Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31302e302f32342d3234203d3e20313336373837.roa
File: 3135352e3133332e31302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: k59wkIbpRwsqJYq+DS8JUWVf4vyY5aOe2NVm8C/q8CY=
Subject key identifier: 06:E4:0D:0A:A4:DA:37:85:F9:53:90:D9:ED:CE:11:C2:2E:0E:13:D8
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 570B33F8477EB766F210A0C7EDD667AE694A5201
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31302e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 26 Feb 2024 08:53:28 +0000
ROA not before: Mon 26 Feb 2024 08:48:28 +0000
ROA not after: Mon 24 Feb 2025 08:53:28 +0000
asID: 136787
IP address blocks: 155.133.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:0b:33:f8:47:7e:b7:66:f2:10:a0:c7:ed:d6:67:ae:69:4a:52:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:28 2024 GMT
Not After : Feb 24 08:53:28 2025 GMT
Subject: CN=06E40D0AA4DA3785F95390D9EDCE11C22E0E13D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b8:ee:98:5e:ca:1d:bf:79:dd:f5:34:e5:8b:
7b:d5:26:bf:67:67:92:e4:1c:09:82:3c:37:eb:bd:
e3:bf:be:4c:a3:da:54:dd:7e:99:cc:d8:f1:63:64:
f6:07:96:8e:8c:c1:b1:52:43:09:58:6c:21:df:4c:
d6:70:50:b8:b1:fd:4d:7a:cf:05:10:62:12:2d:b0:
f8:47:5c:31:b3:26:0d:c5:79:2c:a9:60:a8:c9:a4:
28:8e:cd:3e:d4:92:34:65:3d:cd:d7:2b:5d:37:c7:
02:cc:05:cf:ab:5f:fb:d2:99:fd:15:4d:41:d2:a3:
88:0b:5b:4f:5f:6d:a6:40:56:84:b2:39:a7:a0:6e:
b9:32:ed:34:13:c0:f1:23:d5:67:86:2b:9e:0d:a6:
bb:4a:ce:01:bd:97:83:3a:2d:08:d5:59:fb:7d:b4:
3c:24:2d:ec:15:33:62:d4:8d:c1:4d:f4:88:0a:28:
48:c8:20:9e:ad:c5:18:8e:e1:b0:76:7a:3e:ba:00:
5b:f5:91:fb:32:d7:be:0d:7b:2c:da:b8:8e:ba:63:
7d:9c:53:12:52:20:35:4d:a8:5e:be:a9:6a:d6:be:
5e:84:14:34:70:55:df:05:a3:9c:af:39:3c:c4:87:
df:5a:17:10:54:a1:8a:4f:b2:15:ff:8b:d2:d7:5c:
3d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E4:0D:0A:A4:DA:37:85:F9:53:90:D9:ED:CE:11:C2:2E:0E:13:D8
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e31302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.10.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:c5:49:66:63:5d:f7:31:bd:b7:60:b2:fd:33:8c:5d:5b:88:
7d:61:90:f2:db:e4:e9:cd:4a:ff:4e:b4:e7:6c:a7:39:4a:28:
a0:4b:f6:26:9a:f7:9f:cf:e3:a2:d1:ec:8e:2a:e6:08:b5:c2:
15:99:d1:ef:e0:00:7d:24:1c:f3:59:ae:e4:eb:2b:6f:43:a7:
b5:b6:79:ed:7e:5a:48:0e:e9:9e:83:4d:c0:3e:3c:4f:a2:91:
3a:ea:4a:45:5f:34:cf:63:46:f8:d2:d7:a5:23:f8:d3:11:9e:
95:b2:5e:ed:ea:4e:51:f0:e8:2b:d1:39:74:99:68:9e:a3:34:
14:58:00:10:b3:5b:25:31:83:81:b2:99:58:e1:a8:fc:00:b9:
c4:f3:72:5f:95:4c:fa:d3:43:27:f1:c5:91:9d:de:36:c2:8c:
93:57:5a:2d:8c:7b:9b:5e:c4:75:79:a9:d1:de:95:89:b8:bd:
90:89:17:c4:40:df:ed:25:c9:b9:3e:55:b6:e0:b3:62:37:38:
89:62:4f:c9:b3:47:46:e6:77:7b:8b:61:47:70:41:66:6b:0f:
e2:24:70:67:96:5e:49:9c:fe:bd:21:7b:d9:72:ff:3e:aa:df:
ff:15:85:24:4c:de:48:1c:0a:3c:24:6d:76:f2:cd:fe:88:71:
fb:b6:19:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:29:12 2024 by rpki-client on console-ams.rpki-client.org