Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38342e33392e3134342e302f32322d3234203d3e203630363634.roa
File: 38342e33392e3134342e302f32322d3234203d3e203630363634.roa (raw, json)
Hash identifier: AvMmKHE4wxE05sCtjP/Y0FP0VmIM+WmMVnMZxO2fULE=
Subject key identifier: 1F:17:B3:B6:FA:05:B2:96:BE:68:AE:95:F4:58:D6:39:58:3C:CC:FB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 240A0FD78C865657580D8E416166A3B3D7410B54
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38342e33392e3134342e302f32322d3234203d3e203630363634.roa
Signing time: Fri 21 Jul 2023 16:43:02 +0000
ROA not before: Fri 21 Jul 2023 16:38:02 +0000
ROA not after: Fri 19 Jul 2024 16:43:02 +0000
asID: 60664
IP address blocks: 84.39.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 16:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:0a:0f:d7:8c:86:56:57:58:0d:8e:41:61:66:a3:b3:d7:41:0b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 21 16:38:02 2023 GMT
Not After : Jul 19 16:43:02 2024 GMT
Subject: CN=1F17B3B6FA05B296BE68AE95F458D639583CCCFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b0:50:d8:5a:50:a0:25:42:db:6c:53:c3:80:
33:24:34:19:8b:7b:05:44:06:17:fc:31:25:6e:b2:
a1:3a:ff:f5:50:74:31:16:83:f8:d1:02:ae:1f:7d:
7a:35:28:d3:5e:57:09:ba:64:f3:57:6b:c4:21:85:
b9:a3:5f:f1:75:2e:77:7a:8c:22:b9:4f:9b:02:58:
ab:4c:a0:20:92:f1:58:fd:e4:59:0e:18:51:05:54:
da:55:a9:10:f8:c5:26:24:c8:4c:dc:02:81:c2:a1:
46:dd:b9:e1:e7:b8:32:bf:5f:4f:4e:bd:a6:b9:9e:
1e:fd:b1:5e:cd:b9:1b:c4:ea:16:b7:39:8a:4e:57:
dd:62:fb:12:eb:9c:63:46:7e:4d:d8:1c:74:46:3e:
5b:07:da:c0:c9:e7:f2:60:de:cf:cd:32:68:50:6f:
f5:19:4a:9b:49:78:a7:84:10:92:2b:a7:d8:38:a5:
3a:97:98:ca:7c:9b:65:ae:38:ef:d5:87:9e:8d:e1:
8d:b5:0f:5a:50:c1:63:5c:5d:68:b4:45:6b:8c:bf:
75:fc:16:c3:3d:a1:c4:8a:b1:95:22:e1:ca:98:e9:
ed:c4:af:35:6e:ee:39:b4:c9:f8:88:ae:b2:9a:f9:
d9:38:eb:1d:a3:0d:ab:9f:97:f5:99:4c:0d:72:c6:
ca:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:17:B3:B6:FA:05:B2:96:BE:68:AE:95:F4:58:D6:39:58:3C:CC:FB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38342e33392e3134342e302f32322d3234203d3e203630363634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.39.144.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:a0:d8:de:99:ff:ef:c8:ca:c2:73:2c:e8:37:97:9d:cb:94:
83:cf:30:ac:40:92:a8:45:a6:df:05:78:ce:9a:6b:60:32:00:
84:87:f2:2f:36:6e:0a:11:fd:1f:0c:bb:03:14:3f:e6:88:41:
9e:1f:1e:c3:f8:ca:4c:a6:6a:ab:d4:41:38:b9:4d:65:d8:ee:
79:df:9b:58:be:8e:97:ed:2f:7b:61:0f:11:01:1e:32:2b:17:
a5:69:cb:cc:84:e2:1b:33:87:c5:73:cd:d2:f6:6e:c5:b1:37:
bb:50:d5:9d:32:b9:df:c9:0c:61:a7:63:d8:82:f9:17:e0:04:
1f:40:65:ee:07:e5:4c:41:e3:63:c2:6f:fe:c1:94:96:0a:c9:
62:61:31:18:ea:a0:3a:03:4c:5d:8c:83:54:c8:07:8e:18:01:
11:fe:cf:c0:bf:31:db:2d:81:5d:0d:b4:be:15:d4:f1:30:eb:
6d:e4:b7:96:e9:80:7a:69:44:7f:6c:fa:33:04:d2:50:42:3f:
d6:b8:54:83:f4:5f:b0:77:19:8c:c8:cf:56:d0:2a:29:b1:83:
f1:f7:99:58:57:cb:e9:3e:69:d5:a7:bc:e8:fb:bb:ad:96:28:
15:09:b8:b9:07:f0:a6:6d:82:27:33:e3:fe:4a:e7:54:8f:a6:
00:a6:0f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 20:18:10 2024 by rpki-client on console-ams.rpki-client.org