Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3132382e302f32302d3332203d3e203430303231.roa
File: 3134372e39332e3132382e302f32302d3332203d3e203430303231.roa (raw, json)
Hash identifier: AP7rZ/dn+6GzlSztrhjb7uZDm95NalleAse5svly7pY=
Subject key identifier: 28:AB:FC:B1:9F:EF:54:AE:B1:10:24:A8:04:85:0B:31:25:FB:F0:8B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4CD1DE1054417E37995AA31F56741B20F746AA7D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3132382e302f32302d3332203d3e203430303231.roa
Signing time: Fri 22 Nov 2024 14:28:01 +0000
ROA not before: Fri 22 Nov 2024 14:23:01 +0000
ROA not after: Fri 21 Nov 2025 14:28:01 +0000
asID: 40021
IP address blocks: 147.93.128.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:d1:de:10:54:41:7e:37:99:5a:a3:1f:56:74:1b:20:f7:46:aa:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Nov 22 14:23:01 2024 GMT
Not After : Nov 21 14:28:01 2025 GMT
Subject: CN=28ABFCB19FEF54AEB11024A804850B3125FBF08B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:38:f5:a6:ec:41:bb:0e:0d:b3:0d:c2:89:f8:
4c:a4:39:7c:b5:22:e1:86:6b:d5:98:43:70:36:ed:
ec:46:57:b6:42:06:63:a1:9b:a4:dd:62:0a:4f:5e:
d6:96:f0:70:bb:3a:0d:4f:16:ad:b3:f6:f3:9b:be:
87:41:e4:a0:0f:03:35:da:8e:f3:22:82:5e:83:03:
b7:db:2a:60:f6:35:3b:dc:87:3d:97:be:52:63:38:
5c:62:b2:76:80:66:5b:5f:d6:03:ea:8b:4c:da:e7:
88:89:82:50:e3:c9:60:03:37:71:f2:21:9a:cb:a5:
60:9a:f0:03:44:e2:5d:23:1a:84:8d:b1:ee:7e:1f:
b6:50:af:38:04:c5:7d:a1:e2:ac:76:28:65:e4:f9:
7c:08:01:7c:ea:69:af:c7:08:5a:07:9d:18:54:78:
18:3e:36:6c:15:18:5e:c7:13:ed:d3:fa:c4:76:99:
0a:ef:2a:57:4a:81:dd:2a:2a:0e:97:7c:eb:f4:5e:
e9:2a:b5:a6:4c:3c:8e:31:87:44:ac:77:bc:39:c6:
0b:ba:a5:a5:7c:a1:35:ac:5b:50:9d:04:d7:09:78:
6d:3e:9f:08:2f:b8:e5:9b:18:59:8a:d3:05:65:0a:
d9:d6:a1:81:51:f3:56:f8:17:03:7c:14:4b:ca:28:
71:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AB:FC:B1:9F:EF:54:AE:B1:10:24:A8:04:85:0B:31:25:FB:F0:8B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3132382e302f32302d3332203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.93.128.0/20
Signature Algorithm: sha256WithRSAEncryption
99:b6:a6:69:ed:d0:10:8f:de:13:4d:55:fb:73:4d:7f:2a:05:
39:37:c9:68:e0:14:18:fb:55:42:16:6f:42:9c:29:69:28:ba:
1d:89:6f:9d:81:6d:78:16:52:ba:41:93:e5:ac:d2:5d:68:ba:
be:2b:64:00:6b:af:25:f1:8c:ac:2b:25:9d:b4:e8:39:22:31:
cf:0b:8b:38:36:3d:18:92:c3:19:91:47:85:0a:e4:aa:d5:90:
cf:c6:a7:b4:c4:d1:6f:f6:2c:f8:c6:cb:00:90:0e:b3:26:ef:
f8:5f:a0:44:64:13:fa:bb:12:06:9e:60:ae:6e:66:04:b1:60:
a1:1f:04:e0:b4:2d:29:df:5c:7d:14:02:fb:f5:f2:5e:5e:cf:
b4:4a:1a:1b:4c:35:1e:27:41:23:ec:8e:37:7d:6b:22:ea:0e:
66:e5:45:5d:9e:99:68:b6:a9:a9:b1:94:6a:04:5b:92:9f:e2:
49:08:9b:93:26:ae:f9:f2:d8:9f:8e:72:07:f2:7e:ac:9d:ad:
54:e4:e1:4a:b8:dc:54:09:fb:38:72:7e:f6:47:78:6d:c6:f9:
d7:64:db:2c:9f:62:39:7e:18:c8:ce:fd:b8:d7:b3:3a:57:e5:
44:c6:b4:90:f6:2e:5a:c0:1c:48:25:f2:7d:08:17:c5:d6:0a:
ed:1f:f0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:15:32 2024 by rpki-client on console-ams.rpki-client.org