Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e33312e3232342e302f32312d3231203d3e203438353933.roa
File: 38352e33312e3232342e302f32312d3231203d3e203438353933.roa (raw, json)
Hash identifier: /FTqfVvlBieIS3wNfgj7eIzZk686On7mlpqOsxUyxtU=
Subject key identifier: E8:23:87:70:DB:35:BE:2E:2E:2F:A4:9E:8E:88:A0:B7:3C:10:27:ED
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6757EF9D444513E2EEC41D059B89BA5E1E7DF42C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e33312e3232342e302f32312d3231203d3e203438353933.roa
Signing time: Tue 08 Aug 2023 08:18:43 +0000
ROA not before: Tue 08 Aug 2023 08:13:43 +0000
ROA not after: Tue 06 Aug 2024 08:18:43 +0000
asID: 48593
IP address blocks: 85.31.224.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 16:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:57:ef:9d:44:45:13:e2:ee:c4:1d:05:9b:89:ba:5e:1e:7d:f4:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Aug 8 08:13:43 2023 GMT
Not After : Aug 6 08:18:43 2024 GMT
Subject: CN=E8238770DB35BE2E2E2FA49E8E88A0B73C1027ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:52:09:e2:39:49:3f:01:b4:75:01:a2:ae:f7:
aa:36:3f:c3:9a:c2:ee:7d:d8:fd:39:5b:90:0c:cf:
ff:08:77:80:68:f7:a9:37:8a:93:80:4c:f0:e9:c3:
aa:b9:85:49:9b:0d:4e:2d:14:36:fa:17:20:16:9b:
64:f0:95:3c:36:04:85:22:48:ee:05:8e:50:cd:3b:
6f:61:e6:bc:15:5d:d3:b6:32:6e:75:f4:f2:63:9c:
4e:38:da:a7:2d:f2:46:a8:3f:d4:03:f0:f9:78:26:
18:56:7d:ec:37:78:88:11:a3:ce:3d:c8:f7:ff:49:
7b:ed:91:38:2b:e1:b9:7c:bf:82:48:e7:0d:83:af:
03:e3:a9:2f:2f:76:88:fe:58:28:4b:d2:82:6f:6b:
2c:d1:1c:af:1e:1e:20:31:74:70:ef:29:31:5e:f6:
40:fc:13:e2:a3:52:e3:d2:c3:dc:e3:d5:ad:d2:49:
1c:bf:1b:d0:d0:44:00:ff:4e:68:73:83:df:4f:4e:
5d:6d:1f:9a:40:ac:12:61:e4:34:b9:d0:7a:67:5c:
ee:e1:fd:ae:79:f0:3d:a0:f0:95:6a:4e:6e:9c:e7:
15:a0:67:01:37:7b:61:c6:95:77:2f:b2:4a:eb:14:
08:6f:fa:c4:8d:ba:2c:80:29:1b:1c:bb:1d:1e:81:
ab:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:23:87:70:DB:35:BE:2E:2E:2F:A4:9E:8E:88:A0:B7:3C:10:27:ED
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e33312e3232342e302f32312d3231203d3e203438353933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.224.0/21
Signature Algorithm: sha256WithRSAEncryption
2f:88:25:02:93:d3:bf:a0:55:64:f9:cb:8d:61:81:e3:11:2e:
52:e7:fc:28:81:76:49:72:e9:e9:31:8e:3d:0b:a9:3b:c9:b4:
a1:9e:af:ad:c8:2f:4e:03:d3:f8:1f:7f:61:0d:2f:e4:29:0e:
2b:ac:0b:5e:04:3f:ad:3d:b4:b7:57:5e:0f:40:25:aa:b2:34:
ab:4c:39:c1:57:21:a9:02:5f:53:a1:19:0d:6c:a6:7d:1f:2d:
01:7d:7a:29:ef:5d:8c:bc:0c:17:2d:e5:62:3e:48:eb:c8:4c:
d9:88:88:26:01:f2:6a:3d:8e:45:fa:00:cd:62:08:bf:53:04:
3d:26:57:08:86:49:ae:3f:36:b0:6c:9e:e2:0a:ec:a6:3e:d9:
a2:a9:f2:c1:0d:61:87:aa:cb:94:0c:86:0e:a1:b5:56:73:0e:
a6:1b:4f:f7:2c:ef:60:be:c4:d4:a0:0b:1c:35:55:b7:b6:91:
15:c7:33:b6:73:70:a2:66:bf:53:af:97:c9:0f:9c:c4:21:18:
27:bb:3a:70:a4:ba:ab:08:61:a5:67:24:ae:2f:3e:69:85:23:
11:b3:d6:f3:f7:94:80:4a:16:4b:c0:a9:77:67:c4:56:80:16:
e1:c5:21:91:64:53:7b:0c:d4:2e:85:17:a4:29:cf:ed:3c:a1:
cd:4d:95:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 19:28:05 2024 by rpki-client on console-fra.rpki-client.org