Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3135342e302f32342d3234203d3e203437353833.roa
File: 38322e3138302e3135342e302f32342d3234203d3e203437353833.roa (raw, json)
Hash identifier: FDV+szLALqdx5eG63oJZCHgHiO3T4FnDhSAdZXsuhpA=
Subject key identifier: C6:C9:21:ED:E5:24:FF:E0:2F:AD:C4:5C:B3:05:AE:5A:37:D6:AE:CC
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 756E66DDAC2F2D0CEC9EBB39BC4FFA9BC36736AE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3135342e302f32342d3234203d3e203437353833.roa
Signing time: Mon 26 Feb 2024 08:53:02 +0000
ROA not before: Mon 26 Feb 2024 08:48:02 +0000
ROA not after: Mon 24 Feb 2025 08:53:02 +0000
asID: 47583
IP address blocks: 82.180.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 16:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:6e:66:dd:ac:2f:2d:0c:ec:9e:bb:39:bc:4f:fa:9b:c3:67:36:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:02 2024 GMT
Not After : Feb 24 08:53:02 2025 GMT
Subject: CN=C6C921EDE524FFE02FADC45CB305AE5A37D6AECC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:39:df:d4:24:92:7c:a0:32:53:80:85:0b:70:
56:fa:14:f6:49:2a:4f:c2:25:b6:d8:63:ce:b0:01:
6d:0a:c7:86:33:b6:f9:25:88:2a:7f:ae:b7:9d:88:
aa:29:2b:91:30:8b:eb:d1:72:5f:1c:94:97:83:54:
a4:8c:2d:e4:61:d2:0d:f8:68:db:9d:f1:1c:a2:f1:
34:22:5f:9c:3b:f7:f3:4a:af:bc:6e:1d:6b:f8:9c:
ae:7c:c7:8d:0c:96:cf:13:ff:99:a1:dc:c1:4c:62:
21:01:50:70:90:6a:31:5f:0b:9d:65:2c:f1:62:a6:
52:3f:fe:f8:0d:ca:ea:dc:05:4a:81:00:20:73:08:
17:a4:14:ad:04:76:6e:68:32:c7:e4:8e:1f:79:2c:
39:c3:d6:85:28:7e:fd:d7:71:5c:22:9d:f5:fb:2a:
09:70:c8:38:9c:fe:01:39:7f:58:f4:e3:9d:c4:16:
14:23:00:98:e6:0e:27:45:2a:b8:bb:a8:84:0f:38:
d3:a1:c3:29:1d:f1:12:1a:91:de:b4:90:48:be:54:
c5:0c:2e:9e:af:ad:20:9c:3e:80:af:ff:43:f4:94:
bc:60:55:d2:c2:6a:41:25:48:e9:b9:a8:17:05:8f:
af:1d:e7:6b:ea:f5:b7:c7:95:95:f0:2b:08:8b:0e:
1d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C9:21:ED:E5:24:FF:E0:2F:AD:C4:5C:B3:05:AE:5A:37:D6:AE:CC
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3135342e302f32342d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.180.154.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:2e:ff:6f:5a:d4:e8:14:90:10:81:49:1d:55:fd:b4:4d:2d:
f4:08:32:5a:17:e6:1c:89:3c:18:5b:bb:89:1a:6f:a4:51:79:
e7:87:2b:a0:1d:69:4f:73:79:ba:4b:18:7a:0f:ae:bd:f9:4c:
6e:98:84:f4:91:7f:09:40:de:2d:bf:e3:4f:df:96:f4:84:1a:
71:18:c9:04:48:a4:a4:b0:eb:9c:1a:f1:53:44:42:fe:10:d4:
b1:f8:4c:42:dc:9b:70:4a:10:7d:de:19:7c:ab:53:88:e2:91:
9a:91:57:fc:9a:2e:5c:0e:1f:12:45:41:75:15:f3:75:de:b3:
af:ab:8a:41:bc:52:66:ce:25:9b:20:0e:c6:02:c8:c4:33:da:
a6:46:3a:25:06:ae:5a:ce:36:2b:c1:a1:ce:c4:99:9f:42:fe:
1d:73:40:86:6c:8f:48:cb:41:9b:ff:30:d2:0c:ae:e4:fd:4c:
5d:be:e7:25:d0:98:56:76:3c:16:6a:ab:2d:ec:57:fe:4d:b2:
f5:5f:9b:19:e5:59:27:1b:37:3c:e3:f3:31:08:b1:be:50:0c:
7c:56:66:44:1c:43:25:07:23:55:29:37:26:3e:8e:87:19:20:
09:f7:63:ed:36:80:e3:8e:39:7e:ea:ca:e6:a8:5a:f3:ac:db:
ca:53:f8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 19:28:05 2024 by rpki-client on console-fra.rpki-client.org