Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e36302e302f32322d3234203d3e203437353833.roa
File: 36322e37322e36302e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: Bb1l9y3LqpZkgInBEiObc+d3zgCDtUynkMCic9NMG4g=
Subject key identifier: 78:97:72:BD:9F:CB:0E:4A:98:B8:CE:5D:F8:99:5C:D5:C2:20:F8:53
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4942B4A14AF5EEA049222944FD9BB1AA5FDC9CFD
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e36302e302f32322d3234203d3e203437353833.roa
Signing time: Fri 18 Aug 2023 06:43:31 +0000
ROA not before: Fri 18 Aug 2023 06:38:31 +0000
ROA not after: Fri 16 Aug 2024 06:43:31 +0000
asID: 47583
IP address blocks: 62.72.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 16:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:42:b4:a1:4a:f5:ee:a0:49:22:29:44:fd:9b:b1:aa:5f:dc:9c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 18 06:38:31 2023 GMT
Not After : Aug 16 06:43:31 2024 GMT
Subject: CN=789772BD9FCB0E4A98B8CE5DF8995CD5C220F853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:76:ee:65:c5:ac:30:45:ef:e4:1e:ec:18:78:
30:75:9f:b8:4d:e3:9a:be:f5:06:46:b2:fb:d5:75:
24:ac:e4:0a:33:c5:90:43:a5:1b:ec:0c:e9:45:a9:
47:60:7a:0c:1e:f4:10:75:42:e7:0e:5e:ce:90:7b:
60:f3:7a:7f:2d:a5:e8:04:0b:0b:d1:4c:12:21:d1:
0f:6c:63:87:1c:9f:2a:57:15:2c:bc:6a:9f:1d:a0:
0a:67:5b:9c:eb:01:1f:1f:c4:8f:df:f0:75:e5:a5:
9b:8a:72:d7:14:bd:a2:a6:c5:08:4e:6d:7f:07:3d:
84:18:0a:70:44:7b:2b:ec:88:af:83:c7:4d:c3:fc:
ed:ef:36:3d:43:54:79:d2:41:b3:51:23:68:ec:5d:
4b:8a:b3:8f:53:e7:3b:df:78:2f:7d:2a:c6:62:c3:
e2:14:71:ce:43:f8:b4:a5:4c:19:d2:7c:7a:f4:19:
10:bf:b6:4f:74:dc:90:ff:2b:5d:74:21:49:e4:f9:
53:6d:6e:6f:e7:a6:1a:f2:bd:d1:a4:46:68:23:c9:
ce:ce:b1:6d:79:c5:d6:ce:61:1f:ed:87:a9:fe:48:
ad:7a:53:f5:b7:9d:70:3a:f1:dc:2e:af:b4:70:1b:
4b:60:86:e4:94:1d:fa:a6:a6:ef:7d:27:00:37:e1:
3b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:97:72:BD:9F:CB:0E:4A:98:B8:CE:5D:F8:99:5C:D5:C2:20:F8:53
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e37322e36302e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.60.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:1a:ea:3a:7e:bb:0d:d7:4e:76:f4:13:16:9c:bb:b4:f5:4c:
eb:9c:58:f2:5d:58:e0:69:4c:01:c8:f1:35:f8:1a:0c:aa:74:
1e:dd:5a:c9:c6:54:09:e3:3f:eb:9c:5b:58:4a:83:41:85:f9:
64:ac:f6:2e:06:2e:4c:3c:01:4c:71:87:87:9b:67:a0:c3:24:
e0:14:a3:cf:3b:c5:1f:9c:94:88:48:07:a4:2e:5a:2e:30:5c:
be:fd:eb:6a:d4:31:42:6c:a6:38:c8:45:0d:d1:2e:29:f4:8e:
6b:84:85:24:82:7e:5e:43:1e:b0:7c:ac:21:23:00:2e:61:ed:
82:4a:a2:c2:83:fa:8f:3f:60:4f:4a:98:48:1a:fe:78:d8:75:
6f:69:58:a4:dd:e5:b0:50:b8:e8:eb:ac:97:fd:6c:f8:30:69:
51:64:df:8f:f0:12:ba:7b:ec:cf:64:5d:8d:e8:60:66:74:0a:
2f:65:c1:81:cf:9d:e0:6c:41:88:28:a0:d8:5f:ea:95:27:5c:
43:cb:e9:fe:54:7f:4f:55:df:2b:d9:78:06:16:c0:bb:78:e0:
49:7f:52:00:da:ce:88:44:3d:6a:3b:e0:d5:50:76:34:58:30:
e7:85:e8:b1:94:bc:b1:dd:15:99:63:84:33:cf:4c:6e:f3:3b:
3a:92:32:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 19:28:05 2024 by rpki-client on console-fra.rpki-client.org