Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3137362e302f32302d3332203d3e203430303231.roa
File: 3134372e39332e3137362e302f32302d3332203d3e203430303231.roa (raw, json)
Hash identifier: nSyfPVRwVYc9gf7CT8x4wQJpytBufCfip4kCv/OP/b0=
Subject key identifier: 93:AA:02:F6:1A:9B:4D:4D:3F:63:A7:6A:57:B7:9B:5C:60:3C:D4:AB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0D1CFBBF0F33E3E367B7B100B4B9CEB9BE585C85
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3137362e302f32302d3332203d3e203430303231.roa
Signing time: Fri 22 Nov 2024 14:28:56 +0000
ROA not before: Fri 22 Nov 2024 14:23:56 +0000
ROA not after: Fri 21 Nov 2025 14:28:56 +0000
asID: 40021
IP address blocks: 147.93.176.0/20 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:1c:fb:bf:0f:33:e3:e3:67:b7:b1:00:b4:b9:ce:b9:be:58:5c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Nov 22 14:23:56 2024 GMT
Not After : Nov 21 14:28:56 2025 GMT
Subject: CN=93AA02F61A9B4D4D3F63A76A57B79B5C603CD4AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5d:3b:4d:a0:f6:46:5c:5f:46:0b:8c:20:63:
98:4a:89:5d:35:cb:93:81:39:99:ac:f3:17:b1:cd:
2b:63:aa:be:8d:bb:b2:65:25:9e:64:07:b7:a7:c8:
6f:c9:43:1e:52:5a:de:4e:22:68:8c:56:43:aa:5c:
46:f6:dc:74:c3:08:78:57:c3:d4:f2:d7:b6:c0:58:
e4:00:bb:e1:15:6e:de:7b:26:9e:b9:0c:df:a3:7c:
a8:2a:c8:23:fa:48:15:66:30:f3:ec:86:ec:f4:73:
c1:a4:5d:ab:08:2b:5a:fc:b6:3a:d5:0c:3f:2c:5a:
05:f9:9e:e0:50:05:01:15:bd:fc:bf:c5:b4:cb:ff:
4c:e7:f2:a0:1f:47:2d:1b:f2:df:e5:63:10:4e:3a:
40:25:dd:8f:cf:0d:23:28:c3:fb:b2:cf:5e:e9:2f:
4d:da:04:b6:83:d2:f0:a8:7d:1a:2b:f8:01:f7:df:
24:62:fe:46:1d:99:53:f1:aa:03:a7:e2:28:c9:ef:
97:1d:04:82:10:cf:02:f7:44:04:58:8a:19:f3:46:
39:9f:b0:16:60:c6:02:ee:0e:cd:cf:ec:27:f7:41:
92:f5:e0:f2:3a:8c:91:5c:65:8f:69:c9:6a:08:86:
3a:d0:b8:04:13:ce:05:19:98:1a:eb:aa:c5:52:06:
71:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AA:02:F6:1A:9B:4D:4D:3F:63:A7:6A:57:B7:9B:5C:60:3C:D4:AB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134372e39332e3137362e302f32302d3332203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.93.176.0/20
Signature Algorithm: sha256WithRSAEncryption
6d:26:6f:28:73:6e:31:ba:c5:ba:05:67:15:f1:3a:37:70:86:
df:c1:b2:6a:91:7d:f3:cb:5f:00:f7:ac:36:d5:4f:14:94:8b:
86:8e:6c:40:52:32:c5:54:96:f0:dc:1b:e0:42:44:c2:a9:d3:
3d:ea:a5:da:2d:ee:c3:c0:66:4e:38:fd:8d:fa:e5:3b:22:13:
60:75:a5:c5:78:ed:b3:14:4e:63:9d:8f:2d:11:a6:d4:55:4d:
6b:85:69:2b:e8:2c:55:7c:eb:38:05:e0:a6:e4:99:21:7f:7d:
a7:90:28:17:16:6b:de:12:f0:67:19:3e:16:3e:f2:6c:dc:9e:
1e:31:8a:e0:8b:11:6b:fe:47:ed:f3:7e:22:0c:41:d9:9c:51:
03:70:1c:e3:75:fa:8c:54:83:b3:b7:c3:25:dd:c1:9f:d9:d3:
55:69:6e:50:14:3d:07:91:5d:5a:ce:68:24:5c:ca:38:8f:40:
b5:d9:19:bb:7c:e9:2e:bf:06:42:03:4d:fd:c7:fe:3d:78:2b:
a2:93:c6:e0:a8:63:68:4a:b8:88:07:fa:51:7f:3f:b8:4f:11:
f4:51:52:ad:c5:3d:33:20:bf:d3:76:88:3e:18:c5:cd:d2:54:
14:a4:2f:80:f1:36:c0:7a:1d:14:29:0c:ef:8b:39:68:c6:57:
33:3f:9a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:40:28 2024 by rpki-client on console-fra.rpki-client.org