Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3132362e302f32342d3234203d3e20313336373837.roa
File: 3135362e36372e3132362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: QpV14NiNqcDi/ZP3JGGwXpOD548TUTOJ+4pOkL86Kvc=
Subject key identifier: 60:C2:2E:81:F2:A8:D6:3D:3C:1D:83:71:90:70:CB:48:65:8D:B6:8E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 208346B088579A9C97472CBBD3D124378780D09B
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3132362e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 27 Oct 2024 20:05:19 +0000
ROA not before: Sun 27 Oct 2024 20:00:19 +0000
ROA not after: Sun 26 Oct 2025 20:05:19 +0000
asID: 136787
IP address blocks: 156.67.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 13:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:83:46:b0:88:57:9a:9c:97:47:2c:bb:d3:d1:24:37:87:80:d0:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 27 20:00:19 2024 GMT
Not After : Oct 26 20:05:19 2025 GMT
Subject: CN=60C22E81F2A8D63D3C1D83719070CB48658DB68E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4f:5a:b5:da:c6:3b:72:42:fc:70:6f:66:a2:
f7:ae:69:b8:df:87:24:96:52:4e:88:66:77:d4:3a:
e8:c6:95:08:09:6e:fd:5a:c0:82:c6:91:cb:19:13:
6b:e7:85:49:3a:7b:d2:22:c8:85:92:4a:8c:66:b5:
26:2c:d2:2e:90:c2:89:0e:36:d7:d6:4e:84:31:50:
85:fa:c2:31:11:06:fe:40:71:08:fd:9c:97:99:21:
d9:39:1c:9d:c4:1e:ba:d8:ca:64:39:92:58:9c:50:
e1:63:b2:47:4e:f1:32:25:06:2d:8e:6a:87:11:bc:
bd:1c:c1:34:6f:ac:1f:e6:ba:72:7a:47:4f:ef:44:
5a:d7:64:18:0b:ab:b3:3f:68:89:12:50:36:20:35:
1b:06:2a:f5:80:6f:b6:64:1a:ad:b9:0e:9d:60:ed:
13:f3:c4:f7:ce:d9:28:83:93:16:52:71:e4:da:a5:
ff:3f:ac:12:c0:d6:85:f7:d7:1d:a4:5e:fb:3e:3d:
ed:6d:f3:09:b8:3a:16:f1:38:87:9c:5d:d3:b2:ca:
38:2f:1c:68:7a:1a:0c:51:ef:01:36:2f:ec:c5:27:
a4:60:ed:53:47:43:e7:f0:ce:17:1b:e3:57:f5:68:
59:5f:9b:8b:3d:2d:5d:82:b7:ce:5a:29:76:95:13:
ab:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C2:2E:81:F2:A8:D6:3D:3C:1D:83:71:90:70:CB:48:65:8D:B6:8E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e3132362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.67.126.0/24
Signature Algorithm: sha256WithRSAEncryption
48:08:4e:80:31:93:92:2a:35:59:11:f9:81:0c:65:77:d4:42:
6c:fa:fc:8c:db:0e:88:4e:a6:84:0f:d6:7e:93:d2:dc:c4:b6:
ac:de:79:d8:17:d6:70:4b:c3:ed:26:5c:0a:27:e7:69:d4:6e:
b3:64:e6:a2:da:0d:4a:ef:1d:81:cc:51:5c:7f:6e:2f:ee:82:
86:d0:0b:f3:4e:82:78:33:52:f4:c9:25:e7:81:e0:c4:db:d5:
49:e5:78:82:0d:65:87:42:3e:49:9d:46:16:f0:ec:2b:5e:ed:
dd:78:a7:d8:2e:8b:fe:16:a5:da:59:15:f6:5e:5e:28:d2:8f:
03:4d:c8:92:08:74:b8:9a:db:31:97:a7:be:cc:47:fa:62:39:
72:5e:b3:62:5d:ee:3a:75:b3:f2:b1:30:6f:e8:54:26:57:68:
53:ab:c7:1a:75:df:83:f8:40:9b:53:36:59:4e:fd:d4:c3:35:
2d:3d:6d:b7:ce:cd:1d:51:e5:61:4f:60:06:ae:d3:c9:a9:b4:
84:aa:7d:12:f9:f0:e6:1a:6c:2a:11:75:07:78:f9:16:13:a8:
cc:58:e3:c6:9c:e9:4d:90:ee:92:2c:0e:47:0a:17:1a:10:ee:
f0:22:d0:56:be:65:aa:0e:94:5f:7d:6b:7d:51:be:fe:cb:d2:
20:9a:e6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:23 2025 by rpki-client