Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38392e3134372e3132382e302f31382d3234203d3e20323034313730.roa
File: 38392e3134372e3132382e302f31382d3234203d3e20323034313730.roa (raw, json)
Hash identifier: ZE+po3QLSY5s/y1thsPYHBxaXd6VFFaxkn7EhsFS37A=
Subject key identifier: EC:50:6B:13:60:8F:4C:EE:DB:97:AB:04:F6:C7:70:60:A4:7F:59:7A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 20600F3E689563FEE3812D11BFD11FE13991CF2D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38392e3134372e3132382e302f31382d3234203d3e20323034313730.roa
Signing time: Mon 26 Feb 2024 08:53:22 +0000
ROA not before: Mon 26 Feb 2024 08:48:22 +0000
ROA not after: Mon 24 Feb 2025 08:53:22 +0000
asID: 204170
IP address blocks: 89.147.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:60:0f:3e:68:95:63:fe:e3:81:2d:11:bf:d1:1f:e1:39:91:cf:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:22 2024 GMT
Not After : Feb 24 08:53:22 2025 GMT
Subject: CN=EC506B13608F4CEEDB97AB04F6C77060A47F597A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9a:e7:88:f1:ee:51:29:5c:de:f9:5b:df:25:
70:cc:f2:0d:86:31:e6:c9:75:cc:43:8f:57:c5:00:
95:19:d8:3a:29:94:e4:e4:2f:13:36:0d:25:95:6e:
dd:f5:02:62:6b:a1:26:7b:13:17:85:ca:88:d9:0f:
26:d2:b9:99:93:99:21:86:b4:e5:e1:94:2e:c7:94:
c6:9e:af:fd:9d:a9:48:1b:5e:63:a8:0c:f3:9a:26:
7d:7d:68:00:b5:4e:05:49:cf:db:76:b1:07:eb:9b:
0d:1f:27:7d:a7:36:41:40:06:d4:55:ad:64:21:a2:
4b:43:8c:5a:4a:94:af:a2:a9:04:bb:07:7a:a7:24:
85:a3:f9:b8:85:25:66:81:95:5b:a0:36:61:8c:9a:
eb:8c:16:bc:bb:ad:6f:77:9b:ee:90:42:8f:b9:72:
d0:21:6c:88:45:a7:fe:ad:21:89:a2:83:34:52:97:
7a:2f:eb:24:cc:47:79:4e:a7:45:39:e6:23:44:64:
9b:b1:b2:56:e1:42:a7:50:14:97:1b:df:36:9d:ee:
4a:e1:9a:87:25:4d:89:61:c2:5d:cd:11:68:04:ef:
aa:9c:2f:ec:71:97:db:ad:71:cb:9b:26:80:b4:fc:
18:b9:10:84:fe:f0:bb:95:bf:18:53:f6:a9:49:b1:
65:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:50:6B:13:60:8F:4C:EE:DB:97:AB:04:F6:C7:70:60:A4:7F:59:7A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38392e3134372e3132382e302f31382d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.147.128.0/18
Signature Algorithm: sha256WithRSAEncryption
78:07:f9:7a:2d:b1:61:54:c2:40:32:79:67:7a:15:22:b7:8b:
76:ca:75:2f:6b:54:8e:3d:1c:b7:9a:05:02:16:3c:fa:c8:d2:
5a:be:8a:29:14:00:ef:b6:c2:94:fb:a4:60:02:7b:67:2d:42:
e2:66:54:66:8e:cb:1d:0b:8f:a1:ff:b7:be:20:ed:4f:c1:e7:
51:60:c4:ad:89:db:e6:f9:3f:66:fb:bc:b1:2a:d2:b1:a5:95:
56:e6:13:72:8e:74:f7:1e:b1:55:2b:9f:99:b2:a0:25:40:da:
52:cf:de:cb:72:23:a8:0e:02:61:c2:bc:66:87:23:17:99:53:
94:8d:c9:7e:b6:3e:ac:f2:ee:56:20:b1:b9:31:4b:95:db:30:
07:b5:9d:3d:f7:8a:56:c9:89:93:04:0e:fd:30:b4:99:dc:74:
d2:e7:11:15:d6:2f:6f:3b:dd:bc:cf:a4:52:cc:70:88:21:5d:
0c:75:d9:1d:57:34:db:4f:81:37:90:5b:84:f5:78:6e:82:7a:
8b:e5:39:a9:45:d0:27:4d:01:5b:ff:1f:f9:e2:de:f3:31:33:
a8:b3:0a:6e:c5:7d:04:74:57:ee:95:d4:14:6f:78:20:e3:40:
d5:04:d1:50:5c:85:10:c7:a8:b0:b5:27:de:98:66:92:41:27:
29:99:fe:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 14:35:48 2024 by rpki-client on console-fra.rpki-client.org