Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e38342e302f32342d3234203d3e20313336373837.roa
File: 3135362e36372e38342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: cphoC0JjVGgBIFvb9R4yZaHpgdk5V30FybdPtb3wmVs=
Subject key identifier: 40:A9:4E:BB:7B:AF:84:8F:21:10:41:34:CF:8B:0D:DF:B0:FC:1C:46
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7DE1D2BD2C36E27830E3C4A3C08C5A9A4F38A853
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e38342e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 26 Feb 2024 08:53:17 +0000
ROA not before: Mon 26 Feb 2024 08:48:17 +0000
ROA not after: Mon 24 Feb 2025 08:53:17 +0000
asID: 136787
IP address blocks: 156.67.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 16:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:e1:d2:bd:2c:36:e2:78:30:e3:c4:a3:c0:8c:5a:9a:4f:38:a8:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:17 2024 GMT
Not After : Feb 24 08:53:17 2025 GMT
Subject: CN=40A94EBB7BAF848F21104134CF8B0DDFB0FC1C46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bf:49:47:be:71:db:0a:69:ca:ac:89:ff:be:
6f:f8:d4:95:0d:3a:02:51:b7:dd:26:5f:a7:ea:44:
7d:d8:1a:82:69:0d:6c:e7:b4:91:8a:4c:0a:99:8a:
bd:6e:53:0c:d5:13:27:5f:7f:3d:62:bd:41:ba:db:
d5:21:b4:5d:0b:a6:be:d0:76:03:0d:df:b2:00:28:
66:ca:15:55:f8:75:0e:52:1d:61:a2:7c:ac:ad:51:
93:8e:93:48:26:af:eb:7c:ed:51:a5:b7:03:ed:f8:
b2:30:c9:f1:51:30:67:88:d2:d9:b5:78:6e:d7:4d:
20:10:f3:ac:56:b4:e4:8c:04:53:32:6c:8b:36:96:
13:65:7f:fc:58:91:8b:4a:cc:c5:4e:7d:2d:fc:19:
1b:80:35:8d:88:14:3e:e7:4f:10:f7:65:ac:36:b9:
50:2e:69:ad:ab:5c:af:4a:fb:33:00:72:f0:af:33:
96:30:8f:ff:35:41:32:f4:cf:6a:59:bc:bb:46:13:
24:5d:82:50:fd:95:54:21:c0:89:0a:38:a0:ce:bb:
1a:01:a7:c7:3e:6b:2b:ba:ef:85:ec:82:fc:43:3f:
61:b2:42:4c:f4:55:f4:19:72:ce:1b:63:25:0d:70:
c8:35:b6:27:df:87:92:a8:78:ab:36:52:5b:2b:f9:
8b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A9:4E:BB:7B:AF:84:8F:21:10:41:34:CF:8B:0D:DF:B0:FC:1C:46
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e38342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.67.84.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:c7:27:4f:7c:54:24:c8:ea:12:af:a4:73:34:5b:11:d9:74:
70:be:ee:8e:68:e1:3a:8e:d4:27:b0:92:fa:74:79:8f:0c:93:
93:46:2c:a6:05:4c:2f:25:cf:1a:05:45:f7:79:bb:ec:9b:c2:
5f:a4:8a:e7:64:7f:91:12:b9:14:3e:b9:d1:e9:b7:60:82:bf:
ac:62:7e:e7:e0:cc:77:b2:b3:9b:c4:2e:6a:47:9f:f7:f8:44:
a5:e0:25:e3:b2:53:f8:bb:28:54:35:01:a4:aa:86:b0:59:58:
a4:f2:30:63:32:43:b5:3c:06:99:0f:63:ce:ed:18:43:e2:01:
13:a1:41:d1:83:c3:b1:35:d8:66:df:7f:15:77:35:c7:7c:db:
f3:0a:ca:1b:9c:06:e5:d1:fb:62:f7:b1:34:35:0c:36:7c:f4:
08:6c:b6:03:b8:10:47:14:5c:4a:65:7d:45:25:5b:4a:1b:38:
da:d4:90:3d:82:63:37:ee:32:93:f0:66:8a:17:d2:c4:7c:e5:
26:79:7f:ed:62:88:b3:f1:5e:59:74:d4:22:1f:74:85:c5:2b:
b6:82:4d:59:59:ae:3d:71:8c:06:f2:35:af:8c:e3:50:57:b4:
d5:53:50:f3:94:70:b1:c4:ea:a0:a5:22:ee:43:bf:bf:1c:cc:
a7:7e:16:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 19:21:53 2024 by rpki-client on console-ams.rpki-client.org