Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3130362e3132312e302f32342d3234203d3e203330393637.roa
File: 3130392e3130362e3132312e302f32342d3234203d3e203330393637.roa (raw, json)
Hash identifier: WHy1czcv2zwjZNjmL/e6eYUF92UA05zZtCLsZVVK8C8=
Subject key identifier: 94:6D:D9:AD:F7:0F:5D:AC:88:5F:EA:B8:F9:3D:6C:B3:B8:EB:B8:A9
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 311670140A5E3088CD97BB96989E529BD12D0943
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3130362e3132312e302f32342d3234203d3e203330393637.roa
Signing time: Fri 20 Sep 2024 10:25:08 +0000
ROA not before: Fri 20 Sep 2024 10:20:08 +0000
ROA not after: Fri 19 Sep 2025 10:25:08 +0000
asID: 30967
IP address blocks: 109.106.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 13:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:16:70:14:0a:5e:30:88:cd:97:bb:96:98:9e:52:9b:d1:2d:09:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 20 10:20:08 2024 GMT
Not After : Sep 19 10:25:08 2025 GMT
Subject: CN=946DD9ADF70F5DAC885FEAB8F93D6CB3B8EBB8A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c5:2f:4c:d3:26:75:75:5a:19:d3:a5:00:a7:
6f:0c:37:e1:fa:eb:89:e4:aa:04:a3:3d:98:c5:68:
68:e2:ec:fc:3e:32:c7:dc:4c:3f:54:e5:1a:74:df:
3c:f4:56:0a:2a:27:62:29:00:44:81:5e:20:ee:e4:
8d:23:45:23:1d:fa:b5:6a:1f:bc:f2:f1:9c:e9:76:
71:03:27:6a:77:10:6b:d7:fd:64:87:ef:30:93:87:
bf:48:49:c0:04:bb:33:5b:c9:b0:dc:b8:c3:80:31:
1d:77:29:4b:bb:fd:f2:2e:13:08:20:4f:60:f6:06:
b2:7d:29:d2:8a:cc:d7:24:fe:e5:65:15:05:d0:99:
fd:ce:d2:ac:2e:0c:9f:2d:93:97:e0:90:2e:9a:6d:
c9:4d:09:7e:90:bb:14:33:c0:a3:47:6f:f5:32:c0:
26:d5:53:7d:9b:b2:1e:74:c9:8b:42:5b:b6:39:e5:
a2:23:ef:36:4d:b6:7d:d5:00:16:eb:0b:51:87:6c:
b5:51:c6:d8:ac:69:e7:a8:4b:26:ee:2f:a3:39:65:
ca:16:59:be:75:31:26:3a:8d:04:9f:2d:f5:50:ee:
0e:42:41:0e:36:10:70:17:47:ad:59:d1:74:09:7b:
9b:cb:72:4d:9c:54:f9:10:3e:d9:31:4d:c8:e0:01:
d9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6D:D9:AD:F7:0F:5D:AC:88:5F:EA:B8:F9:3D:6C:B3:B8:EB:B8:A9
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3130362e3132312e302f32342d3234203d3e203330393637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.106.121.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:24:ad:41:0e:3e:41:ae:51:08:28:dd:e1:06:ec:8e:b4:d8:
e3:be:46:2d:d5:a9:b8:16:99:af:bf:92:e1:0b:8e:53:b5:5c:
8f:8f:61:aa:18:ba:e2:d0:1e:a9:dc:79:b3:11:8f:e0:81:42:
6b:96:e9:9a:35:1b:7c:f7:9b:18:b2:fd:5e:9a:06:6a:ab:45:
80:a2:f6:c8:2d:b8:23:fd:72:b5:e1:f9:ad:b3:0f:e0:b2:79:
0d:d5:e4:18:34:d3:a0:71:94:95:7e:26:36:eb:25:6d:9d:96:
15:87:87:28:9e:56:5f:2c:ad:30:ca:f3:5b:3e:66:42:52:85:
48:31:c4:f4:34:1a:81:31:ab:d4:3f:2f:e6:d5:1c:87:82:b7:
66:fd:70:2b:5d:5e:1f:ac:c9:3f:ed:16:03:5c:4c:06:60:96:
b9:fd:2e:f5:54:56:5c:d7:e6:3f:2c:2c:6e:3b:9f:e1:5b:3e:
91:43:5e:a9:2f:92:8e:9b:00:f7:3b:e9:49:a0:65:72:ce:9c:
cb:b2:a3:eb:52:3d:b4:44:3a:69:aa:e7:17:63:38:4a:b2:4f:
62:b7:c0:a7:59:01:7d:3d:0e:f4:53:1a:23:60:61:bd:50:69:
75:7f:6c:9f:bc:9a:2d:87:78:2a:4d:a2:4e:d7:a6:ac:e2:73:
6e:72:08:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:36:38 2025 by rpki-client