Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3233392e3233322e302f32312d3332203d3e203531313637.roa
File: 38352e3233392e3233322e302f32312d3332203d3e203531313637.roa (raw, json)
Hash identifier: hWlaU2XtoLHDHpImRcaU5O4CVjz+MDRxb3Zrgf1uwNE=
Subject key identifier: 5A:3A:A7:99:C9:50:48:BA:23:C5:F9:D4:06:0F:2A:30:A0:10:E5:B3
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 63E0EEB1BD2A6D38A56784588E609D7D97AAD362
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3233392e3233322e302f32312d3332203d3e203531313637.roa
Signing time: Fri 21 Jul 2023 07:19:39 +0000
ROA not before: Fri 21 Jul 2023 07:14:39 +0000
ROA not after: Fri 19 Jul 2024 07:19:39 +0000
asID: 51167
IP address blocks: 85.239.232.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:e0:ee:b1:bd:2a:6d:38:a5:67:84:58:8e:60:9d:7d:97:aa:d3:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 21 07:14:39 2023 GMT
Not After : Jul 19 07:19:39 2024 GMT
Subject: CN=5A3AA799C95048BA23C5F9D4060F2A30A010E5B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:9c:f7:46:77:b7:7c:76:8c:3d:a3:0d:a8:8b:
82:22:54:c1:ae:f5:75:7d:91:08:48:d9:a7:77:3b:
ce:6c:74:b8:5e:f6:6d:44:ce:aa:f6:b0:48:e8:e8:
d6:2c:bd:83:ec:9a:7d:44:df:40:b0:04:52:1c:a5:
43:ee:5e:96:f4:34:6d:a5:9e:69:ce:5f:89:d2:da:
62:e5:78:8c:dc:94:47:2c:27:6a:59:23:79:f9:7e:
f8:c8:a0:ee:e6:c5:a0:45:69:42:e6:ee:49:f0:f0:
f0:91:b7:09:ad:ad:06:e3:45:48:a1:8e:b9:08:13:
de:37:b7:27:03:c0:99:ed:54:ff:37:4e:19:49:d3:
f2:aa:b1:f8:9c:3d:bd:32:cd:16:b6:a0:1f:41:ed:
2d:2f:ea:82:0f:b3:85:10:20:8c:39:46:fa:75:95:
51:0c:ca:73:09:2c:99:80:f4:11:be:b5:2b:86:a6:
e6:9a:dc:99:36:e3:a3:77:6f:36:09:db:0f:fb:8a:
8c:ab:b0:1c:d3:1b:d3:f2:86:33:96:2f:2e:fe:0f:
af:1b:fa:86:ea:2a:f3:1e:04:26:20:02:ae:4f:f6:
6e:64:e3:78:86:22:ec:92:b8:29:66:11:15:38:3d:
a8:ae:84:d3:95:82:3b:c8:34:9c:7c:76:0f:d4:91:
23:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3A:A7:99:C9:50:48:BA:23:C5:F9:D4:06:0F:2A:30:A0:10:E5:B3
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3233392e3233322e302f32312d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.232.0/21
Signature Algorithm: sha256WithRSAEncryption
7b:48:cf:21:b7:02:5d:bc:74:65:e1:6d:bd:e5:15:00:80:4f:
49:a2:e5:cf:dd:9a:f1:12:36:a9:d3:bc:96:db:ea:b7:bb:fa:
28:af:f2:d9:b7:8e:ee:99:74:fd:3f:80:ed:f6:17:b5:a5:24:
50:4e:cd:78:c5:99:9b:30:55:4a:6a:56:5e:f8:fe:c1:3f:bf:
d7:f8:31:7e:89:61:d7:23:7b:59:3e:b3:7c:b6:5b:ef:1d:9b:
18:b2:55:81:13:1c:f7:dc:53:11:24:0d:d6:44:04:19:99:53:
f2:9c:77:ed:ff:05:a9:31:33:7a:1f:35:74:f3:11:a7:27:e6:
64:72:59:36:a7:42:27:83:03:bc:2c:0a:4b:be:40:25:c8:fe:
ca:8f:c9:9e:fa:e8:a9:bb:5b:7f:87:05:ad:06:3d:08:fd:2c:
c9:04:55:db:7a:41:b4:10:d9:ac:e4:c4:43:f1:b6:d3:99:8b:
7d:cd:3d:9b:fc:d8:77:21:5d:58:22:9a:0a:e3:81:6d:3a:52:
52:59:5a:75:b1:42:26:b3:6f:b4:e1:01:36:22:4c:66:f0:0b:
63:f1:71:05:b3:53:07:a3:09:30:e8:2b:05:c6:82:21:48:63:
a3:77:07:d4:a4:85:9c:7c:1e:a0:99:67:e5:73:fe:65:50:28:
7d:dd:1b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:47:07 2024 by rpki-client on console-ams.rpki-client.org