Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3134342e302f32322d3332203d3e203430303231.roa
File: 3134372e39332e3134342e302f32322d3332203d3e203430303231.roa (raw, json)
Hash identifier: 5aHN31xw+1jjfJupPO91SONhATLQl/xLebk5WI936vI=
Subject key identifier: 5C:93:8A:02:26:BE:46:FD:F7:49:AD:09:6A:7B:FB:17:5E:2F:DC:00
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3E41C2CF4BDA9FCD5B426025C1B83A56FFA40372
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3134342e302f32322d3332203d3e203430303231.roa
Signing time: Fri 22 Nov 2024 14:27:43 +0000
ROA not before: Fri 22 Nov 2024 14:22:43 +0000
ROA not after: Fri 21 Nov 2025 14:27:43 +0000
asID: 40021
IP address blocks: 147.93.144.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:41:c2:cf:4b:da:9f:cd:5b:42:60:25:c1:b8:3a:56:ff:a4:03:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Nov 22 14:22:43 2024 GMT
Not After : Nov 21 14:27:43 2025 GMT
Subject: CN=5C938A0226BE46FDF749AD096A7BFB175E2FDC00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b7:83:72:22:ba:6a:cc:6a:81:82:68:f0:eb:
c3:c4:62:79:9f:2f:fa:49:17:6a:8f:3a:0f:84:01:
16:0a:c4:40:0a:e3:2d:49:9e:d4:5c:22:aa:aa:fa:
16:9d:c1:11:7d:30:1d:d5:cb:2e:3d:c7:5d:8d:fa:
83:ac:46:99:a9:7d:14:37:ef:cf:43:23:cd:5f:87:
85:49:a5:7c:d3:3c:dc:cd:a5:c4:7a:37:75:22:1d:
db:50:ab:1c:c3:93:3d:c1:65:b4:ab:0e:39:73:7f:
e1:e0:46:37:bb:c7:43:a7:ae:f8:78:98:6f:68:60:
8d:6f:00:62:2c:23:28:0a:30:25:19:6b:9d:f3:72:
71:53:a6:9a:22:48:c2:5c:46:4b:0b:78:38:8f:0b:
79:d2:79:c5:06:af:f4:a2:70:12:71:6b:4b:ec:27:
da:29:08:d4:ce:1d:5a:18:f1:4f:fc:94:96:f4:1b:
82:37:22:87:47:9c:e5:98:43:d0:3d:4d:47:b0:40:
a3:cd:83:3f:36:e8:3e:59:b3:37:29:db:e3:e8:aa:
ee:eb:14:3a:0c:2e:52:5f:9f:9a:85:c4:71:8c:4a:
b1:5a:6a:27:2f:4b:f9:2b:30:98:56:4c:e4:da:74:
05:71:06:a5:98:e2:3c:38:fc:51:11:11:7d:5d:51:
c2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:93:8A:02:26:BE:46:FD:F7:49:AD:09:6A:7B:FB:17:5E:2F:DC:00
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3134342e302f32322d3332203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.93.144.0/22
Signature Algorithm: sha256WithRSAEncryption
29:70:16:6f:f0:a0:a3:88:cd:b2:04:15:cc:ce:e1:ec:0d:be:
f2:cd:6e:46:40:d6:51:fd:08:c6:3b:a9:a7:06:1e:e1:4b:9d:
6e:3b:34:98:38:98:44:18:0e:9e:84:b0:d9:42:0a:0e:d7:de:
64:4f:3e:d0:34:dc:1d:be:43:74:de:96:c7:ef:40:ff:84:47:
06:ac:72:22:51:64:cc:b7:b6:bc:97:b1:2c:4c:d7:37:ed:7b:
01:f9:16:22:db:6c:2d:84:5c:1f:29:62:38:15:52:b1:b4:85:
19:dd:8c:65:67:d0:e8:cc:51:38:49:ff:f8:ac:32:0c:e1:3e:
ba:60:a6:ca:6a:79:05:54:33:60:22:61:9e:35:e6:0b:15:a0:
b9:7f:56:c5:e6:bd:95:e4:7c:eb:4e:d9:1c:29:fc:74:1d:72:
57:6c:8f:60:35:bb:56:76:97:5a:ac:e9:ed:84:b7:d1:06:b4:
6b:c3:39:41:80:2a:4f:25:3b:9a:db:7d:00:33:a8:bc:b1:7a:
f2:3c:7f:e8:db:77:13:68:1a:75:f9:82:ae:11:2f:f2:f6:b0:
3a:be:ad:e1:44:51:f3:9c:cf:83:9d:f8:1d:aa:40:94:f1:11:
c3:49:3b:cb:94:d6:07:af:3e:5d:82:c5:32:5d:30:65:01:5a:
07:1d:de:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:40:28 2024 by rpki-client on console-fra.rpki-client.org