Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135312e3130362e39362e302f32302d3234203d3e203437353833.roa
File: 3135312e3130362e39362e302f32302d3234203d3e203437353833.roa (raw, json)
Hash identifier: y1V0NERPntTukb9dmYXAjPR0AVa3jH0OwgRGCrwFXwc=
Subject key identifier: 32:6B:33:87:2C:6E:AC:98:ED:10:B2:62:49:42:F8:E2:EC:46:63:A5
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 03ABF144F3EF83DAACB37AE165626566F14C0A5B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135312e3130362e39362e302f32302d3234203d3e203437353833.roa
Signing time: Mon 26 Feb 2024 08:53:25 +0000
ROA not before: Mon 26 Feb 2024 08:48:25 +0000
ROA not after: Mon 24 Feb 2025 08:53:25 +0000
asID: 47583
IP address blocks: 151.106.96.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:ab:f1:44:f3:ef:83:da:ac:b3:7a:e1:65:62:65:66:f1:4c:0a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:25 2024 GMT
Not After : Feb 24 08:53:25 2025 GMT
Subject: CN=326B33872C6EAC98ED10B2624942F8E2EC4663A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ea:2a:80:88:b3:f0:99:03:14:b0:6f:e7:9d:
46:59:81:bb:0d:0a:a5:38:05:58:fb:ee:36:f6:23:
85:0b:d5:f0:df:6a:8e:f7:85:f6:05:1e:4f:f0:28:
23:ab:0a:a5:70:2d:c0:58:52:72:bc:1b:0d:f7:44:
c2:75:fc:0c:63:c4:b6:6b:41:0f:28:2c:0f:6d:25:
e2:7d:1b:3f:da:1e:14:e2:85:91:6a:3e:ed:e1:ff:
9f:63:08:c8:cb:7c:36:b9:da:9a:bb:47:5b:c1:0b:
12:e7:18:88:50:6a:8a:65:d7:9c:33:9b:1e:f4:2a:
ef:07:eb:56:07:2c:b6:67:29:52:04:e8:39:eb:82:
79:02:a9:db:4c:10:6a:7d:b1:0e:d6:81:9f:50:d5:
89:fe:1f:f2:b8:fd:bd:06:95:21:f8:ce:1d:82:32:
25:0b:d6:a8:01:55:32:0e:a5:0a:5c:ae:58:d7:8e:
1b:0d:6b:8a:e5:58:69:0f:49:67:a3:02:50:e6:60:
db:21:61:d3:d5:76:4f:e9:fe:59:c5:7d:79:1f:e9:
4e:2d:3f:6e:0a:4c:f4:07:bd:79:fb:18:42:34:08:
9e:f6:0e:6c:27:a2:6b:0c:e9:94:13:8a:bc:28:1e:
4b:a2:35:87:bf:68:4a:63:bb:a3:13:d9:9a:d5:46:
6e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6B:33:87:2C:6E:AC:98:ED:10:B2:62:49:42:F8:E2:EC:46:63:A5
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135312e3130362e39362e302f32302d3234203d3e203437353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.106.96.0/20
Signature Algorithm: sha256WithRSAEncryption
14:cd:4f:1d:15:6f:e9:a8:59:d2:42:49:a2:60:7e:37:22:5c:
e7:fb:25:22:68:61:68:34:51:51:3a:2b:d5:e0:73:7f:a0:04:
da:1f:0f:4b:32:d2:70:b6:f6:3e:4f:c0:6e:d2:f1:16:5c:b4:
6b:de:31:79:2c:68:81:07:c3:d8:8f:b2:0f:12:8d:a7:1c:4a:
bf:e2:1f:fa:73:27:00:94:b2:b8:54:f6:34:a9:22:f7:38:3d:
c6:ae:28:8a:02:4f:98:ae:83:68:f8:70:13:14:65:8e:20:a4:
74:d6:77:35:59:1d:9e:22:b2:fd:3c:9c:95:ec:ab:b9:6f:0d:
95:21:8d:70:d4:b7:0f:46:44:4f:ef:5c:ed:64:88:5c:57:3e:
fb:8d:b6:c4:00:27:6f:d0:60:cd:af:04:74:c1:8b:54:88:05:
cd:9d:10:e3:01:1a:21:56:dc:e6:85:ed:12:de:8c:94:a6:d7:
44:77:d2:7c:24:ff:a4:a6:13:01:48:5f:03:72:58:07:d2:85:
ba:8f:b8:66:c7:0e:8b:2e:13:85:2d:4c:8e:4a:b9:ab:78:d3:
a5:e0:60:f2:2f:c4:a9:15:ff:97:9c:5b:92:bc:50:92:bb:f2:
7a:46:10:41:2e:1c:2e:89:04:00:53:32:e5:6c:ad:0b:5a:f6:
e4:77:4a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:35:25 2024 by rpki-client on console-ams.rpki-client.org