Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38352e3234392e302f32342d3332203d3e203531313637.roa
File: 34352e38352e3234392e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: aA4NmtKegRlK0mHn+WkUSRzBttN+bgM8255c56Hu+2E=
Subject key identifier: 04:3B:6F:43:E3:4C:2A:1F:D4:6D:22:B1:BA:A4:65:3C:69:3E:3A:97
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3210A6C1335B692785318800DCAE6DE32FFFD314
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38352e3234392e302f32342d3332203d3e203531313637.roa
Signing time: Wed 27 Sep 2023 13:40:09 +0000
ROA not before: Wed 27 Sep 2023 13:35:09 +0000
ROA not after: Wed 25 Sep 2024 13:40:09 +0000
asID: 51167
IP address blocks: 45.85.249.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 16:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:10:a6:c1:33:5b:69:27:85:31:88:00:dc:ae:6d:e3:2f:ff:d3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 27 13:35:09 2023 GMT
Not After : Sep 25 13:40:09 2024 GMT
Subject: CN=043B6F43E34C2A1FD46D22B1BAA4653C693E3A97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f6:87:71:3a:5e:72:1c:72:9e:7c:be:c2:0d:
bf:98:c1:60:62:8a:5b:79:9b:97:76:c8:52:bb:ee:
25:83:b8:7f:73:fe:28:eb:0b:2b:47:64:8c:bc:3b:
11:12:16:c1:60:ed:f2:bf:89:b3:50:a2:f0:39:84:
a6:dd:1a:9d:73:ec:e6:22:2b:2e:44:ec:40:7a:9d:
04:56:1a:ed:fb:d5:a6:8a:09:f0:e8:44:0a:78:fd:
8c:0e:62:17:2d:fe:08:a1:31:9c:b1:e0:7a:e9:73:
16:a2:98:0f:eb:73:e9:b0:46:b9:43:5a:07:e9:7a:
a4:d8:cb:e4:bc:0f:d2:20:44:5a:23:61:3b:ce:78:
97:07:c8:52:5e:78:64:33:fe:06:f3:29:fb:e5:04:
d2:20:a4:b7:fd:88:98:48:9d:30:d3:a7:44:4b:8d:
6c:37:9c:75:ca:a5:a3:88:4c:ef:dc:ac:87:6a:df:
80:d3:6b:a2:c1:9d:fc:6c:2f:8f:79:99:e7:7a:39:
45:37:e7:35:9c:1c:6e:08:f5:25:2d:19:0b:20:7e:
bc:ab:f9:37:f0:60:bc:12:11:46:db:00:7f:57:08:
3a:d0:7b:ee:d7:01:c4:8d:d3:18:12:97:09:40:f0:
e2:37:a7:2d:49:ea:19:4f:2e:c0:5d:0c:20:55:ed:
b4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3B:6F:43:E3:4C:2A:1F:D4:6D:22:B1:BA:A4:65:3C:69:3E:3A:97
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38352e3234392e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.249.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:c6:b6:da:87:87:68:a1:30:de:c8:e7:27:c1:91:92:87:e1:
8a:2b:77:d7:4f:24:42:d3:5e:e3:7f:3c:12:6b:71:a2:35:6b:
b4:be:1e:dc:0c:d9:99:80:67:ff:83:da:ea:d0:c8:91:5c:0e:
6c:8f:6d:f9:db:a3:1c:08:d1:fd:b9:92:38:33:bf:07:1c:0a:
f4:17:44:13:1a:f8:aa:45:05:cb:6e:43:5e:72:9f:46:e0:2e:
c3:aa:dd:79:25:d9:6a:0f:76:8f:1d:d2:cf:15:0d:ac:01:8b:
39:93:72:ee:42:53:3f:7c:17:7f:55:83:e8:cf:46:b6:b5:51:
c6:45:d4:c6:19:03:8d:26:7a:fb:d3:e7:56:75:0b:c1:6d:d1:
5a:07:b3:d3:8a:8e:41:bd:86:16:bc:fd:d6:86:12:99:9e:67:
d0:48:72:04:7f:ff:c2:75:e9:75:f9:a4:53:be:19:6a:00:ef:
be:1c:23:97:1b:25:21:74:e5:ed:e1:7b:21:fa:b4:6e:e5:97:
2e:98:0d:ad:36:a5:e9:be:87:c8:35:fe:40:bb:f9:46:73:1a:
75:5c:35:85:c3:0f:33:43:29:9c:64:0d:04:89:8f:20:66:c3:
df:e3:48:08:65:91:5b:99:bc:12:de:d5:02:b6:81:ca:71:6b:
df:3a:5d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 19:28:05 2024 by rpki-client on console-fra.rpki-client.org