Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/37372e3233372e3232352e302f32342d3234203d3e20323031333431.roa
File: 37372e3233372e3232352e302f32342d3234203d3e20323031333431.roa (raw, json)
Hash identifier: sNwmLL5nTc7ohl++S8N0MDu+xJuf/8Uy1y2sbYT2P6c=
Subject key identifier: AC:67:E6:72:15:40:F7:83:D9:0A:71:F9:92:D3:3E:E6:59:C4:1E:3F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4E4BFACE038C99E2BDDC5120D70FCAE438BC268F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/37372e3233372e3232352e302f32342d3234203d3e20323031333431.roa
Signing time: Mon 26 Feb 2024 08:53:24 +0000
ROA not before: Mon 26 Feb 2024 08:48:24 +0000
ROA not after: Mon 24 Feb 2025 08:53:24 +0000
asID: 201341
IP address blocks: 77.237.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:4b:fa:ce:03:8c:99:e2:bd:dc:51:20:d7:0f:ca:e4:38:bc:26:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:24 2024 GMT
Not After : Feb 24 08:53:24 2025 GMT
Subject: CN=AC67E6721540F783D90A71F992D33EE659C41E3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a3:ea:17:b4:d0:41:5f:9b:1a:3d:04:79:2d:
04:81:f5:82:58:d9:a6:ba:ac:07:97:eb:d5:67:f6:
74:e6:4c:8a:d6:19:10:cb:07:66:d9:d3:c7:2a:7a:
68:30:fa:2d:f4:c5:88:1d:ff:8c:ef:2d:26:22:c1:
51:f7:bd:7f:9c:5d:1d:1e:1d:1c:92:24:65:fc:5e:
1a:86:33:72:f6:fa:4e:ca:dc:63:ab:16:0f:11:a0:
73:2f:b7:bf:83:82:5d:0b:02:ed:8c:ee:25:b1:65:
28:b9:a8:97:ad:5c:a4:b2:1b:7a:32:24:16:0e:fa:
5d:bb:de:25:ac:58:3b:56:52:a8:15:92:0c:5c:02:
d6:33:fc:4d:5b:60:1b:5d:0a:15:bc:28:a0:9a:4b:
16:cc:b5:b1:ce:0d:16:41:09:20:7d:ae:ff:0e:84:
76:10:c6:63:a8:88:84:58:11:b8:fc:49:5f:59:e3:
6a:7e:74:99:d4:a4:3f:b0:80:c8:15:f4:c7:74:a1:
ba:4f:9f:03:19:d1:2b:2b:75:35:e4:a7:80:b9:a8:
86:39:5e:ee:cb:7b:0e:ce:7e:93:5b:d2:3e:c1:1a:
d8:2b:66:7f:51:a2:4a:d2:29:10:a0:75:ee:8b:a6:
1b:76:63:38:d5:08:9f:cb:0e:ab:04:45:bb:8e:3c:
66:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:67:E6:72:15:40:F7:83:D9:0A:71:F9:92:D3:3E:E6:59:C4:1E:3F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/37372e3233372e3232352e302f32342d3234203d3e20323031333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.237.225.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:f0:26:00:fb:0b:65:88:4f:08:35:c6:36:50:53:2f:33:e6:
4d:c5:76:38:73:75:37:46:87:90:55:f8:8d:37:cc:cb:7d:5c:
4c:ce:38:ba:04:a6:c8:11:05:25:d3:aa:3f:9e:34:be:8e:2a:
77:89:9f:1e:43:97:e4:01:85:64:1a:45:e7:f4:b9:8e:3e:d6:
31:b0:63:c8:5f:28:14:db:98:8b:56:22:d0:5a:66:41:ab:5a:
f3:27:6d:1e:64:7a:39:e9:07:f3:9a:b5:89:1f:9c:8b:13:c8:
50:77:4e:f2:2e:47:47:04:5b:95:3b:de:a5:90:fe:7d:0b:a9:
f3:41:9d:fe:23:cb:81:7c:b5:8d:73:4e:35:ef:b3:63:bc:e3:
5e:4b:3a:bb:29:e9:3a:c8:7e:d9:96:50:0f:7c:e1:b8:e8:da:
de:f6:6f:f8:95:16:95:3e:c7:d5:eb:c1:19:66:cd:3c:b5:85:
75:f7:2b:b0:9d:d1:bb:df:77:b0:0a:c7:f9:af:ad:15:42:65:
50:b3:d1:1a:f5:e2:e6:03:f5:85:e3:b9:3f:ec:92:87:88:3f:
83:f0:32:c6:2e:f3:b9:59:4c:14:ed:c4:75:6b:0c:6c:0e:b2:
51:d8:0d:e6:bb:eb:02:37:c7:f2:f3:d0:c0:59:d3:3f:fc:43:
b9:9e:22:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 14:35:47 2024 by rpki-client on console-fra.rpki-client.org