Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/352e3130342e38302e302f32322d3332203d3e20313431393935.roa
File: 352e3130342e38302e302f32322d3332203d3e20313431393935.roa (raw, json)
Hash identifier: Ou7Kr5Z5gLT6cy4BQDTElojACebjCDMbjPl796JN118=
Subject key identifier: 20:76:72:5A:D9:2E:81:A1:70:4B:66:EB:2F:33:A8:FD:D4:9E:D6:16
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6DE3EDF9C68FF083D555588C66CC4E9255568227
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/352e3130342e38302e302f32322d3332203d3e20313431393935.roa
Signing time: Fri 01 Mar 2024 08:55:29 +0000
ROA not before: Fri 01 Mar 2024 08:50:29 +0000
ROA not after: Fri 28 Feb 2025 08:55:29 +0000
asID: 141995
IP address blocks: 5.104.80.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 16:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:e3:ed:f9:c6:8f:f0:83:d5:55:58:8c:66:cc:4e:92:55:56:82:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 1 08:50:29 2024 GMT
Not After : Feb 28 08:55:29 2025 GMT
Subject: CN=2076725AD92E81A1704B66EB2F33A8FDD49ED616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fe:98:2e:ce:ca:d3:bb:88:b9:80:a5:39:ec:
e5:e9:79:70:8b:16:04:3a:5a:d1:ba:16:8c:3c:88:
96:5e:9a:5d:62:53:b5:a0:47:fc:bd:fe:a7:2a:cf:
0f:83:93:6b:85:5b:71:38:cf:24:0b:7f:0e:77:ae:
60:04:23:8e:1d:3a:57:83:8f:75:ba:34:83:3a:5e:
e6:8a:12:ea:83:d1:13:41:6e:9a:74:e7:9c:8f:87:
40:6d:f0:29:76:4e:ed:a0:4c:79:83:0b:d7:7f:14:
7f:e7:e4:7a:9a:f2:a1:c0:24:9d:91:df:ac:40:3d:
24:7c:4b:37:ae:ad:19:36:9d:d1:82:57:e6:1a:df:
3e:18:cf:0c:13:e4:b2:66:3c:d3:48:b0:32:e5:2e:
2f:fd:89:e9:54:4f:62:27:6b:d9:53:94:f2:02:a6:
cf:60:97:ee:5e:0b:79:4a:d1:de:40:c7:62:35:57:
03:5b:8f:41:eb:9b:13:6c:6d:c4:da:1a:36:cb:d4:
d6:df:8a:8b:c0:f6:30:24:55:9e:de:06:8c:b1:a9:
70:d8:9a:a5:ef:21:01:ea:6f:31:e3:5e:7d:d6:40:
6d:15:d0:7f:b7:a5:01:06:82:b0:68:b4:fb:cf:bf:
3e:a6:a3:87:ab:d4:45:d7:35:f7:4a:f4:6f:9d:58:
85:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:76:72:5A:D9:2E:81:A1:70:4B:66:EB:2F:33:A8:FD:D4:9E:D6:16
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/352e3130342e38302e302f32322d3332203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.80.0/22
Signature Algorithm: sha256WithRSAEncryption
01:b7:c0:45:68:98:0e:ce:e2:27:7c:74:c3:af:e0:fa:7c:3e:
b2:20:ee:d6:a9:10:e6:fa:d8:ec:6d:1f:b2:fb:54:4b:0b:89:
ed:c9:ca:aa:2f:a2:70:ca:a6:91:9c:e8:2c:c2:a5:60:74:a3:
79:24:c9:9c:5f:98:9c:18:ee:6a:f2:d7:3d:29:af:77:34:81:
b5:8b:1c:76:1a:00:ad:36:54:ea:28:2e:bb:9c:a3:ee:86:c9:
eb:18:cb:2c:b7:57:dc:a0:e0:76:da:81:6a:15:33:5e:2e:5b:
ba:4a:3b:ac:f7:48:ae:60:e7:f3:2a:7b:6d:6c:15:d4:ba:7b:
f6:c1:88:26:0e:30:b0:81:53:d0:75:97:ae:0a:e0:ec:03:a7:
e3:16:f7:10:dd:81:4f:a3:90:3f:25:04:e7:ac:9a:a6:96:45:
9c:9e:e6:c6:ca:d7:a2:24:b5:b3:7d:f0:7b:0b:d5:19:f6:d4:
f2:d1:4b:23:72:23:85:1c:66:10:59:a9:7f:34:19:ef:6c:97:
2c:70:72:7e:96:a9:6b:19:09:76:0f:df:e2:3b:f1:64:1a:fd:
a2:99:39:10:c7:d7:a2:1e:fb:69:1a:8d:99:63:5b:61:53:00:
55:3f:56:b2:c8:09:4a:b9:39:d1:90:26:1d:65:cf:c0:16:dd:
1d:b2:4e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 19:28:05 2024 by rpki-client on console-fra.rpki-client.org