Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3130372e302f32342d3234203d3e20313336373837.roa
File: 3135362e36372e3130372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: SWRtv8xqWjzHNlgKgAjGbmGKGdUILm+sTKbFD4ay0RE=
Subject key identifier: E5:BA:29:98:91:B2:07:82:8C:C3:DC:26:FC:0C:99:0D:9D:09:F4:4B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 5B1DF3DF2A7FEB9017EF889D1DADA859273A9DFB
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3130372e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 12 May 2024 11:03:38 +0000
ROA not before: Sun 12 May 2024 10:58:38 +0000
ROA not after: Sun 11 May 2025 11:03:38 +0000
asID: 136787
IP address blocks: 156.67.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:1d:f3:df:2a:7f:eb:90:17:ef:88:9d:1d:ad:a8:59:27:3a:9d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 12 10:58:38 2024 GMT
Not After : May 11 11:03:38 2025 GMT
Subject: CN=E5BA299891B207828CC3DC26FC0C990D9D09F44B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:93:05:6c:40:5e:c6:29:1d:8b:5b:36:88:ef:
82:f1:70:01:40:a4:ce:8e:87:80:28:c4:95:8b:7c:
7c:a5:7c:52:4e:f2:8c:ff:ba:c1:af:13:59:c0:c7:
70:a1:35:08:05:88:d3:7a:dc:b1:4e:45:5e:f3:ba:
da:3b:53:90:ad:a1:d0:cf:69:05:4c:d8:8c:fb:be:
e5:af:74:a7:fb:c1:7c:72:28:67:86:34:1f:7d:57:
75:f3:94:7a:44:3b:46:1a:df:f5:24:1f:bc:dc:8a:
2b:75:f7:cb:e8:09:9a:19:e3:17:5d:3a:0d:18:5d:
14:97:ef:11:06:b1:f8:0c:d0:e6:fb:25:59:6f:83:
1e:fe:ed:05:09:a2:2c:f4:da:c5:1b:ef:c1:bb:68:
90:3a:09:42:d3:e9:51:40:ce:1c:f2:d2:ae:6c:88:
bc:fd:73:21:40:25:d3:86:b9:31:c3:46:9e:18:be:
f3:0a:48:47:bb:24:aa:f4:ac:28:75:91:41:fa:2e:
c9:3d:c2:67:04:7c:f8:04:7c:60:7d:f5:a7:c6:7a:
65:2a:28:6f:1f:73:24:49:bb:eb:99:84:03:6c:f0:
1d:5b:fa:83:32:c6:01:5a:12:24:c5:3e:58:45:ac:
01:c7:f9:b5:ef:85:b2:f9:9d:fd:ca:7a:f2:3e:f5:
2f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BA:29:98:91:B2:07:82:8C:C3:DC:26:FC:0C:99:0D:9D:09:F4:4B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3130372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.67.107.0/24
Signature Algorithm: sha256WithRSAEncryption
69:1a:fb:bd:2d:84:09:ae:fd:9d:11:48:37:11:4a:09:11:e2:
c8:05:65:8f:85:96:00:7d:c4:ba:de:4c:70:10:b9:2b:4d:ef:
80:d3:81:19:da:12:15:77:e3:54:c9:a9:c5:fb:0d:df:72:18:
36:60:a5:0b:2a:3b:a1:20:15:17:84:1f:5f:60:08:49:b5:9d:
84:1f:21:00:2b:bd:a2:20:ad:1f:a1:20:2b:56:35:94:16:f2:
44:a6:fa:28:4a:70:8c:19:85:b8:f2:63:4d:b7:40:2b:37:63:
8b:3e:dc:a3:34:f2:a9:16:80:0b:6e:7f:62:12:4f:1f:36:01:
b3:ca:a6:22:21:40:6e:7c:40:c9:5d:97:49:c7:3b:4a:c4:9b:
82:9a:17:85:38:11:18:24:34:84:43:8c:da:2f:80:73:1f:db:
a7:d6:6d:55:b3:62:48:cc:d0:ec:b0:b8:9b:69:8d:1a:01:50:
1a:41:3a:ff:6a:2c:2d:a0:25:9a:0e:50:3f:68:22:eb:bf:48:
3b:21:9d:55:82:b8:1f:43:02:6a:73:64:66:8d:8c:45:8e:76:
0a:b7:69:3a:50:c1:95:98:e8:a2:b9:7c:64:51:3e:00:c1:44:
fc:29:0f:77:dc:55:60:30:56:84:39:73:f6:c7:55:13:cf:71:
bd:df:fb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:44 2024 by rpki-client on console-ams.rpki-client.org