Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3133382e3139392e38302e302f32302d3234203d3e20323034313730.roa
File: 3133382e3139392e38302e302f32302d3234203d3e20323034313730.roa (raw, json)
Hash identifier: P4U8DheLQ/T+Lx3i2AYY93ZinBmocDMdGHmeTdXzvwo=
Subject key identifier: 87:20:98:BD:E5:C2:58:2C:CA:56:24:3E:31:F4:9A:A3:4E:09:5B:E9
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 093223BF3BA7922E0FA53E0B361D27FCDBD22DD2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3133382e3139392e38302e302f32302d3234203d3e20323034313730.roa
Signing time: Mon 26 Feb 2024 08:53:13 +0000
ROA not before: Mon 26 Feb 2024 08:48:13 +0000
ROA not after: Mon 24 Feb 2025 08:53:13 +0000
asID: 204170
IP address blocks: 138.199.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:32:23:bf:3b:a7:92:2e:0f:a5:3e:0b:36:1d:27:fc:db:d2:2d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:13 2024 GMT
Not After : Feb 24 08:53:13 2025 GMT
Subject: CN=872098BDE5C2582CCA56243E31F49AA34E095BE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b4:54:32:98:ba:96:28:82:6c:73:59:e3:10:
74:2d:f5:97:83:7f:79:03:da:73:64:87:49:e8:31:
cd:c4:ed:75:b3:04:4e:7b:88:f4:60:88:48:93:fe:
d0:c0:8a:0e:92:35:9c:26:49:92:37:1e:39:70:5e:
6b:e9:90:a9:e4:2a:a9:b2:ac:de:38:67:d1:c4:bf:
ac:ab:33:b7:4c:dc:c4:a3:9d:5d:55:00:16:c4:e8:
c8:1a:8e:91:a3:a3:5b:e8:6f:9d:4f:33:6c:53:c9:
1a:dd:88:01:f5:54:ba:01:42:40:43:52:67:06:6f:
71:7f:f8:d9:a7:d3:57:68:89:2c:dd:8a:46:32:85:
e8:cc:ac:1f:a5:17:4f:26:1a:b7:f3:3e:4e:28:35:
fc:7c:90:de:b2:20:fb:b7:1c:6c:35:f5:b1:8d:08:
10:6a:d9:e0:06:dd:22:82:96:21:8c:63:3e:27:01:
76:fc:2f:cf:ff:6f:20:34:53:92:b2:7c:c3:bb:9b:
c8:ae:c4:73:36:55:19:9f:b5:f2:ad:0a:a0:03:71:
59:bd:1e:3a:59:d2:47:4c:e3:8e:be:16:af:3e:9b:
d0:ee:43:7e:d9:c0:48:76:de:c5:16:fb:82:10:9f:
12:da:78:e7:7d:23:16:ac:d3:34:f3:53:8a:63:7a:
b0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:20:98:BD:E5:C2:58:2C:CA:56:24:3E:31:F4:9A:A3:4E:09:5B:E9
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3133382e3139392e38302e302f32302d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.199.80.0/20
Signature Algorithm: sha256WithRSAEncryption
51:6e:e5:71:30:d9:48:42:67:9e:f6:7d:bb:00:d5:41:fb:29:
aa:eb:56:ea:61:21:fd:bb:59:30:03:14:cb:d9:0d:56:4f:04:
61:92:aa:fd:34:6e:4f:12:da:a8:c9:2d:32:9c:1c:21:fd:52:
33:02:41:99:69:d8:ac:d6:e7:c2:3e:c0:0e:05:1a:9d:79:0c:
c9:d8:5e:9b:e4:bb:51:08:95:94:2b:14:02:85:80:3b:e4:36:
4c:d3:18:46:2d:be:ba:2a:e8:2d:6a:aa:6e:41:2b:2f:41:f6:
a6:43:3d:f7:10:ee:0b:78:b9:3c:42:0c:26:4b:c7:a5:bc:f6:
46:96:8a:fe:7d:6f:5e:36:f1:63:6c:ca:11:3a:08:dc:8a:40:
94:1f:5f:d3:32:79:37:dd:aa:4f:f8:02:9e:7a:8d:3d:b0:e4:
74:8a:82:e5:04:b5:56:db:5a:e7:d9:a6:60:3f:88:3e:23:d1:
ea:f5:f1:02:61:0d:64:5d:a7:74:33:32:9b:96:99:85:4f:dc:
63:ec:d2:48:9c:0f:76:c4:69:52:83:ba:de:25:20:78:56:7d:
8f:c5:61:17:ec:28:84:14:39:b4:80:b8:03:66:db:ac:14:31:
40:68:96:70:f9:34:30:3d:87:12:a5:ae:5c:47:1a:5b:e7:fe:
90:c4:60:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 09:23:49 2024 by rpki-client on console-ams.rpki-client.org