Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3132342e302f32342d3234203d3e20313336373837.roa
File: 3135362e36372e3132342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: K9rzLwg5RLAizCOU+LCV2hEOmnIb4ofWC/X73Zqk8wg=
Subject key identifier: E1:E8:25:14:9A:C2:E7:4F:55:26:0A:9C:13:82:A2:44:E5:AF:6D:57
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 519CDDCA36B169C54FE71B934C9D5D89D81F4D50
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3132342e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 27 Oct 2024 20:05:16 +0000
ROA not before: Sun 27 Oct 2024 20:00:16 +0000
ROA not after: Sun 26 Oct 2025 20:05:16 +0000
asID: 136787
IP address blocks: 156.67.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:9c:dd:ca:36:b1:69:c5:4f:e7:1b:93:4c:9d:5d:89:d8:1f:4d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 27 20:00:16 2024 GMT
Not After : Oct 26 20:05:16 2025 GMT
Subject: CN=E1E825149AC2E74F55260A9C1382A244E5AF6D57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:30:1b:a7:10:41:51:21:9c:b4:fe:2a:f6:cd:
4f:67:0d:0c:1c:0f:25:71:92:14:ea:c7:3b:f9:2c:
45:40:cc:e0:ba:b3:d7:0d:17:c8:80:03:64:bc:4b:
83:92:82:f3:bb:81:b2:10:d9:4c:94:a3:b8:89:f9:
9b:2f:2d:ba:0b:cb:31:ff:48:01:8c:b7:6b:f7:a3:
f6:6a:e9:54:1b:d8:49:b4:21:11:c2:be:6c:a5:96:
e9:72:95:e8:99:3e:b0:25:4a:73:b5:a7:c8:15:23:
56:92:13:cc:40:74:aa:5c:76:a0:5c:84:5a:d3:ce:
84:92:59:cc:f0:b1:ec:5d:6e:bb:5e:8c:1e:59:d0:
f5:e3:71:66:3c:f4:44:27:82:e2:2f:d6:b7:cf:70:
4a:c2:5b:6f:bb:dc:3a:c6:ce:71:2f:89:58:32:00:
10:59:0d:ca:1c:e3:56:4d:f6:34:44:c1:21:5a:19:
c9:a1:c0:59:52:f6:0e:77:60:ce:2b:bd:4e:b2:88:
37:2b:42:5e:7a:73:d5:f3:65:dd:46:fa:29:1a:59:
a8:f1:ef:9e:06:72:a7:53:e7:c8:08:98:3d:ac:60:
c1:76:6e:f6:f6:bd:e4:14:4c:f8:b4:4b:f9:a1:cd:
1f:56:3d:23:5f:39:ef:a8:8d:16:86:4a:00:5d:2e:
81:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E8:25:14:9A:C2:E7:4F:55:26:0A:9C:13:82:A2:44:E5:AF:6D:57
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3132342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.67.124.0/24
Signature Algorithm: sha256WithRSAEncryption
96:2b:4d:53:64:4f:0b:89:05:d1:d6:1c:c1:86:1f:61:29:7d:
fe:fc:85:35:64:10:b0:35:d2:d2:ea:87:2a:eb:18:c7:7e:e8:
17:dd:a2:48:c6:f6:b8:09:28:43:f8:b1:b3:bb:a2:e1:35:ef:
66:5a:83:09:30:7a:43:30:53:83:12:67:bd:6e:e0:ce:86:a6:
f1:f0:24:05:a0:b7:f4:f4:45:62:59:a8:58:e1:6a:a7:7a:0f:
d5:5e:68:a3:3a:46:75:09:71:a7:f1:e6:b6:59:d3:e4:4c:14:
9e:d6:ba:3e:be:1d:a4:d2:d7:60:1a:4f:cf:11:a4:c7:78:1e:
5f:a3:8a:84:b2:f6:bc:06:af:02:f9:2e:6b:76:55:2f:70:54:
ef:d6:b4:6b:63:b8:40:68:83:c2:48:21:9e:b4:4f:91:f6:c1:
dc:6e:2b:40:f6:58:bc:a5:f1:33:82:4a:a9:c6:63:a7:f7:73:
8f:d1:fb:9e:46:13:36:3e:84:bd:94:a7:e2:2f:be:0b:57:5e:
0f:1b:48:fd:bd:fb:bc:a4:22:a8:c6:3b:c0:16:5f:b8:12:13:
48:6c:01:6c:4d:3e:93:56:ca:64:00:2d:68:78:4d:43:f6:e1:
51:3d:6b:f0:0f:28:fb:50:85:bb:1d:08:5b:a7:87:9f:e5:10:
60:76:e5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:44 2024 by rpki-client on console-ams.rpki-client.org