Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38312e302e3232302e302f32332d3332203d3e203531313637.roa
File: 38312e302e3232302e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: Z/H0kCxgMQoTCEP7Oium8AIrUmnkkS1xRWs3jQ971dk=
Subject key identifier: C0:EB:9B:93:CC:EE:17:8F:BA:5A:ED:A5:76:BE:7E:D8:22:27:8E:CD
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0FCC5B60A26BD27BBFDBDEA664F8EA8FBB6A0EB3
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38312e302e3232302e302f32332d3332203d3e203531313637.roa
Signing time: Mon 26 Feb 2024 08:52:59 +0000
ROA not before: Mon 26 Feb 2024 08:47:59 +0000
ROA not after: Mon 24 Feb 2025 08:52:59 +0000
asID: 51167
IP address blocks: 81.0.220.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 16:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:cc:5b:60:a2:6b:d2:7b:bf:db:de:a6:64:f8:ea:8f:bb:6a:0e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:47:59 2024 GMT
Not After : Feb 24 08:52:59 2025 GMT
Subject: CN=C0EB9B93CCEE178FBA5AEDA576BE7ED822278ECD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:41:d1:43:d6:ae:ac:cd:8b:1b:97:6c:82:b9:
93:88:3d:a8:89:ed:23:37:40:71:b5:34:a8:f8:4e:
e6:c8:63:7f:bf:87:a1:e9:3e:b2:ca:b8:96:a1:30:
75:3b:9a:ed:b4:00:35:52:fb:40:08:35:dd:15:e0:
5c:83:0c:22:8e:53:9b:40:34:77:11:60:52:2e:87:
ff:c4:ff:47:a5:a2:1a:98:a7:99:ee:5f:ff:0e:6b:
46:c2:43:6f:63:5b:4b:48:d0:00:77:4f:f3:cc:86:
be:72:6a:8d:13:3f:c6:66:0e:03:6f:12:00:0e:59:
7c:d8:67:bb:be:c6:bf:fa:d6:bf:62:5c:f6:95:de:
0c:24:d0:11:db:06:d7:55:80:4e:99:72:17:b2:a9:
dd:6a:86:9d:37:42:ab:88:21:b3:4d:fa:eb:fd:16:
91:5c:78:cc:a4:e3:9f:7f:11:f2:54:52:0e:dc:5b:
06:e3:e0:56:04:bb:aa:d8:a6:7b:2c:60:34:00:88:
6d:f8:ec:5f:4a:16:07:10:81:0c:bf:a1:38:d7:03:
90:a3:9b:16:fe:11:7d:cd:7f:6b:80:f9:5f:1a:8e:
05:9c:9f:9b:76:13:cd:45:00:2e:41:65:85:38:42:
58:25:94:fa:16:b2:1f:e9:dd:bf:12:0c:27:07:51:
f4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:EB:9B:93:CC:EE:17:8F:BA:5A:ED:A5:76:BE:7E:D8:22:27:8E:CD
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38312e302e3232302e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.0.220.0/23
Signature Algorithm: sha256WithRSAEncryption
61:40:68:6b:0a:9e:13:e6:03:e1:cc:6f:24:d8:86:ab:84:61:
c3:30:cf:17:97:e3:43:07:ed:9c:b5:20:34:5c:05:79:e3:b9:
26:28:ef:bc:2c:fa:b3:30:92:fa:f5:5c:6d:9f:8a:f6:c0:f6:
86:dc:f3:c3:72:4a:1e:e2:fb:5e:d9:ad:b4:55:64:58:48:9b:
21:50:1b:98:0e:16:98:01:3a:93:d2:f2:bb:30:32:2a:32:26:
da:e5:13:a5:e2:ac:62:a4:e0:a5:58:23:e4:8e:da:f3:55:7d:
41:2f:05:fd:1d:13:29:5d:82:73:83:de:c1:e8:16:fa:1a:a4:
2d:ba:40:ad:87:f3:89:7f:57:b5:9e:09:78:fa:e6:72:95:b7:
db:8e:ec:a0:f3:da:e2:b0:c5:6d:38:d9:86:d2:60:71:26:3d:
ce:f2:94:c8:66:fc:ef:2b:e2:24:dc:be:9c:fb:1a:39:d5:3a:
4b:91:e9:3b:6b:be:23:9e:13:85:fb:11:2d:c8:22:e0:86:00:
5c:ce:92:fd:3c:24:bb:05:29:e3:f9:3d:52:52:c9:74:b7:c3:
15:8e:cc:77:01:66:0d:ee:6d:81:46:25:32:ad:bd:b9:57:d3:
3b:1a:b9:48:67:22:b3:86:5f:7d:da:eb:67:e6:a9:da:0f:df:
5e:b4:b6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 19:28:05 2024 by rpki-client on console-fra.rpki-client.org