Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38382e3232322e302f32342d3234203d3e20313431303339.roa
File: 34352e38382e3232322e302f32342d3234203d3e20313431303339.roa (raw, json)
Hash identifier: xdUeWsPp6KX0d0tO9tCTS0jFhMU9gRoX+HglJtqnwEQ=
Subject key identifier: 63:B9:2A:CC:4E:50:5C:47:56:7F:36:7C:07:66:B3:82:0F:C0:38:4C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3A58026C03075BE14DA544438DDAA8A85086E608
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38382e3232322e302f32342d3234203d3e20313431303339.roa
Signing time: Wed 27 Sep 2023 13:40:11 +0000
ROA not before: Wed 27 Sep 2023 13:35:11 +0000
ROA not after: Wed 25 Sep 2024 13:40:11 +0000
asID: 141039
IP address blocks: 45.88.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 16:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:58:02:6c:03:07:5b:e1:4d:a5:44:43:8d:da:a8:a8:50:86:e6:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 27 13:35:11 2023 GMT
Not After : Sep 25 13:40:11 2024 GMT
Subject: CN=63B92ACC4E505C47567F367C0766B3820FC0384C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:78:cb:8f:78:96:56:0d:a9:83:8e:71:cb:76:
2c:ae:5a:1b:53:b4:f2:2c:4c:8d:07:aa:b1:ce:54:
fd:e4:5d:a8:5e:e9:2d:13:eb:ab:3a:d0:1c:d8:a5:
39:92:cb:fc:d8:36:c3:de:b5:b7:1f:c1:a5:ce:58:
bf:61:b4:e8:98:96:91:d7:eb:ba:73:43:aa:d7:2e:
57:c7:b4:94:60:7c:07:38:2f:cf:ec:bd:42:c9:2c:
da:a2:5d:43:58:35:26:8b:2d:98:09:1a:0b:ce:6f:
1c:a2:e2:80:e0:cd:4d:e6:5b:b6:33:4f:9e:1f:54:
07:4b:3a:b6:db:dd:1c:80:fc:d8:70:27:83:0c:fc:
46:1f:90:6f:92:21:f2:59:43:60:40:4e:a9:d6:f5:
7b:52:60:d5:70:aa:4c:54:51:87:f1:d8:bd:62:fb:
d5:8d:9c:3d:a5:83:c2:ea:a1:c7:6a:07:38:c7:e8:
83:f1:56:f3:91:4d:1f:70:77:85:57:4f:2c:dc:5c:
14:9c:57:32:fb:b6:d7:09:51:04:0a:a9:c2:a0:25:
8b:49:03:c1:24:9d:1a:4a:ff:15:a3:83:b7:e9:06:
60:6e:23:9f:ed:4c:54:ae:a4:b4:75:66:47:d6:b0:
d1:5d:f8:a9:44:65:dd:b5:8d:4e:65:e1:5e:0d:ee:
ad:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B9:2A:CC:4E:50:5C:47:56:7F:36:7C:07:66:B3:82:0F:C0:38:4C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38382e3232322e302f32342d3234203d3e20313431303339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.222.0/24
Signature Algorithm: sha256WithRSAEncryption
46:14:6d:99:e9:4f:b6:44:c8:3b:31:fa:a7:b4:73:05:7f:c7:
a2:0c:e3:c9:2c:e9:de:70:c2:79:2c:b4:56:bf:00:2e:af:b9:
ac:31:11:67:cc:c4:fe:d3:4a:62:e0:1b:d7:ce:59:c6:65:57:
9c:df:ac:60:56:e8:25:71:f8:84:b7:80:13:bb:2f:5e:6d:34:
15:d6:bb:f8:26:1c:7b:fe:18:ec:de:2d:93:b5:ff:9d:55:c9:
c0:ca:3f:55:04:99:24:81:95:7f:b9:7a:fe:ce:a0:c0:85:04:
25:9d:43:23:f3:1e:df:98:18:4c:52:38:ab:a4:6a:ec:62:52:
5c:df:ad:f6:d8:eb:2d:c8:d5:3b:4d:63:b7:a0:61:3f:de:db:
74:a4:b0:77:e0:57:fc:18:82:51:81:b9:84:2d:46:a6:f2:30:
b1:4d:4a:7b:35:c7:e1:eb:3d:d2:ea:f4:a1:16:57:77:da:32:
a1:15:89:ff:dd:b3:f3:68:98:bb:d0:04:63:16:73:79:7b:80:
e4:3a:50:8c:6d:df:08:ae:46:25:1c:6e:de:56:59:59:69:97:
c3:66:d6:b0:75:3a:5e:e5:a2:35:2b:05:f8:20:01:d3:29:29:
e4:2b:f9:6f:1b:65:37:e5:4e:f2:b2:91:80:68:a2:56:df:d5:
d4:fd:78:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 19:28:05 2024 by rpki-client on console-fra.rpki-client.org