Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e37382e302f32342d3234203d3e20323034313730.roa
File: 3135352e3133332e37382e302f32342d3234203d3e20323034313730.roa (raw, json)
Hash identifier: onMojb8GbWEgbtW2iwYPxc0VbifKJb/MeARhtsmB23k=
Subject key identifier: 5B:F8:EB:B2:28:17:B1:91:3A:92:70:70:86:EF:88:F8:CA:E1:CA:A2
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 33DC369C92127C8F85A56670B0B5F0874C9E9DD7
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e37382e302f32342d3234203d3e20323034313730.roa
Signing time: Tue 25 Jun 2024 21:47:07 +0000
ROA not before: Tue 25 Jun 2024 21:42:07 +0000
ROA not after: Tue 24 Jun 2025 21:47:07 +0000
asID: 204170
IP address blocks: 155.133.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:dc:36:9c:92:12:7c:8f:85:a5:66:70:b0:b5:f0:87:4c:9e:9d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 25 21:42:07 2024 GMT
Not After : Jun 24 21:47:07 2025 GMT
Subject: CN=5BF8EBB22817B1913A92707086EF88F8CAE1CAA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8c:cd:b2:c6:a8:f0:4a:c8:25:63:af:33:d9:
a2:3c:58:5f:9b:5b:a3:f8:4d:50:8e:2b:92:da:f2:
37:b0:30:7d:28:7b:b6:22:50:5d:59:98:2f:01:4d:
62:0d:a4:0a:3c:d2:98:42:92:fa:5a:49:6c:fa:0e:
35:95:64:0d:91:6c:45:84:5c:10:91:83:27:c4:ce:
dd:1b:61:cc:f6:83:57:ca:cd:19:15:bc:73:0e:2e:
ee:03:30:25:ec:f2:83:c2:7c:66:31:b6:fe:46:66:
8a:c3:93:6f:43:d1:6a:47:25:71:da:40:04:89:26:
04:3e:a6:e7:9e:eb:41:0f:57:48:f4:e5:af:ce:6d:
fe:47:8f:15:5f:88:b6:8b:98:74:06:ff:23:64:81:
a7:81:d1:f6:6f:bb:32:76:47:ce:21:a2:f4:31:6a:
95:5b:d0:56:32:57:9f:5e:0e:b1:8f:c1:66:f6:89:
23:5c:2f:a1:b7:e1:47:64:ce:29:7d:91:1b:c8:4b:
fe:c1:6e:40:5d:51:d2:c4:15:51:29:e8:35:11:39:
3f:13:f9:e0:4d:a1:e9:c3:f2:33:5f:62:2f:7b:d8:
bc:45:87:cf:ec:a0:ad:50:e3:85:21:e8:aa:a2:af:
31:6c:f8:f7:34:2c:59:27:9c:05:9c:55:55:5a:b2:
a7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F8:EB:B2:28:17:B1:91:3A:92:70:70:86:EF:88:F8:CA:E1:CA:A2
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135352e3133332e37382e302f32342d3234203d3e20323034313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.133.78.0/24
Signature Algorithm: sha256WithRSAEncryption
11:4e:1b:04:35:a5:04:e8:bc:a2:66:72:9c:8b:cd:0e:fd:7b:
58:ff:86:13:1b:a7:50:77:03:c3:13:82:3c:c8:ff:a6:79:51:
15:95:d3:2c:55:29:c5:ae:f3:2a:e4:84:e9:97:64:cf:05:35:
7f:3b:2d:16:63:33:90:1f:71:a7:e0:c1:4f:18:22:d1:e3:0e:
34:c6:5c:f7:74:29:1a:85:cf:53:12:e1:84:f4:3c:52:59:ea:
c9:93:bc:2e:64:cf:a3:c9:22:f6:8b:7e:6f:1d:40:8d:e5:88:
8f:e7:53:c9:cf:05:c5:16:2d:99:c7:7c:ef:e2:38:16:07:ea:
11:95:c1:6b:0c:72:b8:7e:82:65:9d:17:7e:be:9c:bd:c9:c5:
3e:58:27:85:a7:21:89:f1:ef:6a:f4:6d:9e:c7:93:f1:1d:d7:
f6:4b:61:4a:f8:20:88:52:fc:88:e3:07:38:d1:f1:e7:ec:fe:
f0:53:fb:27:52:01:ba:16:ed:a7:b9:0a:37:2b:f6:53:5c:6d:
27:a6:5c:2b:cf:c7:10:f3:6c:60:60:bc:a7:c9:4c:7b:60:2d:
8d:b3:94:ab:0c:24:f6:c6:03:01:5f:58:0b:f2:26:77:44:58:
a0:6f:6e:5d:53:df:9c:5a:7d:0a:d3:d8:1a:e9:5a:f9:c8:28:
e1:d4:72:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:07:02 2024 by rpki-client on console-fra.rpki-client.org