Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e37352e302f32342d3234203d3e20313336373837.roa
File: 3135352e3133332e37352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: j0Wb24Gt7jAYeHnFlUbNjL3LRGKb95kqfNkRhsGO0Cs=
Subject key identifier: 5E:40:4C:C3:A1:BF:55:A0:99:16:3E:CC:6B:A5:DB:F1:1C:A0:B1:DE
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3D8B81033A5B1FE80156CAA49880E98BD0E8D8D8
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e37352e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 26 Nov 2023 19:48:14 +0000
ROA not before: Sun 26 Nov 2023 19:43:14 +0000
ROA not after: Sun 24 Nov 2024 19:48:14 +0000
asID: 136787
IP address blocks: 155.133.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 16:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:8b:81:03:3a:5b:1f:e8:01:56:ca:a4:98:80:e9:8b:d0:e8:d8:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Nov 26 19:43:14 2023 GMT
Not After : Nov 24 19:48:14 2024 GMT
Subject: CN=5E404CC3A1BF55A099163ECC6BA5DBF11CA0B1DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9f:e6:af:14:d4:f4:7d:52:53:1d:ce:a1:64:
f1:d6:a9:a4:da:d4:d6:09:74:09:b9:9b:0f:ca:10:
37:e2:33:b3:9c:4e:ea:3e:2f:77:27:78:37:cf:c6:
18:72:2c:35:dc:ed:8a:8c:48:bf:42:0e:73:91:23:
2c:e6:7d:6b:81:ee:6b:10:8c:d9:ff:55:b3:02:2d:
35:68:20:42:03:25:77:56:99:72:a9:08:90:18:b6:
b3:ab:2b:c8:87:c0:8f:ba:cb:e6:e4:74:64:ef:65:
2f:be:e7:fd:81:ab:ae:6e:b2:bb:e1:0a:f3:76:00:
11:69:15:a1:a0:c2:d0:19:18:46:c7:e5:04:13:75:
fd:67:bd:a7:0c:86:34:6c:28:80:08:27:c6:57:99:
6b:78:7d:6f:6e:1b:23:99:34:09:84:9d:f3:f5:c8:
fd:04:aa:f0:8b:f4:ac:97:aa:4b:24:ba:67:d5:fb:
a4:4e:94:c2:3c:cd:8c:16:03:bd:15:fe:d0:aa:38:
d1:ba:9a:d6:9e:34:5f:2e:ed:cf:93:00:da:bd:a5:
83:34:cd:17:93:fc:41:f7:92:68:91:d2:47:a6:dc:
9f:bf:67:b7:d6:6e:12:4e:ff:6a:f7:00:fe:81:56:
76:7b:bd:c1:27:83:09:e3:19:7b:b9:98:81:89:03:
c9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:40:4C:C3:A1:BF:55:A0:99:16:3E:CC:6B:A5:DB:F1:1C:A0:B1:DE
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e37352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.75.0/24
Signature Algorithm: sha256WithRSAEncryption
80:92:6d:1d:2a:dc:00:e9:20:79:d1:b6:e2:52:be:74:e6:44:
be:21:7e:35:08:7e:d7:24:59:f8:57:56:47:5f:4c:11:06:13:
5c:a4:80:64:f7:fe:9d:13:c5:24:15:e0:f3:75:94:6a:e4:74:
a2:c1:9a:df:cd:af:2a:ec:68:d9:6f:a9:6b:7b:83:d2:c2:a1:
f8:72:bb:68:27:8f:4f:ff:c1:8c:ff:4c:94:44:c6:56:d2:6f:
aa:7b:0f:b3:f2:41:9f:f4:ce:72:06:93:f2:5e:d1:72:b8:93:
d5:e8:72:a8:27:09:44:80:48:ac:4d:10:27:e3:a2:db:e4:47:
3d:f2:29:58:5a:b1:57:45:ca:5c:32:ee:5f:8f:36:f9:5a:76:
6c:b2:9f:42:65:66:eb:a6:fa:6a:ba:32:cb:56:37:e8:c7:6f:
da:1b:80:20:15:f4:d5:50:3a:62:5c:da:f2:f1:00:1b:17:fe:
b8:ff:40:21:03:d8:30:2f:8c:0a:26:9a:c9:3f:68:f1:4c:13:
db:58:91:9f:4f:9b:f4:fc:44:72:a9:07:ef:4e:b4:82:89:40:
97:a3:52:80:ad:41:fe:ed:ea:32:fd:b6:69:63:9e:18:3e:86:
ee:fc:0a:95:95:78:d4:0e:d3:ef:66:96:97:f3:ea:2c:d3:c9:
0f:61:e9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 20:21:25 2024 by rpki-client on console-fra.rpki-client.org