c:66:f7:07:cc:25:7b:0a:99:13:
7b:b1:86:38:2a:2b:78:20:50:5a:bd:4e:33:c0:4d:
2e:08:96:46:3e:c1:5f:38:96:4d:2e:6d:a1:b0:40:
07:8c:ad:37:04:5e:70:11:44:89:30:28:2f:f1:67:
3d:36:b8:5b:94:bf:39:0b:c2:dd:73:d8:d9:c7:93:
f6:b8:83:31:fb:7e:72:6e:5e:3c:6c:3d:a4:93:10:
8f:1e:1b:6c:fa:4a:d7:4c:88:2d:ac:6d:97:d0:22:
a6:6b:ae:06:fa:7f:37:53:4c:b4:4b:e9:3e:9c:bf:
37:87:4e:08:87:dc:6b:93:be:24:95:9e:a8:1c:3b:
27:0f:99:9d:fc:ef:6a:5e:18:c2:ba:03:0b:ab:31:
2c:9f:1a:fd:64:52:34:71:7d:c6:5e:88:35:89:9b:
35:37:1e:29:83:b0:a3:da:b6:8f:d8:11:16:cc:0c:
e3:9d:3f:24:ac:68:0d:66:8e:a3:f5:66:b7:a9:fb:
ea:91:73:25:c4:47:32:2e:30:6d:9c:f1:ea:80:00:
42:44:91:c3:6b:b3:63:50:34:96:c2:32:69:f2:06:
3f:c1:05:50:3e:ce:8f:9b:19:b3:65:d3:0d:50:26:
a9:1e:bd:48:c6:29:ff:ee:7c:f8:e0:ed:23:16:8f:
ab:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B1:37:19:50:75:14:87:A3:4D:A8:51:FD:F1:B0:73:E4:5B:B3:26
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133302e3232382e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.228.0/22
Signature Algorithm: sha256WithRSAEncryption
40:c8:e3:c6:ae:6e:cc:31:3c:35:41:67:4e:b9:ae:15:0f:b4:
7b:cd:3e:af:7b:28:9e:1d:7a:a0:f3:c9:89:99:c6:61:0b:87:
0a:42:7d:cd:33:2c:b3:40:b0:16:b1:87:02:92:c9:2f:7c:eb:
d3:a1:4d:40:11:d2:7b:ac:a2:c2:1c:3b:04:11:a8:95:07:b3:
b9:df:f2:71:9b:67:72:ae:af:e4:8f:60:2f:55:25:be:dd:ab:
00:89:81:e9:84:87:32:3a:ef:68:42:2c:4c:45:d5:cd:54:ed:
01:c3:c0:43:5c:de:cd:a4:1a:c3:a1:63:34:78:08:7d:a5:ba:
88:1e:8c:1f:59:69:f5:a9:e5:7d:24:03:be:84:49:84:bb:57:
cf:eb:a3:61:7d:a1:4f:56:f4:07:d0:18:a5:e7:38:f5:84:64:
fb:21:50:51:25:52:83:52:49:78:3b:61:34:2f:4e:b9:ae:94:
36:a0:c3:3e:3c:9c:51:fb:a7:f1:0d:e4:76:4d:bf:49:a4:d0:
76:ae:89:2d:91:a3:97:e3:00:11:57:f0:30:23:9f:63:b9:92:
e9:8c:51:3a:15:d8:0d:1b:ae:a5:fa:a9:04:c5:1c:1c:d4:9a:
a3:c5:bc:ee:01:39:6b:0c:28:db:8b:93:00:1d:84:e0:14:d1:
0b:44:cf:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:47:07 2024 by rpki-client on console-ams.rpki-client.org