Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3133342e302f32332d3234203d3e203437353833.roa
File: 38322e3138302e3133342e302f32332d3234203d3e203437353833.roa (raw, json)
Hash identifier: zlNmLvzgoH3RhRag+8/4WjlJhs2FrFRCk55e10zG+sE=
Subject key identifier: A4:30:06:11:CC:87:3E:11:6B:8B:D9:10:5D:56:F3:70:9E:5D:61:E8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6488E700D6FD509545F3807EF9BA18C541C93C9D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3133342e302f32332d3234203d3e203437353833.roa
Signing time: Mon 26 Feb 2024 08:53:16 +0000
ROA not before: Mon 26 Feb 2024 08:48:16 +0000
ROA not after: Mon 24 Feb 2025 08:53:16 +0000
asID: 47583
IP address blocks: 82.180.134.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 16:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:88:e7:00:d6:fd:50:95:45:f3:80:7e:f9:ba:18:c5:41:c9:3c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:16 2024 GMT
Not After : Feb 24 08:53:16 2025 GMT
Subject: CN=A4300611CC873E116B8BD9105D56F3709E5D61E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:45:c2:8a:49:65:f4:98:10:36:91:c9:80:b5:
a3:8b:82:da:31:7a:be:30:f2:bf:fe:1a:71:a5:3c:
44:c2:6b:de:6e:20:0d:8f:b9:a3:1c:25:9d:6f:e3:
e9:a2:73:40:38:36:01:8c:7f:a2:c1:7c:25:58:ec:
03:b4:fd:10:1f:9e:6e:59:90:c5:c5:76:5b:67:59:
07:ce:80:c4:79:22:3a:1b:31:17:4a:2f:bc:b6:bf:
e0:67:44:48:e4:1e:3e:19:e6:fb:0b:e5:11:69:18:
30:91:5e:5f:39:16:53:e8:64:0d:46:09:50:ee:0d:
4e:81:bd:e2:7f:ef:47:a9:6e:65:3c:79:d8:f4:47:
75:20:42:a6:3b:8b:d0:b3:48:bb:b4:4d:52:43:3e:
7e:f9:46:19:a6:9b:7c:a6:b6:16:4a:e8:05:f5:e4:
88:1c:a7:98:fe:5b:3f:12:74:7b:30:93:89:3d:8a:
96:3a:f6:96:0d:eb:bf:73:d9:9a:03:36:28:7e:c5:
0b:ae:4c:58:7d:d3:1d:d0:4c:0e:34:73:c1:e6:91:
07:a1:19:12:21:b0:88:17:3b:af:4f:65:c6:9b:38:
0e:47:66:5c:89:8d:9a:33:89:24:0d:0f:86:2a:8f:
3b:9c:59:7d:a9:3e:16:d1:cf:6e:a3:b2:27:ed:10:
83:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:30:06:11:CC:87:3E:11:6B:8B:D9:10:5D:56:F3:70:9E:5D:61:E8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3133342e302f32332d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.180.134.0/23
Signature Algorithm: sha256WithRSAEncryption
59:bb:d6:83:a7:57:0e:48:24:9b:8e:93:9e:0b:a5:f3:38:77:
6a:59:d4:90:25:22:4f:cb:6a:1d:7c:37:5e:a6:1f:10:27:c5:
38:e2:81:a5:24:e2:0f:95:17:0a:28:6e:e6:d4:f0:72:1e:3b:
2f:85:fc:72:9d:1d:48:b9:92:32:b9:dc:ab:05:d4:ba:f9:f3:
8c:19:4a:3a:c8:e0:45:60:58:8e:79:7b:85:a0:03:20:99:33:
8a:09:60:c7:36:01:a6:56:cc:65:ac:6e:37:5d:b3:94:ac:43:
89:d1:c7:21:7f:52:a2:ab:4d:89:20:02:9e:38:11:02:99:78:
32:5e:41:4f:cd:87:c8:d2:1f:a7:61:4d:bc:d4:cc:ac:42:c9:
f6:a6:99:2b:ff:7e:f6:bd:a1:c6:4e:c9:b1:7b:67:8c:29:45:
86:e2:23:c5:8f:f6:df:22:67:d2:eb:e7:7f:4c:cb:bc:de:bb:
65:77:26:22:03:ec:18:63:8a:19:cc:f2:15:66:f3:61:42:8d:
f0:5e:ae:e3:22:d1:64:1f:d7:5f:d9:6e:a0:fa:54:9b:2b:bb:
77:3f:01:88:8f:87:ab:db:75:dc:4d:fc:67:6a:7d:a8:1b:76:
8c:b6:85:39:9c:ae:26:eb:40:f5:ef:8a:75:08:91:1f:09:7d:
54:1e:af:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 20:18:10 2024 by rpki-client on console-ams.rpki-client.org