Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31342e39302e302f32342d3234203d3e20383334.roa
File: 34352e31342e39302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: xYwkO6bAp9MesRCWgMaFdet4rPm0pQSz7JKwbFTPvis=
Subject key identifier: 58:32:57:24:7E:61:77:3D:99:AC:3A:9D:F4:AE:0E:73:A0:D2:FC:2E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7BAFB64B40844D70B8C3F53EFC84C23461F91227
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31342e39302e302f32342d3234203d3e20383334.roa
Signing time: Tue 11 Jul 2023 20:20:41 +0000
ROA not before: Tue 11 Jul 2023 20:15:41 +0000
ROA not after: Tue 09 Jul 2024 20:20:41 +0000
asID: 834
IP address blocks: 45.14.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:af:b6:4b:40:84:4d:70:b8:c3:f5:3e:fc:84:c2:34:61:f9:12:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 11 20:15:41 2023 GMT
Not After : Jul 9 20:20:41 2024 GMT
Subject: CN=583257247E61773D99AC3A9DF4AE0E73A0D2FC2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9e:56:e4:b5:67:9b:50:8a:bb:24:8a:4c:96:
44:2c:f9:35:46:cc:ef:4d:b7:0c:de:ba:59:cd:4e:
5b:da:de:52:e2:66:21:79:83:19:78:44:cd:fc:d8:
0d:5e:b7:d8:03:6c:3d:f3:45:3f:4a:35:f5:b7:e4:
6f:32:ca:0c:8f:2f:ee:77:8d:e6:93:c6:de:88:5b:
47:78:ce:e6:3d:90:e4:4f:93:72:26:bd:36:70:39:
a0:5b:71:e2:09:96:26:fd:4c:20:80:2f:4a:e0:e1:
1a:55:b0:1a:2c:3d:36:f8:6c:4e:38:c4:b4:b2:5a:
23:b9:34:c6:6f:72:bd:51:6c:68:92:8f:e8:f4:30:
25:a0:d2:4a:7f:0c:36:fd:1e:6f:70:60:2c:8b:fd:
b3:e9:66:01:69:83:8f:82:c9:75:f1:33:b7:12:41:
76:ba:09:ee:51:92:9a:32:74:4c:23:5a:95:65:63:
af:04:28:27:a4:9f:01:c2:15:22:f7:28:61:a4:e4:
2c:e0:63:e5:ea:a8:84:22:2e:8f:c3:52:64:2f:5c:
99:9e:4e:ad:06:2c:6f:e4:43:3b:48:9f:2c:26:53:
c4:2d:27:bb:d4:e5:da:f5:75:8c:64:5f:1d:c8:30:
79:80:86:80:a0:eb:a6:85:16:0d:0c:14:26:39:08:
c3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:32:57:24:7E:61:77:3D:99:AC:3A:9D:F4:AE:0E:73:A0:D2:FC:2E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e31342e39302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.90.0/24
Signature Algorithm: sha256WithRSAEncryption
34:02:a8:71:78:c2:fa:b3:d0:9a:eb:27:a7:3a:4b:1c:ec:8a:
be:e4:08:68:f6:e4:e4:af:7f:d0:65:ba:1d:55:81:72:ae:44:
5e:00:10:ea:39:1a:08:e7:aa:e1:d6:ad:6e:88:fe:5e:1c:e2:
64:3d:47:81:28:a3:6d:44:63:b5:e6:94:80:d2:f1:51:c7:82:
a3:d3:81:8b:ee:01:92:ca:3d:d6:d4:80:78:bb:04:fa:9c:e4:
bc:64:1d:8c:86:c8:02:b2:dd:ad:57:fb:78:c6:43:95:bc:2c:
c9:db:5d:3c:da:3e:8c:3d:41:14:c4:e7:aa:e4:23:0f:f4:06:
f7:5e:76:2f:1b:5b:0d:8c:b3:27:a7:4f:45:32:0e:d8:4f:6a:
3e:b0:84:34:a7:8e:bf:b1:4e:e1:e9:7b:59:dc:e1:bf:a2:8e:
a1:2b:3e:7a:70:08:d9:f0:d4:34:c1:e0:20:5a:9d:c6:c4:94:
4c:11:0a:0c:b5:a1:f8:dd:90:20:e9:a5:e7:90:cd:1e:41:bd:
73:0a:90:e3:86:62:87:40:f7:53:e3:07:9f:69:74:44:4a:c9:
e4:24:ee:26:68:ed:86:75:82:c4:0a:a6:7e:10:74:84:3c:9c:
cc:ec:64:ab:95:5d:49:c2:8b:62:5b:32:f9:41:10:c9:f0:c6:
68:68:aa:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 05:15:40 2024 by rpki-client on console-ams.rpki-client.org