Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3132332e3232372e302f32342d3332203d3e20313431393935.roa
File: 3130392e3132332e3232372e302f32342d3332203d3e20313431393935.roa (raw, json)
Hash identifier: tIQrcOtjY15q+t0MM7u2D6F+Z/DtN9USLqSzysd9puk=
Subject key identifier: 78:C9:89:E7:FD:F7:00:B6:45:7A:0F:15:01:C6:74:FD:FA:49:6B:0F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3AF9D4912BC36E5EE60868C75118CB799AA1295D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3132332e3232372e302f32342d3332203d3e20313431393935.roa
Signing time: Mon 26 Feb 2024 08:53:11 +0000
ROA not before: Mon 26 Feb 2024 08:48:11 +0000
ROA not after: Mon 24 Feb 2025 08:53:11 +0000
asID: 141995
IP address blocks: 109.123.227.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:f9:d4:91:2b:c3:6e:5e:e6:08:68:c7:51:18:cb:79:9a:a1:29:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:11 2024 GMT
Not After : Feb 24 08:53:11 2025 GMT
Subject: CN=78C989E7FDF700B6457A0F1501C674FDFA496B0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:71:09:2b:36:c5:c4:fa:8e:c7:bb:39:f4:27:
c4:7c:04:75:9f:56:d7:1b:fc:26:73:b3:c5:5d:f1:
af:89:9d:dd:f4:a1:64:d8:65:83:33:a7:6c:9a:31:
f3:69:ea:bb:1a:00:27:b8:52:d3:46:4b:83:ce:0b:
9e:21:94:7d:76:1e:2e:76:70:76:61:7b:b8:4c:8d:
cf:53:f8:b9:64:c3:90:b5:cb:75:b1:a4:6a:91:9e:
ce:ae:ae:6d:ad:f2:13:89:e2:b9:2f:3b:3c:f6:c2:
63:e6:39:f1:2c:10:ee:9f:c9:ae:e4:97:30:ef:08:
b8:31:5d:2e:40:af:c5:07:67:7b:ef:e9:31:ea:e8:
59:71:39:0e:d9:4d:54:03:0a:b1:5d:61:b4:5d:31:
11:82:4a:9f:d3:bd:0a:27:b0:d1:8f:74:65:c8:8b:
12:ba:95:46:9d:fb:82:e1:83:4e:51:aa:47:58:fb:
64:53:4e:31:44:c6:98:a4:f2:91:76:ce:a4:c5:a9:
08:3f:5a:81:25:22:0a:b6:79:c3:b3:d0:2b:6c:f8:
3d:cc:34:32:07:74:12:b2:8e:13:5b:51:60:11:90:
56:a6:d0:a6:78:bb:d0:9f:c8:34:26:84:24:c6:a3:
f4:83:05:27:03:90:a6:22:b6:3c:4b:51:67:3a:7e:
19:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C9:89:E7:FD:F7:00:B6:45:7A:0F:15:01:C6:74:FD:FA:49:6B:0F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3130392e3132332e3232372e302f32342d3332203d3e20313431393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.123.227.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:c5:dc:ed:b0:13:ee:f2:c3:ca:64:ec:4b:d8:7c:66:4e:43:
cc:da:4d:1c:0f:14:08:02:85:67:cf:cc:d5:94:d2:b0:26:89:
7a:10:7f:58:e2:3f:af:fb:5a:29:61:dc:90:bd:df:6c:d1:b1:
4d:b9:a7:64:f5:35:00:97:99:04:15:ea:b6:36:f6:3d:ec:f5:
1e:e7:0d:b1:a2:e8:94:ba:3e:18:72:3a:e0:af:a3:52:84:d7:
b1:28:50:f9:bc:85:7f:9a:f3:fb:de:8a:6d:80:3e:91:30:5f:
fb:e4:59:fa:7b:d6:27:c3:2c:d6:58:73:54:0f:25:dd:d2:44:
72:3f:ba:33:f0:67:ce:5c:22:37:09:66:09:fd:58:3e:e1:a2:
8f:9c:f2:ea:a2:31:96:e9:e6:61:06:96:59:74:00:ca:b3:01:
dd:99:e7:09:bb:a3:15:11:53:9a:00:a8:a7:b2:9f:4b:9b:8d:
b7:22:69:3b:7d:82:7c:e1:dc:0b:2e:95:c5:2d:26:98:0f:9d:
74:61:f9:8a:c7:d8:4d:6f:87:9f:8a:ba:d5:71:da:91:93:7c:
b9:c3:9d:cc:d3:19:c3:1e:4b:3e:f3:1a:dc:3f:d0:f9:47:79:
a4:eb:eb:d6:9f:36:07:be:f3:10:3d:7f:6f:46:67:6f:58:99:
15:78:03:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 09:23:49 2024 by rpki-client on console-ams.rpki-client.org