Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3133342e3235352e3137362e302f32312d3332203d3e203531313637.roa
File: 3133342e3235352e3137362e302f32312d3332203d3e203531313637.roa (raw, json)
Hash identifier: /eASGk97ZTJ599G/EkemEv9CRnQd4kA9+WppQYbB0cA=
Subject key identifier: A3:3A:DA:47:38:AB:B8:0B:A2:7B:F6:24:BC:D4:D4:D2:CE:B1:13:22
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 22E9E3E056B52720449A0622DCCF57894AB7D774
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3133342e3235352e3137362e302f32312d3332203d3e203531313637.roa
Signing time: Thu 27 Jun 2024 17:24:11 +0000
ROA not before: Thu 27 Jun 2024 17:19:11 +0000
ROA not after: Thu 26 Jun 2025 17:24:11 +0000
asID: 51167
IP address blocks: 134.255.176.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:e9:e3:e0:56:b5:27:20:44:9a:06:22:dc:cf:57:89:4a:b7:d7:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 27 17:19:11 2024 GMT
Not After : Jun 26 17:24:11 2025 GMT
Subject: CN=A33ADA4738ABB80BA27BF624BCD4D4D2CEB11322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e2:fd:be:54:c3:bc:d1:fb:ae:88:57:0c:95:
60:72:fe:1e:97:72:fb:b0:b1:e4:a2:9d:89:c5:87:
ba:69:fd:50:3b:ff:a3:bf:83:eb:17:74:98:f5:31:
dd:b1:72:55:6b:d0:1e:3d:a6:59:15:1f:82:ba:8a:
4f:4b:5d:1c:2f:0a:43:a3:e1:70:41:83:c0:e7:dd:
d1:69:52:9b:5e:40:3c:d1:32:33:7c:da:c2:fa:fa:
fa:6f:a7:33:84:e0:86:b0:24:e5:9e:86:81:d0:e9:
9a:6c:ee:e8:db:b8:d5:73:0e:ce:e7:ec:87:b4:e8:
51:9d:dd:71:f3:46:b1:97:7d:81:70:f4:42:fd:e3:
a1:77:7f:9b:db:81:45:e9:0b:f9:cd:0b:ff:8a:bb:
aa:c1:3b:62:75:a8:6d:2c:47:06:65:73:cf:5b:0c:
f4:2c:c2:96:17:7d:11:26:e1:58:fe:62:e9:79:d4:
f2:ce:9f:2a:d6:95:f1:34:12:e6:77:65:02:b1:5f:
5e:23:2a:ae:09:28:82:e6:cc:4d:52:c4:ea:b8:dc:
a7:38:90:a6:f1:5a:75:55:9d:54:78:b6:6b:27:f9:
1c:94:96:3e:b5:61:4e:35:37:b2:ce:d3:da:f1:a4:
df:4a:d1:0d:72:ff:28:b1:f1:03:30:d6:25:32:92:
94:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3A:DA:47:38:AB:B8:0B:A2:7B:F6:24:BC:D4:D4:D2:CE:B1:13:22
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3133342e3235352e3137362e302f32312d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.255.176.0/21
Signature Algorithm: sha256WithRSAEncryption
76:df:fd:57:9b:d8:2f:dd:72:bb:55:37:bc:09:69:fa:ed:32:
6f:9a:75:6e:e1:01:73:fe:76:a4:8a:6a:1a:ee:26:bb:62:d7:
63:40:a6:38:0a:81:c9:f5:a6:9c:37:ee:97:e1:f9:59:97:67:
59:f6:e2:c2:7b:38:87:93:09:ef:7c:69:bb:07:52:ac:9f:69:
b2:99:a4:6c:04:ff:ba:ef:0a:38:00:19:23:aa:f0:b4:d9:02:
96:05:9c:c3:12:09:40:88:87:00:8d:11:99:67:e9:e7:82:4a:
9b:bf:0d:38:48:31:d7:9a:45:59:25:61:9b:8b:07:81:34:4b:
66:19:05:89:cf:2f:5f:85:91:5d:b1:ed:2d:9b:8d:9b:1f:f2:
60:ec:1d:fa:11:c5:8a:cc:47:bd:46:d0:dc:c1:41:a9:b4:15:
ac:7a:51:99:61:86:15:0d:50:86:ec:71:c6:ae:be:01:ee:43:
e4:ec:06:42:02:c4:6c:be:44:70:3c:a2:23:f7:5e:42:82:7d:
f0:cf:49:e2:66:65:2c:e7:6c:31:d1:18:69:dd:2e:06:8c:15:
52:48:81:ea:86:73:fd:3a:25:b9:07:18:60:32:c3:81:ae:bf:
2d:26:18:5b:cd:f9:11:3d:a7:b0:f9:35:5d:cd:d5:0a:25:e5:
de:e2:82:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:29:12 2024 by rpki-client on console-ams.rpki-client.org