Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135332e39322e3132362e302f32342d3234203d3e203633343733.roa
File: 3135332e39322e3132362e302f32342d3234203d3e203633343733.roa (raw, json)
Hash identifier: uGlZ7s/GEL26HSbCx8Vp6vCfojESza4Xr87dTiHMLk4=
Subject key identifier: 42:3B:D8:EB:6F:16:A6:9D:33:AF:CC:05:97:FA:D7:AE:27:1A:C1:A1
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 08333DA517AEBDCDC6DAE9185B3CFA1B2FB2E425
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135332e39322e3132362e302f32342d3234203d3e203633343733.roa
Signing time: Thu 25 Jul 2024 12:04:25 +0000
ROA not before: Thu 25 Jul 2024 11:59:25 +0000
ROA not after: Thu 24 Jul 2025 12:04:25 +0000
asID: 63473
IP address blocks: 153.92.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:33:3d:a5:17:ae:bd:cd:c6:da:e9:18:5b:3c:fa:1b:2f:b2:e4:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 25 11:59:25 2024 GMT
Not After : Jul 24 12:04:25 2025 GMT
Subject: CN=423BD8EB6F16A69D33AFCC0597FAD7AE271AC1A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:96:80:32:0a:4f:0d:37:b3:09:67:a1:d9:73:
4a:d5:7d:6f:a7:61:1c:ff:73:f4:09:81:97:ec:1d:
01:55:03:30:9a:de:53:20:9f:be:fe:36:6a:80:64:
8b:ac:34:4d:20:f8:da:5e:cf:f5:3a:07:44:17:0c:
1a:3e:7d:ab:e7:25:ea:15:e1:06:5b:02:5f:71:66:
15:d2:00:af:56:19:94:b3:4c:b5:a1:9a:a0:bd:19:
d9:4a:9f:2f:2e:83:a4:a1:d3:0d:7a:9a:7c:85:c4:
8c:eb:54:db:22:76:54:65:99:2f:48:f4:32:27:4d:
69:33:50:b6:0c:ea:c6:47:ea:46:4f:33:64:28:85:
8a:3d:1c:22:db:71:c2:d8:8b:4b:5d:64:cb:61:b1:
8e:9f:80:ae:39:af:72:d7:98:73:2c:45:3d:31:85:
d3:69:c1:97:4c:60:7b:7d:c7:fa:b6:78:32:08:de:
e3:3b:5a:62:cd:84:8c:7a:45:9e:60:84:a3:91:1e:
93:5f:a8:e9:2c:17:27:f9:03:cb:d9:87:29:e3:f3:
9d:f8:f1:78:6d:e1:91:bb:17:eb:c6:e1:7b:57:1e:
1b:75:08:7c:a1:80:c3:cc:ef:33:87:9d:8f:0b:0b:
af:79:cb:30:07:64:af:4f:13:b3:56:b8:07:d0:67:
ca:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:3B:D8:EB:6F:16:A6:9D:33:AF:CC:05:97:FA:D7:AE:27:1A:C1:A1
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135332e39322e3132362e302f32342d3234203d3e203633343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.92.126.0/24
Signature Algorithm: sha256WithRSAEncryption
84:be:16:42:34:e9:64:d8:25:ec:ff:70:46:11:11:62:09:af:
e6:d7:0e:7d:63:f7:22:a4:b0:2b:1e:64:1c:93:08:2f:24:fb:
4c:1d:39:84:95:f3:c0:0a:9e:97:96:9e:14:70:40:44:e2:df:
5d:80:8d:83:dc:4c:f3:8f:d2:11:96:f9:da:d1:14:88:f3:70:
08:3a:b8:c4:79:50:77:be:56:82:73:50:d5:d0:4c:82:8d:23:
1d:15:fa:ef:8a:63:65:18:a7:79:8c:99:76:25:7d:26:d8:65:
45:63:8e:49:a9:23:1f:a4:74:81:f4:f4:e4:4d:6e:71:b9:42:
d4:b9:72:ba:f2:39:97:31:d4:fb:f0:61:ab:a7:9e:7d:ec:21:
5f:04:a3:6c:1f:30:5f:22:53:23:4c:87:60:d4:cb:92:f6:2a:
f8:b3:ad:81:aa:cb:ed:3c:d6:5a:fa:c2:82:86:5c:95:f3:ec:
77:f8:1f:a7:f0:e5:13:be:e7:27:31:d4:be:6c:73:93:27:a5:
5a:3a:ba:4f:c8:be:97:ff:cf:c2:db:fb:3c:f4:f0:a8:a7:ff:
ad:42:89:46:54:f5:e6:5b:02:52:07:b6:66:f2:56:ae:32:36:
ae:5a:2b:82:25:83:c9:b8:fb:08:9b:7b:96:fd:c1:f8:5f:11:
1a:5b:8e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:44 2024 by rpki-client on console-ams.rpki-client.org