Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e39332e302f32342d3234203d3e20313336373837.roa
File: 3135362e36372e39332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Sq7sArN2z4YpDc4qTKYeaFFVBckBmOaCqGtpawU/MOE=
Subject key identifier: 0F:D0:C0:E1:56:AB:31:FA:9D:93:9C:F7:B8:1A:B4:48:6B:A3:4E:81
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6712DF0D97064B3FE09249D55334067571A4986A
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e39332e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 26 Nov 2023 19:49:05 +0000
ROA not before: Sun 26 Nov 2023 19:44:05 +0000
ROA not after: Sun 24 Nov 2024 19:49:05 +0000
asID: 136787
IP address blocks: 156.67.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 16:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:12:df:0d:97:06:4b:3f:e0:92:49:d5:53:34:06:75:71:a4:98:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Nov 26 19:44:05 2023 GMT
Not After : Nov 24 19:49:05 2024 GMT
Subject: CN=0FD0C0E156AB31FA9D939CF7B81AB4486BA34E81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:08:38:6e:4e:b8:bc:96:7f:88:87:5b:a6:7d:
50:4e:ab:e5:46:3c:78:a7:38:60:3a:e4:74:70:4a:
bf:57:f6:ea:ad:d0:aa:02:46:ee:a4:a3:45:3c:fc:
00:a2:2c:e8:8b:dc:b4:57:10:33:f6:29:e4:46:47:
6b:16:ed:5a:df:26:78:83:71:f4:1c:dc:33:94:22:
95:2c:cd:e9:0b:f6:ab:e2:fd:79:fe:fa:35:56:e1:
e1:99:26:89:3c:aa:7c:6c:18:d9:13:bc:bf:84:31:
dc:fb:0a:fc:1e:c6:79:ad:78:d9:73:4b:04:af:8b:
47:4f:8d:7d:e7:32:a6:bf:bd:86:ab:b9:81:04:2b:
97:ee:64:1e:a5:f7:9c:62:f3:d7:12:be:62:e7:d3:
fe:c9:69:76:7c:5d:7e:56:d2:56:88:cc:b2:a3:bc:
c7:d8:b1:11:4a:c7:6c:22:9e:56:a1:0e:84:e5:6c:
a3:65:1c:e5:37:0d:e2:16:b2:68:f3:ac:af:0c:66:
94:0d:48:74:54:44:51:7d:20:76:15:57:57:4e:87:
09:21:93:13:cc:2e:0c:f0:0f:ac:2c:e6:c0:21:cd:
b5:c0:18:c3:9a:2f:42:f2:21:cf:dc:b4:3f:a1:5b:
70:e0:fd:8f:e0:bb:0b:28:c4:82:ef:d0:35:30:8a:
52:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D0:C0:E1:56:AB:31:FA:9D:93:9C:F7:B8:1A:B4:48:6B:A3:4E:81
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135362e36372e39332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.67.93.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:e8:31:0c:b8:ec:5b:8d:88:fe:0f:ab:5f:10:23:47:ee:36:
b3:ff:82:03:9d:3c:7c:d7:b2:df:31:aa:8d:76:66:e9:7d:a6:
04:e3:04:39:2a:af:77:27:07:ee:1b:91:38:0f:07:a4:87:d6:
a5:29:42:fe:5f:8b:4b:38:b8:70:68:a3:d9:df:47:a4:a9:7a:
3c:80:f0:f7:6b:9e:a9:4d:98:73:e6:51:91:ba:27:ad:16:26:
dc:93:46:22:d9:e3:0b:69:17:b7:40:0a:0f:04:54:23:f5:80:
9b:33:38:72:68:cd:cc:86:58:1d:07:60:bd:7c:6d:7f:3b:81:
a4:79:cc:84:4c:82:58:fb:be:e2:75:d7:b9:39:d0:99:22:66:
26:be:c5:cd:46:cc:ce:fd:96:d1:b2:69:b8:61:20:4f:c8:10:
12:07:ac:ba:a9:98:91:a5:ca:10:d2:71:f1:4f:30:de:db:f2:
bd:a5:a3:6f:8b:cf:9d:99:ff:5b:b9:3e:ef:6a:fe:3c:ba:52:
4b:df:09:74:97:3a:7b:0d:f5:88:e6:4b:ed:f9:bc:cd:24:a4:
e7:1d:ff:f3:65:3c:e6:46:bd:8f:e3:8f:7d:cc:e7:00:95:a1:
56:89:1b:59:16:f9:c2:6c:3f:99:d4:3e:91:a9:80:4b:e6:8a:
24:21:0a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 19:21:53 2024 by rpki-client on console-ams.rpki-client.org