Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31342e3134382e302f32322d3234203d3e203437353833.roa
File: 3134352e31342e3134382e302f32322d3234203d3e203437353833.roa (raw, json)
Hash identifier: 5gjJA7gB2zcgVEupi+VTxu7pSDfaRBreptMeDo7gJE8=
Subject key identifier: 2C:30:26:D0:36:F4:94:53:26:7F:B7:00:7A:9F:58:3E:43:0D:65:4E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1C194DDCA1020C38D4DD9687780E5894BF3F524C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31342e3134382e302f32322d3234203d3e203437353833.roa
Signing time: Mon 26 Feb 2024 08:53:18 +0000
ROA not before: Mon 26 Feb 2024 08:48:18 +0000
ROA not after: Mon 24 Feb 2025 08:53:18 +0000
asID: 47583
IP address blocks: 145.14.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:19:4d:dc:a1:02:0c:38:d4:dd:96:87:78:0e:58:94:bf:3f:52:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:18 2024 GMT
Not After : Feb 24 08:53:18 2025 GMT
Subject: CN=2C3026D036F49453267FB7007A9F583E430D654E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:66:58:1c:7c:0f:dd:30:52:52:e6:c6:25:b1:
0d:55:4b:59:df:9b:e6:69:5b:31:c7:11:61:ee:52:
ae:a6:ce:0d:a0:54:41:f7:0a:6d:4f:63:1e:11:fc:
c3:cf:d1:36:50:c8:66:a7:52:80:9c:02:4f:26:d7:
fb:f5:8b:f3:06:cc:94:c5:f7:a0:40:00:e4:bd:c0:
a0:45:50:78:b4:09:f4:78:a9:06:da:61:01:d8:bb:
96:6e:c8:5c:b1:53:5f:08:c4:48:cc:ee:99:f9:70:
56:fb:7d:48:80:d6:c8:a0:01:d6:0f:cf:c3:4f:3c:
1c:08:8c:1e:46:ab:ef:31:f2:f3:35:be:e3:e1:27:
3f:af:92:6b:88:8e:f2:a8:51:cc:c2:00:fd:6c:e8:
d0:03:a6:3b:85:93:e9:3c:5d:f4:62:8a:9c:eb:fa:
8c:46:a6:a7:eb:e1:9e:aa:bc:3c:26:bb:3a:8b:00:
77:29:01:25:a0:6d:6f:fd:ac:62:6c:74:d5:b9:a4:
27:52:b9:75:f0:f3:0f:76:ca:e1:89:fc:6a:d7:65:
2b:7d:fb:96:3e:08:a7:32:fe:21:e0:76:e2:5a:95:
3a:b6:6a:61:99:27:ed:68:55:6a:18:6b:6f:83:6b:
d1:f0:1b:ca:16:ba:ab:65:e9:73:e9:10:f3:62:eb:
7b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:30:26:D0:36:F4:94:53:26:7F:B7:00:7A:9F:58:3E:43:0D:65:4E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e31342e3134382e302f32322d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.14.148.0/22
Signature Algorithm: sha256WithRSAEncryption
25:c2:3b:36:28:99:67:9b:84:ab:b0:89:ae:7c:9b:65:41:89:
99:f5:96:54:6a:55:49:d7:3f:30:cb:00:d3:67:8d:66:98:8f:
50:cd:5e:1c:b3:12:cd:95:9f:25:fb:d3:05:96:3d:b7:48:f7:
d9:8f:45:e1:c1:d8:5f:1e:88:90:9d:90:d8:1a:80:e9:36:d6:
c7:61:ca:bc:ab:2b:f8:92:b6:07:84:78:3b:0a:dd:48:91:1a:
45:74:3b:a2:f6:03:58:81:1f:47:f2:79:5e:fd:4f:65:b7:9d:
26:ec:61:a8:fc:75:6a:48:f9:5b:dd:40:ff:16:d8:14:9d:c9:
d1:47:a4:b4:80:a6:8b:8a:6f:3e:d8:d9:ca:b9:e7:a0:b2:29:
b5:ce:59:fc:3b:b9:9e:22:21:9b:e8:60:da:37:e0:a1:7f:db:
e5:32:70:bf:17:3f:b2:44:fd:83:72:1f:e5:fd:c3:00:a9:14:
06:0d:1c:e8:4e:70:e8:38:57:18:32:40:01:fb:19:a6:a2:c0:
54:0b:1d:60:1d:d8:ba:30:3e:f6:ba:a4:86:20:95:60:4d:67:
0c:21:80:02:79:d9:9e:34:49:91:cd:e2:64:5d:84:cf:61:95:
38:38:3d:76:67:24:a0:3b:79:19:b0:7e:cc:e1:9f:d4:9a:40:
4c:f0:aa:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 21:12:35 2024 by rpki-client on console-fra.rpki-client.org