Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e302e302f32312d3231203d3e203437353833.roa
File: 36322e37322e302e302f32312d3231203d3e203437353833.roa (raw, json)
Hash identifier: JGczTdnD0jtt32lFuziXp2EkJbOns5R8MFHgZ1Ce+QY=
Subject key identifier: F9:0A:C1:70:41:46:0D:4A:A6:01:21:10:E9:D1:86:E6:86:13:94:95
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 62137C5890DD4D775195B8D3CBF069E10A93BEE9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e302e302f32312d3231203d3e203437353833.roa
Signing time: Wed 12 Jul 2023 18:15:12 +0000
ROA not before: Wed 12 Jul 2023 18:10:12 +0000
ROA not after: Wed 10 Jul 2024 18:15:12 +0000
asID: 47583
IP address blocks: 62.72.0.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:13:7c:58:90:dd:4d:77:51:95:b8:d3:cb:f0:69:e1:0a:93:be:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 12 18:10:12 2023 GMT
Not After : Jul 10 18:15:12 2024 GMT
Subject: CN=F90AC17041460D4AA6012110E9D186E686139495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2d:4a:e1:29:4e:a8:f1:49:3b:94:89:d8:d1:
ef:70:b3:3e:93:3f:17:f6:e9:ac:41:9e:63:e5:3c:
d2:f4:3f:46:f2:46:4c:60:24:55:61:8c:91:75:da:
87:37:2e:4a:d3:ad:8e:61:b3:9c:f8:fc:5b:2a:d2:
9a:da:54:35:d0:81:45:f7:56:b9:f7:8f:64:ff:56:
d3:bd:91:f1:1a:14:9f:c5:86:3b:1a:51:c9:64:b3:
22:50:7d:4a:c9:b2:ee:b7:46:3e:8b:8a:bb:bf:41:
ed:6f:dd:0e:8c:f1:40:08:ce:e6:e5:f3:5a:c2:5a:
77:91:c6:77:12:19:9c:53:7d:0e:49:cc:d4:b5:11:
25:72:3b:11:b9:04:4e:1d:fe:a9:6b:e1:f3:bd:b8:
93:7a:bc:59:55:bb:61:f8:71:3f:6b:94:8c:40:5e:
3e:2d:a4:1f:90:71:3e:e9:7f:95:71:99:de:cb:e4:
be:95:52:c1:19:f7:1d:ba:c5:41:5c:6d:23:32:93:
25:8d:8c:af:54:5e:67:8c:df:83:cb:ec:c9:33:ce:
95:43:c9:e7:36:40:cb:69:55:4e:f0:87:84:1d:56:
3a:93:88:48:cb:85:d7:5a:a4:a0:8c:c5:61:68:03:
cf:09:f3:d8:1a:0e:9a:a0:c8:8d:42:2d:0b:0a:4c:
a7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0A:C1:70:41:46:0D:4A:A6:01:21:10:E9:D1:86:E6:86:13:94:95
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e302e302f32312d3231203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.0.0/21
Signature Algorithm: sha256WithRSAEncryption
76:87:ef:bd:0d:b5:75:f4:0c:29:4e:ff:78:63:54:17:83:64:
f3:c1:b2:6a:12:e0:f3:1b:7a:08:37:be:16:0f:0d:b4:2e:15:
cd:8d:42:11:32:f6:a7:0d:2f:0e:e0:af:a7:6d:86:b0:3c:e4:
e4:0d:5c:d0:e8:10:0b:1f:ee:34:d7:6c:01:4b:cd:8a:14:5b:
b2:aa:08:de:7f:b1:7f:bd:8b:05:5b:e3:3d:9a:f4:dc:54:b3:
7d:a9:a9:ce:ab:fc:53:19:21:79:d6:98:df:b4:c7:d0:94:8d:
37:9c:a7:53:14:79:f5:ba:b9:b1:4d:a5:3d:5b:1c:48:ca:7f:
66:81:dd:fe:91:2a:63:42:a4:90:ff:33:c0:b2:2e:3f:ee:34:
2e:93:de:ab:96:88:44:cf:6e:ae:8c:db:38:c9:35:62:82:c6:
0c:85:45:60:97:9d:f1:2b:f8:dd:0a:df:64:b7:7c:53:b0:9c:
e5:d0:86:e9:21:4e:81:98:7a:06:0f:82:d7:bb:a3:b2:05:9f:
2d:a3:8d:f9:78:02:7c:00:34:3b:e5:5c:4d:e7:94:4a:05:0e:
b8:02:f8:3d:e6:e1:a9:76:b7:c4:a3:b0:08:01:0e:c9:b6:e5:
cd:4a:55:ce:ef:13:2b:2c:80:2d:15:cf:46:1b:9d:a0:b2:6a:
67:e8:b4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 14:35:47 2024 by rpki-client on console-fra.rpki-client.org