Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e32322e302f32332d3332203d3e203531313637.roa
File: 3135352e3133332e32322e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: m74sjcQEt+YUX9VDwJ4Ey7iwcyr8el3/5oBMLb1yK0Q=
Subject key identifier: C9:9E:7F:BE:5E:03:CA:DA:18:93:D5:D6:81:8D:7C:1B:D5:D3:59:7A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6E9A2022B8345087A46BCEA527533B9B9D41BDEC
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e32322e302f32332d3332203d3e203531313637.roa
Signing time: Mon 26 Feb 2024 08:53:23 +0000
ROA not before: Mon 26 Feb 2024 08:48:23 +0000
ROA not after: Mon 24 Feb 2025 08:53:23 +0000
asID: 51167
IP address blocks: 155.133.22.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:9a:20:22:b8:34:50:87:a4:6b:ce:a5:27:53:3b:9b:9d:41:bd:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:23 2024 GMT
Not After : Feb 24 08:53:23 2025 GMT
Subject: CN=C99E7FBE5E03CADA1893D5D6818D7C1BD5D3597A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2a:c6:f0:e5:18:83:4c:fe:30:e5:73:89:cf:
29:95:7a:49:eb:6c:9e:71:fe:6b:30:09:9f:70:b2:
bf:16:ab:f7:f6:0b:f0:88:86:3b:2e:c2:23:e0:54:
26:7b:4c:ef:d6:1b:64:b2:e6:b7:fb:c5:a6:44:94:
12:cb:f0:9f:52:6d:26:c8:d5:ed:e3:df:f9:26:b5:
42:b9:4b:29:ff:22:66:ca:6a:52:37:6c:92:85:9b:
cc:b9:17:33:de:4f:2d:55:a4:73:bf:ce:86:0a:6f:
d6:ee:2c:7c:fc:7f:96:e4:9e:27:a2:25:27:64:87:
3a:94:6e:56:15:83:4c:1c:45:9b:3e:ab:4c:67:55:
67:cf:13:92:0b:a0:8c:12:dd:22:bd:51:3d:e4:d6:
df:13:8a:c3:2f:b8:49:63:e1:04:76:c0:11:54:78:
dc:23:a3:b0:52:fe:e2:c3:92:44:eb:99:c9:64:97:
23:17:04:a7:6f:0d:20:04:e4:a9:73:50:70:80:91:
bc:3c:23:a8:b0:b2:f5:a5:93:67:8d:e8:ec:5d:73:
99:bc:73:f7:3b:3f:fd:0c:70:ee:60:b5:84:5b:2c:
48:2f:15:df:67:45:5f:20:61:88:ef:6d:7e:ea:35:
11:aa:f5:05:ee:24:18:26:1d:25:a3:d6:e0:51:69:
fb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:9E:7F:BE:5E:03:CA:DA:18:93:D5:D6:81:8D:7C:1B:D5:D3:59:7A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e32322e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.22.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:4e:93:0e:2a:5b:4c:6d:43:ad:aa:81:62:bd:38:a8:25:10:
d6:88:83:38:29:1d:df:52:ec:62:06:94:7a:5e:d4:a6:f1:0e:
99:88:60:5e:7f:9a:80:72:93:b2:fc:90:1e:2b:12:ce:57:57:
3a:1a:7c:72:cd:05:05:0c:15:07:b5:70:7c:c3:31:7f:0a:f5:
89:0c:36:f8:6e:39:0a:dd:62:fd:16:d2:4e:6b:20:c7:a4:9f:
d5:29:cd:20:ce:52:ed:74:30:d5:7f:3a:ac:27:1b:f7:8f:37:
89:3d:77:26:6b:94:d9:83:80:97:9a:26:e2:21:45:48:3a:d0:
71:ef:13:ee:ae:ef:78:15:23:cd:36:90:31:35:c7:b9:63:19:
e9:a4:4f:31:a8:48:f3:2e:32:42:b1:58:dc:fa:5d:32:42:40:
26:8e:61:43:d1:db:b5:be:ec:4d:68:88:c6:d3:ec:24:06:3a:
75:4d:41:00:d7:f8:54:17:fd:36:6c:39:74:28:fb:84:df:a7:
f3:23:d1:bc:60:1e:9e:c7:b4:b7:70:f7:a7:0c:68:e3:5e:dc:
7d:77:d9:28:32:08:01:73:b1:b7:94:59:cd:dd:b9:fd:aa:96:
df:f0:81:9d:1a:ad:3f:5e:eb:94:8a:ce:20:c6:db:af:46:53:
e3:44:2e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 09:23:49 2024 by rpki-client on console-ams.rpki-client.org