Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3136342e302f32322d3234203d3e203437353833.roa
File: 38322e3138302e3136342e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: xP/dgw8f9roPLkw1CctE4MgDA3l9pVRdzx4u9600ZIg=
Subject key identifier: 64:AC:26:38:C8:8F:C2:4F:C1:ED:A8:F5:3F:57:3C:60:23:B1:B3:E7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6301DF02E864B2159CF3225A74DCE09591438962
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3136342e302f32322d3234203d3e203437353833.roa
Signing time: Mon 26 Feb 2024 08:53:26 +0000
ROA not before: Mon 26 Feb 2024 08:48:26 +0000
ROA not after: Mon 24 Feb 2025 08:53:26 +0000
asID: 47583
IP address blocks: 82.180.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:01:df:02:e8:64:b2:15:9c:f3:22:5a:74:dc:e0:95:91:43:89:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:26 2024 GMT
Not After : Feb 24 08:53:26 2025 GMT
Subject: CN=64AC2638C88FC24FC1EDA8F53F573C6023B1B3E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b8:51:4d:0b:8f:65:60:f5:25:52:f4:33:c3:
a2:55:e5:12:05:1c:5c:67:f3:3b:e2:5c:76:df:fa:
d7:7b:9c:22:f0:f4:37:bd:11:b5:6d:96:08:90:85:
e0:62:ef:4c:0a:f2:9e:4b:21:9f:d6:98:7f:ef:e5:
67:f6:e5:c3:39:96:5b:33:e8:4e:e5:01:72:55:29:
23:98:07:1c:7b:33:ea:77:f5:b0:ff:d6:b0:7b:f8:
4b:0f:8e:98:da:9a:34:e3:50:5f:49:1b:9c:95:f4:
82:83:20:cd:3c:c0:f9:0f:06:49:65:0c:4a:6d:ae:
68:9e:d8:74:e5:ec:b4:d0:89:43:ff:21:09:85:43:
91:e8:52:09:a6:42:82:94:bd:e2:35:83:b0:f9:37:
2e:0c:4e:a4:a6:92:56:dd:35:4f:3b:64:cd:13:bb:
82:57:32:88:76:2e:aa:f6:27:69:69:eb:85:b9:95:
d9:91:3e:eb:8e:9d:8c:5a:cd:64:d3:f7:37:24:ec:
72:f8:a6:d8:bd:fd:59:d0:44:d3:6b:78:9d:fc:69:
40:e3:32:18:8e:21:e5:66:bc:f5:ce:f6:20:6e:1f:
8c:fe:d0:6d:21:91:06:92:ef:a4:88:c5:60:61:64:
d9:df:6c:dd:71:5f:4d:20:4d:46:ad:e7:e3:79:4b:
60:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AC:26:38:C8:8F:C2:4F:C1:ED:A8:F5:3F:57:3C:60:23:B1:B3:E7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3136342e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.180.164.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:17:d6:0b:88:24:6e:03:22:5d:ad:e7:66:14:10:e0:19:4d:
01:c9:e9:9a:d5:c5:9e:ba:f6:19:1f:b5:57:e9:7a:21:b7:d1:
c9:b8:96:dc:3f:ec:0e:27:06:f6:4a:3b:a3:08:18:80:c4:1c:
28:27:a5:e0:8e:ce:6e:99:ed:90:64:cc:5a:ae:22:1b:9c:74:
4a:4f:24:f5:86:03:55:31:d0:fe:22:d5:15:a1:6d:a3:63:3b:
7b:0f:58:b5:ba:a5:d6:2b:1b:1c:5b:da:da:98:d6:12:23:3f:
ef:8d:38:c4:20:27:24:46:44:b5:f3:8c:52:5a:66:bd:dd:f0:
b4:07:1c:cd:9d:00:1a:c2:e0:3a:03:3b:14:11:b7:99:e6:6e:
05:55:0e:7a:a7:46:a7:37:af:ab:58:69:4c:e7:d0:23:d9:3f:
e9:ed:4b:42:83:1c:0a:14:f4:6b:58:47:51:46:93:31:56:e3:
cc:5e:52:b5:5c:25:f8:ff:f4:03:b3:fd:8f:ba:3e:40:e9:da:
15:e8:d6:67:ba:dc:ea:fe:de:5b:17:af:97:47:2b:54:b5:ef:
ef:19:21:bb:1e:4a:fc:92:2b:7f:e3:5a:d2:3a:4a:55:6e:74:
53:f7:f9:9a:7f:d1:03:ef:e2:2e:e5:fa:8e:df:c7:05:0a:58:
f0:94:f7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 14:35:47 2024 by rpki-client on console-fra.rpki-client.org