Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e38352e302f32342d3234203d3e203632323430.roa
File: 3135362e36372e38352e302f32342d3234203d3e203632323430.roa (raw, json)
Hash identifier: KqYy1rUu6Bhfzo6CJ/tY1NcQXtdGPeIH0kyRTf5f184=
Subject key identifier: 5D:CD:67:BA:EE:24:6E:FA:A9:05:E0:51:7A:F6:B1:7C:1A:33:A7:3F
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 014A25344B1953470A0DAAEB9903EB086CC8C523
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e38352e302f32342d3234203d3e203632323430.roa
Signing time: Mon 26 Feb 2024 08:53:27 +0000
ROA not before: Mon 26 Feb 2024 08:48:27 +0000
ROA not after: Mon 24 Feb 2025 08:53:27 +0000
asID: 62240
IP address blocks: 156.67.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:4a:25:34:4b:19:53:47:0a:0d:aa:eb:99:03:eb:08:6c:c8:c5:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:27 2024 GMT
Not After : Feb 24 08:53:27 2025 GMT
Subject: CN=5DCD67BAEE246EFAA905E0517AF6B17C1A33A73F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:da:e1:33:62:63:49:4d:a0:a6:d0:f4:11:a1:
18:4a:1d:e2:18:f2:5e:5c:11:c4:a0:99:5f:58:02:
6d:7d:f0:e3:d2:a0:dc:09:2a:f9:ba:72:e4:33:c2:
43:1e:8e:6a:b7:35:f9:a1:43:17:b8:97:43:a9:c6:
b8:ad:5f:0c:f1:52:ef:44:30:b3:27:c5:21:b8:e3:
a3:19:38:2f:1e:90:ac:a0:a4:19:d5:c5:0e:c0:2e:
9c:9f:1a:c0:5c:f7:bc:99:d8:da:3d:b9:a5:db:4f:
f3:8d:05:44:29:d4:99:4c:4f:d6:d9:c6:4b:45:63:
0b:ad:b0:e8:cc:b2:70:a1:87:65:af:4c:a4:25:f7:
14:92:dd:00:79:ad:1e:de:50:59:e9:c4:1e:f2:fe:
9c:89:fe:63:12:cb:5a:f0:92:b1:53:76:f1:c2:3b:
33:a5:eb:36:a6:36:f9:68:8d:51:41:23:09:7d:b9:
a2:c2:13:de:cc:51:e3:c3:9f:73:88:00:79:f5:64:
3e:b9:68:e0:ad:d1:56:4a:b0:f6:75:9d:95:b6:85:
d4:12:7d:7c:45:b2:1a:e3:9c:de:45:51:ce:73:f3:
44:d4:7c:e4:f4:01:bf:28:37:fc:f4:e4:d6:50:e2:
20:39:cf:72:49:4f:72:e0:19:43:80:29:7f:62:b2:
97:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CD:67:BA:EE:24:6E:FA:A9:05:E0:51:7A:F6:B1:7C:1A:33:A7:3F
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e38352e302f32342d3234203d3e203632323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.67.85.0/24
Signature Algorithm: sha256WithRSAEncryption
19:fd:f5:47:f8:dd:15:db:0f:c9:1f:2a:bd:43:f1:0b:27:58:
32:58:8a:58:72:f1:36:ff:4a:57:ca:d0:d5:31:ea:a7:f9:e6:
bd:10:a0:ad:11:63:6e:54:be:c7:1e:27:43:b4:72:59:8d:5a:
6b:67:ce:a0:a0:e0:b5:f4:56:db:cf:37:fa:e6:f7:0c:de:6e:
48:af:3a:be:3b:98:d8:f4:a9:86:40:46:be:76:2a:f7:1b:f7:
39:10:31:ad:3b:6b:09:ea:d9:ab:30:95:45:64:0b:07:d4:2a:
ec:88:08:03:3f:83:e8:0a:ef:f8:c7:3b:86:4c:4a:a8:8b:a2:
60:9a:35:58:a0:42:15:5d:29:5e:6e:df:a2:0e:12:0e:ae:94:
22:b0:ec:bb:c3:0a:ed:a1:5e:20:1b:a2:0a:9f:10:42:6e:9b:
5f:8e:0b:27:7d:1e:9e:fa:d1:04:61:b2:08:2a:65:b6:0f:4b:
f0:89:b2:84:41:08:97:ac:36:fb:27:98:19:c1:51:1b:97:df:
bf:e4:1d:46:dc:88:cd:16:3a:c5:45:3d:b1:ce:d5:74:fb:df:
e3:74:8b:41:4c:21:3d:34:24:63:4d:83:b8:c1:35:54:6b:03:
85:3d:da:f4:6f:71:dc:98:f2:d1:a5:3b:ee:63:bc:59:f9:de:
bc:35:02:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 21:26:34 2024 by rpki-client on console-fra.rpki-client.org