Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e39322e302f32342d3234203d3e20313336373837.roa
File: 3135362e36372e39322e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: O7QpapUiKCWMGWNbhvYM8cXBuRVS7ySeRbteK/Brt+I=
Subject key identifier: 94:1A:59:5A:98:CC:9B:44:D4:C8:33:6D:24:22:1A:CA:99:83:45:20
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 387C8169AEF07D397742BBBE1167E99895420E3D
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e39322e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 26 Feb 2024 08:53:00 +0000
ROA not before: Mon 26 Feb 2024 08:48:00 +0000
ROA not after: Mon 24 Feb 2025 08:53:00 +0000
asID: 136787
IP address blocks: 156.67.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:7c:81:69:ae:f0:7d:39:77:42:bb:be:11:67:e9:98:95:42:0e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:00 2024 GMT
Not After : Feb 24 08:53:00 2025 GMT
Subject: CN=941A595A98CC9B44D4C8336D24221ACA99834520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:89:61:3a:d6:b4:a9:57:d6:6e:eb:5e:2d:9d:
94:c4:74:d7:38:e9:d8:9c:af:d3:c8:d9:89:24:f6:
4f:02:9c:9c:62:dd:a0:77:ae:26:b3:a0:21:31:86:
06:96:eb:4d:42:fa:33:4f:f3:6c:f9:68:b4:a6:94:
aa:03:cf:ae:c1:a3:b8:5e:e3:31:c5:3e:6f:f3:41:
67:9e:2e:31:af:5a:17:86:b2:7d:3e:d2:bc:66:55:
5b:d8:b8:3b:f6:69:a6:c8:84:be:22:8d:8b:db:a2:
db:cf:2b:79:0c:d1:13:2c:0d:18:62:9d:35:35:d5:
1a:e6:a5:7c:6a:ff:66:2d:26:23:36:54:61:70:ef:
fd:d0:56:56:48:2d:06:8d:f3:46:5a:8a:bb:f5:b4:
10:23:48:e6:d4:64:ab:45:6b:7b:9b:c4:83:f0:cb:
f7:46:0b:e6:42:27:2e:f4:7b:20:9d:d8:54:6d:26:
27:fd:f2:40:88:9f:4b:7a:7b:10:d8:1f:13:c0:a2:
52:cf:96:43:f9:20:c8:13:dd:2c:ac:38:a7:ae:1a:
71:d8:e7:ee:33:a2:e7:ac:cc:04:1c:f4:fd:52:85:
34:3e:b5:2c:1a:2f:50:67:c5:2b:b0:57:bf:ec:74:
c3:f7:25:03:e7:0b:d5:aa:d2:6e:13:a6:9e:dd:7b:
4c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1A:59:5A:98:CC:9B:44:D4:C8:33:6D:24:22:1A:CA:99:83:45:20
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e39322e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.67.92.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:04:ea:aa:d6:64:bf:e3:1a:c6:0b:f7:09:0f:80:c4:50:0b:
cc:b2:78:04:0d:d4:db:a4:0a:84:5a:2e:af:b2:ce:0d:26:49:
32:50:6f:bf:70:67:51:f4:37:64:7c:a1:e7:6d:4b:57:f4:36:
68:18:ca:6e:8f:d9:0b:47:6c:1c:fa:71:5a:93:55:c8:aa:59:
47:36:ea:cc:cb:c1:6d:2e:5c:3a:6d:3b:92:4a:26:24:9d:94:
02:1a:b9:c7:86:94:60:d8:53:23:c3:cc:91:8d:8f:81:fc:67:
02:bb:90:67:24:45:42:a2:9f:c2:29:c2:f9:ed:cb:e7:ef:e9:
22:83:91:23:ff:b7:b3:14:16:19:62:8f:3c:f3:84:7d:d2:fe:
43:99:bf:3b:21:e5:46:45:1d:e6:47:7e:e1:de:2e:70:cd:c3:
b6:d3:9f:70:d6:a3:28:2b:b4:55:f2:ca:ea:3d:86:cc:e0:e1:
8d:7c:e5:fe:36:e5:65:02:29:32:7f:31:13:f5:7c:86:63:dd:
89:ce:0d:34:3e:85:e1:77:11:fb:5d:a8:81:a9:ab:64:32:29:
0b:39:a3:ad:52:b1:c3:e1:39:98:75:05:a9:df:ff:f9:05:a2:
e4:09:d6:d2:21:e8:d8:2a:ef:e6:d3:c3:e2:52:e4:88:1c:30:
0e:5e:44:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 21:04:27 2024 by rpki-client on console-fra.rpki-client.org