Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e31322e302f32322d3232203d3e203437353833.roa
File: 36322e37322e31322e302f32322d3232203d3e203437353833.roa (raw, json)
Hash identifier: MFn6eQ44fO4Jt6wBZmrBgGmiEPqSAY5yq7/lnw+r8W0=
Subject key identifier: 26:9A:66:8B:3D:75:1F:5A:C7:4A:0C:23:18:11:4E:C0:90:19:8F:34
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 78309E81B9FE0FEE48E509EDEBA12C256D630CCD
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e31322e302f32322d3232203d3e203437353833.roa
Signing time: Wed 12 Jul 2023 18:16:08 +0000
ROA not before: Wed 12 Jul 2023 18:11:08 +0000
ROA not after: Wed 10 Jul 2024 18:16:08 +0000
asID: 47583
IP address blocks: 62.72.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 16:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:30:9e:81:b9:fe:0f:ee:48:e5:09:ed:eb:a1:2c:25:6d:63:0c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 12 18:11:08 2023 GMT
Not After : Jul 10 18:16:08 2024 GMT
Subject: CN=269A668B3D751F5AC74A0C2318114EC090198F34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:30:ee:57:bb:45:fc:df:a6:b7:1d:31:7d:5e:
69:2b:1a:d7:82:cd:8d:52:e8:7f:18:97:3c:70:ef:
86:bb:f2:1b:ad:8a:5e:90:a9:e9:b0:c2:64:b3:70:
4f:a8:73:7c:b8:41:05:ce:71:13:5f:78:b9:d5:bb:
07:1c:03:23:42:d6:94:d1:24:d8:c0:58:b9:33:0e:
d1:fa:d7:8c:85:b5:3c:49:91:b7:ec:25:f9:53:72:
f0:7f:3c:7d:d7:28:c7:31:88:84:5c:1d:90:b6:58:
f2:a2:4d:01:d7:d6:42:ed:db:bd:71:39:ec:70:f9:
d4:f2:f7:e2:8e:65:dd:b9:69:9a:c9:87:dd:e3:0f:
bc:4d:35:14:2e:44:41:15:04:f9:b2:e8:a0:f5:c7:
89:a0:f2:1a:02:ed:46:43:4b:6f:83:f3:58:d1:c0:
2c:2d:fe:b7:da:8a:98:c0:2d:7f:d2:02:cb:41:85:
f8:1a:0c:30:32:dc:b8:f8:1e:9f:82:ae:30:26:75:
b6:7b:37:46:45:46:3c:5e:7c:0d:59:16:8d:e5:db:
e1:5a:ce:65:30:e2:d8:50:1f:4c:57:b4:26:db:ca:
16:25:ac:ee:4d:c1:ce:05:32:d6:62:13:97:6a:6e:
2c:f5:3b:29:0e:12:c5:65:21:bd:a8:24:73:ef:bd:
29:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9A:66:8B:3D:75:1F:5A:C7:4A:0C:23:18:11:4E:C0:90:19:8F:34
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e31322e302f32322d3232203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.12.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:c7:2d:7e:8a:0a:eb:c6:fc:c1:08:79:fc:0c:3d:b6:5b:d9:
7b:84:13:7b:56:88:f1:c5:2d:21:d1:65:69:cf:56:62:8a:5a:
59:54:b5:a5:42:71:6f:bc:98:83:3a:d1:8f:c7:41:ea:bb:a8:
6e:cd:95:26:39:15:a0:24:8f:75:8e:dc:61:f1:8f:93:96:b9:
e5:23:d8:15:21:86:3f:71:74:0b:7f:22:07:e1:5b:1b:e2:e3:
6c:dc:ae:1f:c1:d2:08:e9:51:1c:27:75:5f:57:62:30:a9:ca:
9d:56:4c:a0:c5:90:79:8e:56:a7:4b:8d:6c:81:de:d8:2a:f4:
8e:fd:f4:a7:02:0a:2f:6c:8c:a8:ee:7c:5d:f3:31:33:e4:d5:
9d:a3:7e:fd:c3:63:4b:c8:f8:8d:e4:81:b8:67:11:82:e6:41:
00:36:91:31:78:b5:a3:81:4e:8b:f7:5d:5e:fa:72:d5:6a:34:
a2:f9:8d:2b:0e:51:60:fa:f6:78:21:e4:25:30:8e:7f:95:37:
55:a9:04:5e:0b:13:5b:cd:2c:7f:71:ea:10:71:1e:2f:cd:af:
9b:09:b3:f4:92:5d:76:92:cf:db:9a:b5:c3:91:62:d8:0b:a7:
94:c6:17:6b:7f:25:ce:f5:1b:72:65:d9:a4:34:f6:60:9a:3c:
9d:fd:8e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 20:18:10 2024 by rpki-client on console-ams.rpki-client.org