Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e3139302e38302e302f32312d3332203d3e203430303231.roa
File: 38302e3139302e38302e302f32312d3332203d3e203430303231.roa (raw, json)
Hash identifier: BqkF9ckmjZY+e3vBTWzwBt2dnoOKol+kNztS27TRZbQ=
Subject key identifier: DF:49:EA:DB:1B:9B:DF:C0:06:89:0B:42:A7:40:4E:03:75:16:84:74
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5D21DF7E360A50C8BC9A968513D3F98FC3DF8F5B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e3139302e38302e302f32312d3332203d3e203430303231.roa
Signing time: Tue 19 Mar 2024 10:03:14 +0000
ROA not before: Tue 19 Mar 2024 09:58:14 +0000
ROA not after: Tue 18 Mar 2025 10:03:14 +0000
asID: 40021
IP address blocks: 80.190.80.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:21:df:7e:36:0a:50:c8:bc:9a:96:85:13:d3:f9:8f:c3:df:8f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Mar 19 09:58:14 2024 GMT
Not After : Mar 18 10:03:14 2025 GMT
Subject: CN=DF49EADB1B9BDFC006890B42A7404E0375168474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:23:3a:c6:28:8b:01:39:1f:2a:55:5d:53:71:
a4:ad:49:b9:06:19:77:45:d7:fe:d1:f1:d9:81:58:
7d:37:1f:fe:ef:43:f8:72:28:cd:e6:87:42:44:15:
02:98:d0:1c:a2:20:b8:7a:b7:a4:63:96:1e:71:0e:
ab:08:5e:28:07:69:9a:cf:dc:5b:c5:d9:37:0f:a2:
f4:5d:19:2c:89:58:b1:40:f4:25:08:f6:c4:6a:28:
b4:34:6b:0a:57:b6:0e:c5:d5:eb:b6:64:89:9c:38:
e9:10:b4:6f:d2:c9:9c:1f:69:96:ff:44:44:04:a1:
72:06:74:3e:1a:50:df:18:d8:50:1d:88:ba:b3:23:
80:39:ee:d7:85:08:90:58:d7:bf:d4:fd:98:99:97:
eb:a3:af:a8:8d:3e:60:14:6d:e9:c0:e7:34:5b:46:
c9:68:53:24:24:b9:82:01:a6:ad:51:b7:ad:6d:d2:
dd:3e:ce:b7:fd:b8:3a:5d:06:e9:1d:b1:24:e0:dc:
e2:12:9e:31:b7:e0:68:4f:bb:6e:ee:a1:5a:3e:c5:
9b:ed:9f:d3:aa:d1:9e:8b:ce:52:18:a1:3f:06:6d:
e5:e8:99:20:86:16:18:63:28:03:5a:df:d3:86:db:
0c:d8:02:d2:5c:14:76:2e:f6:36:da:b1:8a:fc:4b:
93:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:49:EA:DB:1B:9B:DF:C0:06:89:0B:42:A7:40:4E:03:75:16:84:74
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e3139302e38302e302f32312d3332203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.190.80.0/21
Signature Algorithm: sha256WithRSAEncryption
2b:5b:b7:4d:63:ac:b1:98:a2:eb:a7:b6:b6:73:b4:16:ef:76:
c6:4c:a3:ae:75:14:6b:b2:5c:79:4b:8c:38:42:06:41:19:86:
0b:c1:ea:fa:94:24:6c:a9:d4:0b:06:19:f5:80:18:08:1d:e5:
31:36:21:01:a9:45:66:af:92:46:d6:eb:27:0a:65:eb:76:16:
a8:93:d7:a9:48:ee:66:31:17:9f:29:87:22:cf:42:8c:dc:b1:
fc:66:eb:0c:67:54:eb:69:1f:c2:ca:14:9c:69:b5:63:3d:ff:
4d:f6:da:58:dc:d9:df:97:7a:7a:19:72:41:4c:79:24:fa:f5:
b8:8d:92:3f:5f:a4:0d:7e:3b:16:5f:54:ea:88:6b:2c:6a:ba:
32:a1:da:c1:92:b8:a6:44:62:a5:4e:39:16:c9:ca:2f:ca:b0:
ca:51:a9:62:7f:d1:ca:25:f8:31:02:f7:74:22:e4:5c:a2:7b:
aa:a5:60:11:83:b7:bb:87:b9:90:e0:ac:46:d2:65:ff:61:5b:
7f:e3:c5:cc:48:4a:7c:a9:3d:9d:2f:34:95:91:1c:84:e8:1e:
60:2f:45:5f:e0:a7:01:31:fa:b8:c0:2f:68:fa:ab:bb:43:fd:
3f:b2:b5:d7:05:27:95:a6:70:65:cf:81:db:67:fa:1d:f0:d2:
95:78:8f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 14:35:47 2024 by rpki-client on console-fra.rpki-client.org