Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3130362e3132332e302f32342d3234203d3e203330393637.roa
File: 3130392e3130362e3132332e302f32342d3234203d3e203330393637.roa (raw, json)
Hash identifier: LD2OKSQ7mTsamI+b5awvPlc556hr5kz8XiRU5Pp82d0=
Subject key identifier: E6:46:89:22:28:3F:F4:FA:19:6B:E9:B8:07:E0:01:E9:4B:D5:6B:67
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2A2CF7B7E0A73F742172D577D266A826FB215EE8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3130362e3132332e302f32342d3234203d3e203330393637.roa
Signing time: Fri 20 Sep 2024 10:25:26 +0000
ROA not before: Fri 20 Sep 2024 10:20:26 +0000
ROA not after: Fri 19 Sep 2025 10:25:26 +0000
asID: 30967
IP address blocks: 109.106.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:2c:f7:b7:e0:a7:3f:74:21:72:d5:77:d2:66:a8:26:fb:21:5e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 20 10:20:26 2024 GMT
Not After : Sep 19 10:25:26 2025 GMT
Subject: CN=E6468922283FF4FA196BE9B807E001E94BD56B67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fa:3a:33:db:06:ac:3a:38:60:2c:46:30:1a:
81:34:11:66:63:ab:1c:20:7e:c7:53:8b:76:1a:a5:
1b:2d:c2:9b:9f:25:52:39:a3:41:d5:29:60:ae:03:
5b:93:26:be:8a:69:9c:da:98:b7:4a:d9:07:1c:d1:
eb:9e:4e:df:04:bb:f4:72:4c:00:5b:51:a1:c2:f5:
c5:93:99:58:41:db:ca:62:02:d9:df:8c:50:50:6f:
c8:da:1f:4e:d6:5b:36:52:49:c0:4a:9d:0b:c0:a1:
e3:39:b4:53:d6:0a:d6:fb:3f:52:09:23:d5:06:31:
3a:d4:3c:7d:f1:50:03:aa:1a:7b:f3:dc:65:4e:97:
b1:7a:3d:70:d0:be:57:d4:fc:6f:86:8b:02:48:21:
47:4c:fa:37:a5:e6:1f:c7:c5:c2:1b:2a:9c:bf:0c:
a8:f8:79:4d:47:8d:92:4a:e6:74:75:74:cc:d8:2e:
1a:07:80:8f:d0:87:fd:3c:a0:86:37:d8:21:66:31:
76:f4:0b:50:38:53:d2:47:61:5b:6e:29:21:9b:41:
78:ac:41:bc:c9:e5:59:f7:bd:d0:e7:f8:dc:3c:7b:
fb:96:7b:61:54:b5:21:59:ac:4f:49:62:1d:68:e9:
ad:a8:cf:39:81:18:d9:14:cf:40:43:b8:db:cc:f0:
7a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:46:89:22:28:3F:F4:FA:19:6B:E9:B8:07:E0:01:E9:4B:D5:6B:67
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3130362e3132332e302f32342d3234203d3e203330393637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.106.123.0/24
Signature Algorithm: sha256WithRSAEncryption
80:7a:40:81:0b:ea:67:ae:3a:4e:da:4b:e0:ce:18:f3:37:f4:
15:42:13:9c:49:87:ec:e6:e3:8c:9e:2f:18:2d:c9:60:f4:aa:
10:ef:4a:11:b2:1d:86:70:a8:62:e9:44:a5:02:5e:56:cf:ad:
ef:25:ed:6b:ef:46:a9:ad:0e:67:e1:d1:e7:5a:61:b6:55:57:
9f:e1:cb:e3:02:80:7c:89:6e:75:40:86:2c:98:90:5a:48:e3:
23:43:1f:46:40:a7:47:2b:48:ee:f7:e1:34:86:57:5d:25:11:
d2:73:57:b6:de:5a:15:4a:89:de:c5:bf:2f:74:20:42:a3:d6:
34:8f:df:2c:fd:f7:67:82:c6:c4:76:9e:20:34:60:82:38:21:
21:db:ff:c0:5c:da:3c:36:f4:54:9f:11:fc:6c:67:43:fc:83:
9c:08:2a:1a:da:cf:35:b7:a3:c9:ad:aa:99:9f:56:d3:11:45:
7e:b6:8f:c6:79:be:d4:1d:7e:0f:e8:22:b8:72:53:f7:a8:03:
2e:6a:8c:d3:39:f7:7e:b5:ee:f2:b7:7c:62:05:be:15:e6:27:
4a:07:67:ea:0c:71:c7:fc:06:ce:a4:57:72:07:ea:20:3b:54:
88:79:7d:8e:70:4e:e1:fc:75:f6:46:04:45:0e:4a:39:ff:03:
a8:62:07:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:29:12 2024 by rpki-client on console-ams.rpki-client.org