Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e38392e302f32342d3234203d3e203630363935.roa
File: 3135362e36372e38392e302f32342d3234203d3e203630363935.roa (raw, json)
Hash identifier: h3lAT289W8Qk7iSkeRD5jzOm9tWJjbGisnEm36ASTjA=
Subject key identifier: F6:7E:3D:AB:98:D9:02:16:11:7C:A5:31:6C:E0:54:EF:13:7D:19:26
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4F9053EA5B89B31C1C7FFB565F9D973EDFA68192
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e38392e302f32342d3234203d3e203630363935.roa
Signing time: Mon 26 Feb 2024 08:53:06 +0000
ROA not before: Mon 26 Feb 2024 08:48:06 +0000
ROA not after: Mon 24 Feb 2025 08:53:06 +0000
asID: 60695
IP address blocks: 156.67.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:90:53:ea:5b:89:b3:1c:1c:7f:fb:56:5f:9d:97:3e:df:a6:81:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:06 2024 GMT
Not After : Feb 24 08:53:06 2025 GMT
Subject: CN=F67E3DAB98D90216117CA5316CE054EF137D1926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:30:47:67:64:d5:0d:bb:4f:e3:9d:e3:22:bb:
3c:1d:59:ab:95:41:18:c8:01:b6:08:d9:4b:c6:39:
73:ff:ab:f1:f0:55:b4:47:35:89:45:00:90:67:86:
45:fc:83:a4:1a:14:36:92:03:17:ac:60:e6:0d:f9:
33:96:60:78:46:85:80:a4:08:75:01:de:09:39:b8:
2a:1b:da:4a:96:5c:bb:fe:ba:6b:4f:2c:7e:5b:d2:
33:1a:59:ee:33:24:4b:41:4b:e0:44:9e:f4:05:43:
89:72:fe:f1:41:4e:cc:f7:24:fb:cb:f9:f7:e4:19:
07:24:a6:d1:6f:9b:b8:e3:63:49:cc:a7:c7:50:5b:
90:98:13:55:34:93:53:f2:a0:b3:22:bb:a6:1e:c9:
62:8b:a1:4c:bb:e3:0c:a6:4d:1f:b3:2b:35:e5:a1:
1e:a5:a1:dd:f8:36:e6:56:89:cd:eb:d7:a3:55:6f:
c8:1c:88:a3:9a:59:2f:6a:65:02:83:07:a1:80:e9:
49:a5:49:67:c8:7b:78:74:68:26:da:72:7d:df:e4:
e4:8c:68:99:5e:fd:06:31:8c:dd:47:bd:b2:57:48:
67:f1:52:8f:2d:cf:10:b4:06:0b:57:33:7f:78:2a:
fe:83:f1:97:58:0d:28:39:bd:b4:e8:91:14:c0:a0:
33:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7E:3D:AB:98:D9:02:16:11:7C:A5:31:6C:E0:54:EF:13:7D:19:26
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e38392e302f32342d3234203d3e203630363935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.67.89.0/24
Signature Algorithm: sha256WithRSAEncryption
21:70:2c:1c:fd:50:c7:ee:5d:5c:41:26:36:9f:26:fd:43:93:
11:da:95:79:51:09:45:70:d1:47:8f:48:06:36:7c:84:2c:7b:
97:20:4a:d7:7a:89:56:c8:34:bd:06:47:bb:61:a9:a1:1b:bc:
d4:93:37:b7:5a:b5:d1:c4:13:b2:67:f4:12:e7:b4:10:f3:b5:
c7:75:76:24:8a:23:46:c5:6d:e5:b0:4e:46:e6:da:0a:32:ab:
7a:b8:d7:91:6a:a3:a3:d0:17:73:e7:cc:45:38:82:6f:c6:7b:
cb:6b:ce:73:bb:05:c8:8c:3a:b7:9f:31:33:df:07:d9:8e:72:
cf:55:13:0d:28:f2:8c:30:f4:b7:b0:1d:66:b4:a6:33:93:18:
d4:d2:bb:42:55:aa:60:31:51:ed:aa:ff:c9:63:d8:2c:b7:7f:
d5:38:53:39:ca:78:72:ab:22:27:90:00:38:12:15:2f:bf:8c:
02:68:82:c7:3e:df:77:42:d2:32:73:59:86:01:8f:9d:17:21:
9e:3c:5b:38:d0:0a:6a:da:25:e8:6a:64:ee:4c:15:52:3d:d2:
6e:71:dc:86:6c:07:fe:ac:78:c5:3e:0e:31:84:85:d4:8e:f1:
3c:62:c1:77:58:ba:95:2c:25:de:6e:58:39:9d:1b:c5:e5:26:
55:c3:d9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 08:01:44 2024 by rpki-client on console-fra.rpki-client.org