Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3137362e302f32312d3231203d3e2036373632.roa
File: 36322e38342e3137362e302f32312d3231203d3e2036373632.roa (raw, json)
Hash identifier: 7ie2w4FXn57g7YgRf4/0do1n8C+l198FPajQZZfxMbE=
Subject key identifier: BF:1A:5E:49:BA:1A:68:F2:32:C6:8C:57:0D:2A:80:85:0A:0B:4A:F8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 192EB8FA39C0D28DCCC0BF7002249BDD790A9517
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3137362e302f32312d3231203d3e2036373632.roa
Signing time: Wed 28 Feb 2024 22:00:09 +0000
ROA not before: Wed 28 Feb 2024 21:55:09 +0000
ROA not after: Wed 26 Feb 2025 22:00:09 +0000
asID: 6762
IP address blocks: 62.84.176.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 16:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:2e:b8:fa:39:c0:d2:8d:cc:c0:bf:70:02:24:9b:dd:79:0a:95:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 28 21:55:09 2024 GMT
Not After : Feb 26 22:00:09 2025 GMT
Subject: CN=BF1A5E49BA1A68F232C68C570D2A80850A0B4AF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:be:1b:90:15:69:7f:47:50:62:ea:92:99:67:
a5:d3:59:5e:11:8d:93:e2:bd:e1:1f:61:7d:f8:ab:
1b:c0:f8:5f:c5:00:94:22:16:da:bc:4d:e6:99:ae:
28:d4:63:b7:d6:f4:6e:c0:48:92:8e:50:33:81:a7:
10:10:d7:f9:fb:5c:7d:ef:3b:f3:a3:e4:b9:57:4f:
4b:1c:0e:d5:12:3f:44:c6:02:82:2c:c2:63:a6:84:
bc:f1:bf:bd:cf:96:a5:64:db:00:6a:2a:67:aa:52:
73:70:c0:69:d7:4d:dc:b1:2e:a5:75:e7:1a:b8:bc:
16:f5:2c:f2:cf:53:52:35:7e:62:11:3c:9e:02:2e:
99:83:9d:c3:e0:04:57:8c:e9:48:6f:96:4d:83:e9:
8a:e5:77:95:0d:31:db:cb:25:19:e7:62:83:91:46:
58:5d:80:51:ff:a1:5e:f4:5e:94:33:33:41:6a:bb:
cd:1f:14:7a:6c:9f:ae:a5:b0:54:b3:0a:ca:78:a9:
6f:39:eb:f8:d4:c4:aa:84:0c:03:29:c4:9b:90:e1:
c7:b1:84:ec:d5:3a:31:e8:40:03:74:b7:f0:ea:e5:
ff:9e:ba:04:ef:31:51:fd:12:59:e7:61:2e:ae:09:
73:a6:11:64:b2:fe:86:db:6f:a8:da:61:8f:3e:0f:
32:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1A:5E:49:BA:1A:68:F2:32:C6:8C:57:0D:2A:80:85:0A:0B:4A:F8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3137362e302f32312d3231203d3e2036373632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.84.176.0/21
Signature Algorithm: sha256WithRSAEncryption
10:5a:32:cc:c0:a2:25:9f:5a:21:d2:81:a6:73:26:67:d2:cd:
5c:1d:1c:bf:0a:b3:26:49:82:11:10:9e:4d:53:54:7e:0e:e7:
0f:21:8f:7b:c1:f0:d4:5c:f0:b2:23:8f:5e:be:ff:dd:84:a3:
c3:e3:f2:95:9e:6f:6f:e4:72:24:04:c9:4e:be:e8:ff:6f:ca:
9c:ef:32:78:a6:72:10:81:17:47:0a:7e:c3:f3:f0:ee:78:f7:
fc:de:8e:ed:32:4e:7c:6d:1a:e9:af:b9:4a:aa:c5:32:95:67:
43:24:e2:30:e5:30:ba:56:40:1e:c4:ee:d1:fe:e7:b5:f1:fe:
7b:5c:d2:b9:3b:51:78:19:97:7a:bc:d5:9a:b3:66:b6:5e:92:
7f:0c:60:30:ba:e9:4e:00:2c:1e:97:03:0b:07:5f:c7:72:f2:
6e:a0:81:ef:9f:f5:ae:cb:52:bc:14:bf:ef:16:51:11:05:f1:
c7:67:d9:a4:3e:c9:a7:7b:bc:f4:f9:9d:be:34:d1:2a:9d:a8:
22:6b:aa:76:ed:30:3c:20:0a:6b:26:78:81:60:e2:30:a8:89:
4b:18:56:95:14:d1:0e:88:cf:98:10:af:e5:58:a8:30:64:6b:
b4:5a:76:86:42:69:18:17:e3:3d:f3:b7:ab:15:84:d3:07:b0:
f1:66:69:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 20:18:10 2024 by rpki-client on console-ams.rpki-client.org