Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133362e31362e302f32342d3234203d3e20383334.roa
File: 34352e3133362e31362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: JsLOlVrOx+0pcQvfYPgsKzOJiVkd30L38qpwWTPwneM=
Subject key identifier: E0:D0:BC:84:E9:58:37:E9:92:E7:79:D8:AE:9E:5D:36:FD:95:6A:A0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5EE241E845D2B973E08932BC18FE3E114374D990
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133362e31362e302f32342d3234203d3e20383334.roa
Signing time: Fri 16 Feb 2024 17:41:03 +0000
ROA not before: Fri 16 Feb 2024 17:36:03 +0000
ROA not after: Fri 14 Feb 2025 17:41:03 +0000
asID: 834
IP address blocks: 45.136.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:e2:41:e8:45:d2:b9:73:e0:89:32:bc:18:fe:3e:11:43:74:d9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 16 17:36:03 2024 GMT
Not After : Feb 14 17:41:03 2025 GMT
Subject: CN=E0D0BC84E95837E992E779D8AE9E5D36FD956AA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:44:b4:8f:5c:90:c4:f4:e4:2f:21:ad:2f:f5:
6a:c1:b7:c3:69:a0:36:23:c4:d2:96:3c:ff:41:fd:
51:29:54:79:2c:15:b2:a0:31:a7:ea:af:3a:cb:9b:
2b:1c:80:77:af:3d:c0:4f:2f:d8:1f:d5:2e:c8:8e:
ec:68:92:50:03:ed:48:f0:82:4f:6d:4a:c6:8e:dd:
4e:5d:fd:28:08:98:1d:b4:0a:e2:9c:a9:d1:76:6e:
e2:d0:ec:2f:d9:df:bc:84:4b:7b:b3:ce:42:87:2b:
2c:f3:ca:4c:8c:78:b7:2c:aa:b3:5f:a5:15:f8:db:
b2:f1:a6:69:d8:bd:9d:b9:83:ef:f7:0f:17:94:2d:
de:f8:26:cf:06:f1:7d:d5:11:ad:80:f3:c1:d0:f4:
ce:74:f7:70:92:9e:35:49:ac:80:b9:2b:5e:b7:fa:
bb:fc:28:69:91:92:fb:3a:0d:a3:30:51:82:96:61:
51:ab:67:1c:c7:e7:cd:92:3a:c9:ff:ef:d9:4d:bf:
fd:97:0e:49:24:57:44:55:6a:01:cc:69:cd:ff:fb:
49:54:b9:4a:bd:c8:79:63:68:69:a9:62:64:2e:19:
6f:72:40:c5:f6:8c:74:ff:c1:ac:ee:2c:0a:64:92:
e9:f3:73:25:cb:58:4e:e3:17:1f:8a:94:fa:f9:fc:
7f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D0:BC:84:E9:58:37:E9:92:E7:79:D8:AE:9E:5D:36:FD:95:6A:A0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133362e31362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.16.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:b7:34:ea:25:98:ae:81:57:a5:40:7b:92:98:bb:cc:8e:d7:
28:b4:02:5e:be:a3:a7:13:df:18:2b:69:28:ed:40:a7:19:06:
df:42:d8:ec:1b:9d:cb:c9:66:27:26:01:fd:08:4f:11:2b:30:
2f:54:14:23:87:b2:d9:40:16:e3:cb:f4:b0:24:e2:ac:cf:99:
d9:42:5f:1c:88:ec:cb:71:1b:4a:a4:23:be:52:d9:df:bd:d0:
19:b1:38:1d:00:74:89:4d:90:04:92:3b:d9:20:0e:19:a1:a2:
20:45:99:53:57:23:a8:ca:d3:8a:fe:79:ef:44:b0:fe:d4:ab:
83:26:8f:26:bf:58:31:ba:12:3a:f8:f8:b5:4f:40:ef:ed:33:
db:9c:61:ac:22:fb:e7:4a:c2:9f:79:d2:23:0e:e1:7e:97:ca:
70:97:c2:e9:3a:72:15:4b:1a:c6:d4:2d:4d:c2:5e:00:02:2d:
e5:66:69:b9:3c:e8:cc:3e:90:01:00:2e:bd:45:ad:20:34:e1:
eb:c0:b3:5b:43:48:fe:db:13:5d:04:a8:8e:a7:6f:49:71:60:
f2:50:7c:f4:c3:32:d8:ca:6d:51:45:98:3b:90:80:4b:d7:11:
8c:b2:2e:08:47:b9:77:e8:37:06:1a:58:27:7a:04:22:34:7b:
f2:82:43:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 05:15:40 2024 by rpki-client on console-ams.rpki-client.org