Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3137362e302f32302d3230203d3e20383334.roa
File: 36322e38342e3137362e302f32302d3230203d3e20383334.roa (raw, json)
Hash identifier: wi6hcp8ln3Q9Pbh0y+TjK7+hvoXlEA2RcNEe0Va94Yo=
Subject key identifier: 7F:FD:71:0E:7E:C6:C8:47:D5:AD:8E:39:FA:E9:87:AC:3F:D4:02:36
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 39C6B5E6B0C4650AB4143736905F34BA1B3765B2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3137362e302f32302d3230203d3e20383334.roa
Signing time: Fri 09 Feb 2024 20:53:24 +0000
ROA not before: Fri 09 Feb 2024 20:48:24 +0000
ROA not after: Fri 07 Feb 2025 20:53:24 +0000
asID: 834
IP address blocks: 62.84.176.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:c6:b5:e6:b0:c4:65:0a:b4:14:37:36:90:5f:34:ba:1b:37:65:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 9 20:48:24 2024 GMT
Not After : Feb 7 20:53:24 2025 GMT
Subject: CN=7FFD710E7EC6C847D5AD8E39FAE987AC3FD40236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d8:e9:6f:63:1b:09:ea:3a:43:d1:b0:90:f8:
5b:34:b4:67:b8:06:c3:07:b3:cc:c2:c4:4b:38:03:
37:77:f5:f5:ad:3d:b3:4e:59:5d:59:8c:d3:51:3c:
c3:2e:5d:9b:a8:62:0a:b5:63:a2:28:c0:20:65:b4:
9c:c4:55:a5:51:aa:5b:b4:67:27:f6:5c:f2:16:4e:
28:56:01:a0:89:12:1e:0d:b6:c0:5a:f1:e9:b9:dc:
c6:46:e2:e4:5b:d4:b1:29:54:74:7c:97:96:40:2d:
c2:e3:bb:73:b5:0d:a1:c1:c3:60:72:60:03:d5:13:
fb:d3:47:fe:69:59:66:dc:b4:89:a5:f5:5b:3f:61:
92:d3:dd:ae:52:7e:b6:3e:fa:db:58:7e:13:5a:b6:
64:f7:38:bf:f9:88:bb:eb:4f:d0:23:ef:e0:89:58:
e9:86:f1:ec:69:f8:f6:b9:6e:0b:f4:85:28:56:e5:
80:d5:1e:f6:70:33:b9:4f:16:86:6b:f9:b6:2d:77:
f8:ae:df:ea:f8:e0:58:f9:04:86:e3:65:be:19:d2:
52:be:b3:94:ca:b4:9d:79:b6:a1:04:13:00:55:c6:
3e:fd:3f:f5:ee:58:d2:b6:5b:bf:01:d4:0d:4a:bd:
e6:75:f3:5e:58:07:27:20:d4:41:aa:02:93:9e:ae:
a8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FD:71:0E:7E:C6:C8:47:D5:AD:8E:39:FA:E9:87:AC:3F:D4:02:36
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3137362e302f32302d3230203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.84.176.0/20
Signature Algorithm: sha256WithRSAEncryption
30:bb:27:81:2f:04:55:70:2c:a9:c4:87:9a:32:1c:6e:e1:d7:
d3:a4:15:44:8b:9c:c9:e3:a4:57:2f:de:ca:ae:6d:d1:60:f4:
8f:76:51:86:3c:ae:79:7b:68:07:f6:46:24:de:4e:f6:31:e5:
a4:96:cf:95:59:3d:52:4b:f6:8d:e1:7d:04:4b:65:71:87:16:
76:8a:8b:42:66:89:4b:6f:df:34:62:c1:4b:e6:be:54:ec:ac:
af:30:3d:8c:15:37:70:42:7b:cf:0a:4d:d0:c1:53:18:e7:b0:
af:e4:c3:11:54:72:fc:16:60:2a:14:b6:90:8e:1f:1c:91:57:
c8:3c:3a:7d:12:84:33:4b:ce:3b:b9:89:61:36:f2:75:1b:a6:
eb:57:fc:cf:23:9a:b3:ef:e5:46:e0:b6:b7:05:0e:04:36:23:
79:33:de:0a:d8:0f:ce:d5:1b:71:f5:64:b9:c7:c8:ec:87:be:
fe:10:c2:86:c2:86:88:e6:db:2f:17:55:01:9b:e7:50:b2:50:
0a:d5:34:ea:d8:97:56:0f:a4:b1:db:10:2d:a1:35:d8:a3:68:
19:19:f1:08:5f:19:a6:c2:6f:53:52:4b:1d:41:15:8e:1b:e6:
49:a9:73:d5:28:61:0e:c7:19:d7:fa:10:11:fc:1f:94:8a:85:
cd:aa:7c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 05:15:40 2024 by rpki-client on console-ams.rpki-client.org