Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e38302e302f32322d3332203d3e203531313637.roa
File: 3135362e36372e38302e302f32322d3332203d3e203531313637.roa (raw, json)
Hash identifier: OYXZovStdftfcbxR1sTSa07GSw76cYkYxLGDs95/+K8=
Subject key identifier: EF:1A:76:46:92:19:A2:8D:20:16:A2:44:13:EA:99:83:4D:06:A7:AE
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 61ED212B8AC14EBEC3AC4F5D356E815A1BDEBCE2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e38302e302f32322d3332203d3e203531313637.roa
Signing time: Tue 09 Apr 2024 07:26:19 +0000
ROA not before: Tue 09 Apr 2024 07:21:19 +0000
ROA not after: Tue 08 Apr 2025 07:26:19 +0000
asID: 51167
IP address blocks: 156.67.80.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:ed:21:2b:8a:c1:4e:be:c3:ac:4f:5d:35:6e:81:5a:1b:de:bc:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 9 07:21:19 2024 GMT
Not After : Apr 8 07:26:19 2025 GMT
Subject: CN=EF1A76469219A28D2016A24413EA99834D06A7AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:57:9f:ae:d2:a0:fa:97:9a:7f:bb:93:7d:14:
34:3b:54:dc:1d:f0:1a:15:e6:f1:57:40:04:f9:6a:
81:2f:62:17:ef:fd:f9:74:24:71:41:9d:6b:70:76:
c3:27:1f:c6:7a:16:eb:f9:5d:b2:bb:28:e3:ae:71:
70:1f:9c:6c:35:6e:20:d9:a6:e1:2d:d3:a8:ed:90:
81:79:4c:8b:44:83:50:b3:6e:e3:44:75:b7:31:38:
bb:e0:bc:a4:bc:24:0c:71:20:32:78:5c:33:f2:f4:
87:82:26:18:22:99:8e:27:7f:c2:5f:d4:7b:1a:70:
93:cb:4b:29:55:9d:15:88:5f:e6:ed:bd:38:b2:dc:
bc:6f:71:54:e7:c5:74:dc:56:6b:85:7d:78:9d:0b:
cb:ad:49:57:b1:ce:a5:7e:a8:a0:f5:23:4e:0c:ef:
c1:2c:08:d1:b3:40:c8:d6:ee:4f:2b:7a:75:09:5e:
b2:29:e5:a4:e7:b0:e9:c0:94:5b:85:fa:e7:f5:f0:
47:3f:92:3a:de:b9:62:04:62:e1:82:de:5e:7b:3e:
37:6a:52:5a:11:35:c9:46:d3:06:aa:be:40:3b:97:
4b:d8:fa:ba:28:14:21:05:df:b4:13:47:36:23:84:
c9:cf:d9:f6:79:08:df:ed:7e:76:bb:ad:7f:1c:c7:
85:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:1A:76:46:92:19:A2:8D:20:16:A2:44:13:EA:99:83:4D:06:A7:AE
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e38302e302f32322d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.67.80.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:6f:d9:6c:00:1d:78:68:34:0b:7b:9c:28:c8:eb:b8:48:ac:
86:52:91:e0:d6:ac:6e:fe:da:39:ad:cd:47:22:8a:ac:04:51:
01:75:07:67:83:33:a1:56:bc:d8:23:bb:c2:52:cc:6e:e4:63:
df:3e:cc:36:71:60:be:f8:28:37:3b:9e:1f:9d:5f:11:4d:84:
bc:b6:17:1c:f5:52:ed:0a:fa:4a:36:36:98:3d:2d:e3:16:90:
f1:b5:f9:29:27:3d:b5:0f:b6:32:38:08:72:4f:77:ae:1f:a8:
79:69:be:7c:71:ce:c0:b7:c2:c4:a6:7f:ec:df:95:f5:5e:a5:
01:c4:89:8f:ee:f4:f9:fd:a1:cc:54:34:9b:d1:8a:e0:ff:d4:
b3:8a:32:63:e9:65:4f:2d:2d:53:af:3e:0c:29:90:f0:35:e2:
0a:86:e5:02:6c:47:5b:11:57:5c:2b:af:2a:b3:d4:3d:9e:af:
e9:2b:e7:29:35:b9:4a:eb:e4:cd:77:fb:c3:6c:16:7b:d2:40:
bf:e1:a9:23:5b:4f:31:7f:ea:e9:69:f1:9b:30:fa:94:80:aa:
11:f1:ff:7c:c3:0a:15:c2:92:a6:ca:03:5e:ac:57:49:73:b6:
56:5c:db:b0:04:1d:1d:21:84:f0:dc:14:eb:67:d5:9d:6e:28:
59:3e:33:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 09:23:49 2024 by rpki-client on console-ams.rpki-client.org