Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38392e3134372e3130302e302f32342d3332203d3e203531313637.roa
File: 38392e3134372e3130302e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: hmSAjRLyO+KDYcjIqZKVb3oiO/AF3VQjjftewYufajA=
Subject key identifier: 04:95:FF:0A:BF:D8:2D:0D:1E:FE:7D:49:9E:0A:34:5D:30:B6:3A:8F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 264AC4A0A69931CAA8280C4E9A46662380CD8DEE
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38392e3134372e3130302e302f32342d3332203d3e203531313637.roa
Signing time: Thu 25 Apr 2024 08:01:11 +0000
ROA not before: Thu 25 Apr 2024 07:56:11 +0000
ROA not after: Thu 24 Apr 2025 08:01:11 +0000
asID: 51167
IP address blocks: 89.147.100.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:4a:c4:a0:a6:99:31:ca:a8:28:0c:4e:9a:46:66:23:80:cd:8d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 25 07:56:11 2024 GMT
Not After : Apr 24 08:01:11 2025 GMT
Subject: CN=0495FF0ABFD82D0D1EFE7D499E0A345D30B63A8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:82:66:6e:2b:d3:36:37:fe:a7:29:fe:24:81:
67:3f:a7:2f:04:72:5c:0d:91:8b:9d:53:c9:cc:3a:
e0:3a:3f:fd:f4:cd:36:3b:a6:c6:38:08:de:21:e1:
fc:1d:50:b9:49:d9:61:2c:bb:39:c7:33:ef:82:7b:
16:ac:60:3f:94:a9:e9:e0:db:13:47:4c:b3:e9:5f:
0b:ea:af:bf:99:9a:4f:3b:e3:e6:ce:87:f2:86:fb:
f8:e6:ef:c3:3c:73:b1:24:80:ad:c9:62:23:d1:61:
8c:ef:ff:08:ad:9e:c3:0f:a3:fb:84:7b:ac:cf:64:
76:cf:ac:8d:36:43:43:57:d5:0f:e2:7c:1e:c4:16:
d2:81:a5:c8:e4:34:48:b9:41:d2:d6:3f:43:43:42:
da:c2:45:12:3f:88:75:1c:e8:38:e2:c5:c4:93:c8:
52:ed:98:fe:4e:df:0f:a5:11:66:34:de:8f:0d:90:
01:37:17:76:16:f9:d3:f9:68:8f:4b:b5:7a:37:9b:
29:2f:10:78:21:7b:07:eb:50:b8:41:d9:81:1b:b7:
58:41:e8:55:3e:65:34:96:cd:42:4c:bc:c8:6e:99:
c6:c9:cb:6d:4b:46:c1:a6:4f:e6:3a:51:f4:81:09:
f2:88:69:8e:4f:68:8c:ad:83:90:66:9a:cd:0c:a0:
09:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:95:FF:0A:BF:D8:2D:0D:1E:FE:7D:49:9E:0A:34:5D:30:B6:3A:8F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38392e3134372e3130302e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.147.100.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:a1:c6:86:8b:75:7b:85:12:52:74:b8:db:c9:6a:94:a5:dc:
b6:04:30:a2:e5:1d:df:ff:87:52:ef:6a:9e:69:8c:7c:22:ee:
09:28:22:26:7a:c8:20:21:f4:cf:4a:e9:7b:a1:1f:ea:9d:95:
ec:16:9c:ba:b3:33:7d:52:13:91:4d:91:42:7c:fa:f6:09:59:
36:20:6d:a9:9e:ef:f1:e8:2b:38:77:c4:fd:cb:aa:d5:d1:e7:
f7:ef:c9:5b:e0:1a:bf:af:2e:36:6d:86:99:58:8c:d7:25:3f:
50:1e:cb:38:2d:41:19:3e:0e:8c:37:e1:43:30:56:c4:61:7f:
88:fb:fe:8a:ab:b8:a1:cf:17:77:42:92:a8:f8:43:17:bd:a9:
54:a7:b4:a5:54:75:d5:c8:19:4d:35:e4:3b:dc:a7:8c:7f:3b:
45:2d:9d:21:3f:ab:29:ed:89:34:cb:8a:ef:52:cf:76:b4:ce:
33:75:0a:68:b0:f6:ae:5b:05:3c:15:e3:4f:b3:e5:03:70:e0:
3f:2c:95:7a:10:92:5a:9b:9c:4a:54:51:4d:70:44:c5:df:28:
fd:8c:37:d6:54:74:22:d2:c2:9f:47:57:71:98:0a:5c:15:94:
4f:8b:9d:16:d9:af:8a:57:d6:8d:40:7f:b6:07:74:56:01:d7:
bb:45:0c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 14:35:47 2024 by rpki-client on console-fra.rpki-client.org