Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e37352e32342e302f32312d3234203d3e20313938303930.roa
File: 38302e37352e32342e302f32312d3234203d3e20313938303930.roa (raw, json)
Hash identifier: sXrERubCxCvgvlXjl9MpF2KPukxG7j+FZ5B+lIdMsGg=
Subject key identifier: 12:C9:04:08:6B:1C:25:BB:38:6E:62:86:5C:EC:44:0D:DF:B8:07:E8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1FA867771EA073D278771D675001444AC6847669
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e37352e32342e302f32312d3234203d3e20313938303930.roa
Signing time: Mon 26 Feb 2024 08:53:06 +0000
ROA not before: Mon 26 Feb 2024 08:48:06 +0000
ROA not after: Mon 24 Feb 2025 08:53:06 +0000
asID: 198090
IP address blocks: 80.75.24.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:a8:67:77:1e:a0:73:d2:78:77:1d:67:50:01:44:4a:c6:84:76:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:06 2024 GMT
Not After : Feb 24 08:53:06 2025 GMT
Subject: CN=12C904086B1C25BB386E62865CEC440DDFB807E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b8:dc:bc:61:c3:4f:d0:10:d8:bf:38:2e:ea:
5c:34:b9:88:f2:af:76:e4:65:f9:84:af:f5:fd:e9:
c5:50:b9:b7:15:69:65:97:ba:cf:14:77:81:b0:68:
11:53:27:b2:3e:8d:4f:37:70:03:0e:06:88:c2:fc:
55:04:35:d4:3d:a6:a1:c7:fc:69:2d:0a:1f:6d:05:
39:69:9c:e5:f8:32:60:30:a6:e3:7b:a5:e8:7a:06:
c8:8c:04:ff:99:d3:a5:b7:ff:13:0c:2b:9a:55:4f:
be:bd:1c:c0:b5:ff:5c:b0:92:15:11:c3:b2:73:ab:
fb:6a:5a:66:bf:a8:a9:50:28:3c:88:03:cd:d0:83:
6c:86:44:da:65:15:7b:f0:e0:f7:e4:2d:66:4d:8d:
55:2d:cc:80:ea:de:0c:73:bf:92:a6:93:81:2a:bf:
00:fe:cf:cf:14:68:f3:f3:1f:c8:ea:ad:d4:5f:3c:
fe:55:9c:77:05:37:08:a5:ac:29:b8:78:89:2c:cd:
fe:88:c9:d3:ea:14:e0:c3:95:07:3a:dc:54:06:a6:
1d:d5:f9:3d:e1:48:3a:4e:8f:d3:f2:5a:33:bf:78:
19:d2:82:e6:78:1f:61:ab:61:92:fa:88:1e:9d:d5:
78:2c:7f:bd:e3:2d:2f:38:5b:a8:99:c1:a1:1c:58:
51:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C9:04:08:6B:1C:25:BB:38:6E:62:86:5C:EC:44:0D:DF:B8:07:E8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e37352e32342e302f32312d3234203d3e20313938303930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.24.0/21
Signature Algorithm: sha256WithRSAEncryption
41:94:8a:58:0e:df:57:d8:b9:59:59:9d:2e:36:f0:40:fc:70:
44:2f:5b:92:f2:1f:a7:9f:74:d7:b3:f9:9b:3e:e9:27:d9:8f:
0d:d8:60:5a:aa:c9:4b:ac:c8:5e:36:f6:13:f4:71:48:56:6d:
9d:ac:ae:9c:20:62:b5:b1:f7:5d:c4:93:73:07:1d:50:91:a9:
f9:b2:90:83:80:f0:23:e3:7e:7c:7b:9c:5d:6a:99:a2:e3:76:
77:d4:47:54:c0:57:5f:42:6e:b5:37:80:95:a5:cf:eb:a6:ea:
63:d8:a9:c3:25:e9:9f:55:d6:4e:ef:2f:7f:e7:c3:7c:75:b6:
6b:bb:45:5a:3a:ff:d9:5e:60:e9:98:cb:d3:02:e7:e3:bf:65:
b7:15:7b:f5:49:06:de:aa:d0:dc:30:fc:74:fc:30:c3:1d:6d:
2a:88:20:ed:07:c6:73:85:a4:c5:5e:49:a2:1b:0d:0e:fd:f8:
88:09:96:9f:15:01:fb:49:86:9d:39:d0:9e:5b:15:e4:75:5a:
90:2b:7e:af:b6:d0:da:0a:16:cf:8b:6c:64:51:1d:e0:81:4f:
2e:75:c1:36:c7:4d:c5:73:20:8e:09:d5:04:fd:54:6b:fd:91:
11:d8:ed:db:01:62:f5:44:01:d5:ca:17:da:c4:fc:e1:70:cb:
b2:49:25:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 14:35:47 2024 by rpki-client on console-fra.rpki-client.org