Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39342e35382e302f32342d3332203d3e203531313637.roa
File: 34352e39342e35382e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: kByefe4udhEPZdnmpiLz/7ip1SyWnI4qaEgDoCL8Lak=
Subject key identifier: 66:69:4D:84:24:1D:96:68:EF:DC:ED:6B:0F:E6:38:7F:7E:B3:04:95
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6EA72697665968ECCD4D82EFED71E73DC0A27771
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39342e35382e302f32342d3332203d3e203531313637.roa
Signing time: Thu 31 Aug 2023 14:08:13 +0000
ROA not before: Thu 31 Aug 2023 14:03:13 +0000
ROA not after: Thu 29 Aug 2024 14:08:13 +0000
asID: 51167
IP address blocks: 45.94.58.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 16:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:a7:26:97:66:59:68:ec:cd:4d:82:ef:ed:71:e7:3d:c0:a2:77:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 31 14:03:13 2023 GMT
Not After : Aug 29 14:08:13 2024 GMT
Subject: CN=66694D84241D9668EFDCED6B0FE6387F7EB30495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c3:6c:f6:28:67:80:6c:04:8c:a9:6e:e3:6d:
b3:0c:b2:91:d5:07:46:7a:22:c6:e7:0d:49:0d:19:
66:80:a8:39:8f:16:90:a9:dc:49:5e:5a:bf:dc:ef:
9e:90:1c:ac:32:fc:6b:f0:e9:c4:9d:0b:b2:0e:a2:
65:ad:73:c5:d5:7c:9d:8a:95:7e:b8:c3:11:1f:a1:
94:be:ea:17:b4:32:f9:cb:53:08:91:ed:15:ce:1f:
2d:2a:7f:f8:15:1b:21:bb:27:23:33:eb:37:fb:06:
f0:86:91:b6:f2:be:06:b9:b8:4c:47:5d:22:e4:d9:
3b:5c:72:db:3d:62:b6:62:59:68:93:91:34:ba:0c:
13:8d:d8:63:fc:22:01:04:eb:6d:28:6e:e4:48:ed:
55:27:b7:04:3a:9b:fa:ca:14:b8:d4:a9:e1:fd:c1:
86:9e:f4:91:65:6b:c0:39:9c:83:52:ad:4a:a6:2d:
5c:9f:7a:2f:0d:df:b6:4e:2e:6e:80:cb:ae:9b:c7:
de:40:07:c9:fe:aa:87:23:00:6e:ff:76:84:99:1f:
2c:2a:49:eb:4d:0a:73:a6:33:67:af:0f:75:cd:1b:
d1:e4:f6:41:bf:be:84:82:e6:5f:73:33:f0:d8:0b:
f6:53:9b:b1:ba:38:05:9f:bc:96:4a:1e:58:be:a3:
7f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:69:4D:84:24:1D:96:68:EF:DC:ED:6B:0F:E6:38:7F:7E:B3:04:95
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39342e35382e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.58.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:3a:b5:b8:18:70:0c:59:78:06:4c:ff:df:6c:cf:47:14:58:
92:e2:01:e3:b1:59:c2:69:18:29:0b:46:8d:22:6c:90:f3:95:
e4:d7:f7:53:77:d4:2f:53:15:98:1f:ec:55:08:ef:2b:81:98:
26:5b:47:57:7a:6f:a3:9f:50:1a:96:fb:91:a3:7e:a8:c4:8b:
b5:b0:1d:3f:89:e6:60:b9:45:94:cf:2c:33:f4:20:34:2d:2a:
e8:c8:5e:54:63:b6:01:7b:d0:8b:fb:c4:19:3d:6e:12:00:14:
31:82:ef:38:c8:cf:ab:a1:bb:04:fb:65:50:d1:7f:53:ac:ef:
eb:4f:1f:78:62:da:ab:7c:f5:45:d8:5d:aa:f2:dc:ea:b8:d7:
25:5d:30:a2:9d:1b:c5:22:30:6d:f7:70:83:c4:bf:d5:88:dc:
51:f1:a6:af:8c:ae:e7:39:ef:be:b5:1d:6f:c6:fb:fb:d7:a8:
95:78:e6:9a:6d:3e:86:58:7c:28:82:cb:6b:3f:3d:ac:ec:0e:
61:00:41:49:ca:f4:e0:5a:7f:1a:56:3f:88:46:58:40:95:d3:
21:54:0b:03:09:17:89:1f:e8:16:24:3b:f2:a7:68:f3:4a:de:
fd:80:1c:71:03:27:ef:18:d8:79:1e:f4:6e:c5:c2:a9:fc:3a:
80:99:fe:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 19:28:05 2024 by rpki-client on console-fra.rpki-client.org