Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e3134362e3136382e302f32312d3332203d3e203430303231.roa
File: 36322e3134362e3136382e302f32312d3332203d3e203430303231.roa (raw, json)
Hash identifier: uXQIp/JdPhTCzEPhgWbh3Y4DeCEP6Nuqa8F8h/oaAlA=
Subject key identifier: 76:84:C5:61:EC:81:38:8A:E2:3B:DB:50:DD:59:B0:3A:6F:DA:A6:53
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2A64B3883F8D82B240B21296FF5820518C407988
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e3134362e3136382e302f32312d3332203d3e203430303231.roa
Signing time: Mon 26 Feb 2024 08:53:29 +0000
ROA not before: Mon 26 Feb 2024 08:48:29 +0000
ROA not after: Mon 24 Feb 2025 08:53:29 +0000
asID: 40021
IP address blocks: 62.146.168.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:64:b3:88:3f:8d:82:b2:40:b2:12:96:ff:58:20:51:8c:40:79:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:29 2024 GMT
Not After : Feb 24 08:53:29 2025 GMT
Subject: CN=7684C561EC81388AE23BDB50DD59B03A6FDAA653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:59:87:8f:e7:c9:3f:7a:99:6a:ef:84:00:1f:
ea:d2:d8:65:89:1f:c1:27:62:f0:ac:67:b1:7f:3b:
6e:c4:c3:b7:ff:70:4b:2e:cc:65:b7:0d:55:42:94:
de:d8:18:80:11:ab:93:88:c7:df:75:da:9f:e0:5a:
96:a7:c7:0c:89:24:53:8f:a9:e8:f0:fa:bf:90:e0:
0d:ae:6b:0f:0c:8a:30:66:09:bf:95:2d:64:40:37:
91:68:50:ab:85:2e:6e:b9:b7:b7:4e:af:5b:c6:9c:
68:03:22:2e:92:22:df:fb:fd:b2:0e:19:bb:fa:62:
66:a3:cd:fe:86:03:37:c6:dc:e3:31:b9:b0:35:64:
5f:af:bc:9e:5b:ec:a5:74:6b:0b:7d:4e:40:22:c6:
37:11:14:a3:c8:ef:d0:36:0e:47:8b:1d:5f:e5:50:
ac:c8:a3:f4:30:47:a1:95:74:8f:f4:92:07:91:8b:
d0:f6:1f:6d:a6:1e:29:09:89:1c:21:8a:22:44:c0:
2c:b8:89:84:5b:40:81:59:56:a0:a9:fe:59:d4:ae:
91:75:03:c6:b0:fa:34:ef:41:e3:f6:b0:a6:41:d1:
44:cb:94:18:4a:2f:be:38:07:5a:c7:38:ce:75:a0:
04:9e:56:d6:8b:00:2e:4e:59:0f:cd:cc:12:cb:ae:
a9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:84:C5:61:EC:81:38:8A:E2:3B:DB:50:DD:59:B0:3A:6F:DA:A6:53
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e3134362e3136382e302f32312d3332203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.146.168.0/21
Signature Algorithm: sha256WithRSAEncryption
36:fd:0c:8e:8e:92:7b:85:73:0d:b1:ed:91:58:82:0e:7c:66:
48:ef:19:44:49:f6:64:fc:ba:c7:6b:66:f7:bb:b1:8f:52:ad:
44:c4:36:50:d0:ef:61:45:aa:02:07:3e:ae:54:bb:53:0c:3d:
5b:f7:b8:ec:c8:1b:44:d6:2d:a6:a0:0f:a1:84:f1:f2:ef:1f:
8f:e2:6a:e7:fd:09:04:a7:13:95:f2:52:eb:24:6f:15:02:f2:
6e:f6:fd:76:08:62:bb:3b:c5:db:46:27:35:6e:d7:f8:be:11:
7b:38:4e:2d:ab:be:c2:f7:87:75:c0:f2:6e:1b:43:46:95:da:
27:a0:6d:54:e6:8d:38:d5:8e:77:9f:e0:91:d8:cd:e3:1a:dd:
50:2c:98:5a:d2:f0:b9:2e:82:96:25:16:2b:19:d7:7c:f5:6c:
64:8a:fb:3f:00:ef:9b:2b:95:8b:00:7f:1c:64:37:b2:6b:e1:
bd:b3:02:51:f6:fb:c2:52:fa:fd:7c:34:b1:64:98:07:c4:ba:
9f:6d:16:e0:94:66:8c:43:21:c1:28:98:c5:f1:e1:a9:48:3b:
d6:16:7d:9d:f1:56:e1:a1:7e:eb:3f:01:67:22:7d:d2:18:f4:
4f:28:95:ea:18:80:9b:f3:23:3c:6c:1e:2a:74:85:e9:43:76:
b2:5c:12:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:47:07 2024 by rpki-client on console-ams.rpki-client.org