Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37332e302f32342d3234203d3e20313336373837.roa
File: 3135382e3232302e37332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: BnLFxInbyZ4sU8gF6DW1vwVJHAq5+ogcQLl6jXgT+8A=
Subject key identifier: 1C:7B:B3:D1:4D:0A:40:F3:F5:54:03:4D:22:A1:F7:AD:8D:92:EF:DE
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 547864F4BC8A3EE89C60D776F227E217FE18E880
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37332e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 11 Jun 2023 10:59:36 +0000
ROA not before: Sun 11 Jun 2023 10:54:36 +0000
ROA not after: Sun 09 Jun 2024 10:59:36 +0000
asID: 136787
IP address blocks: 158.220.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 16:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:78:64:f4:bc:8a:3e:e8:9c:60:d7:76:f2:27:e2:17:fe:18:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 11 10:54:36 2023 GMT
Not After : Jun 9 10:59:36 2024 GMT
Subject: CN=1C7BB3D14D0A40F3F554034D22A1F7AD8D92EFDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4c:20:8b:17:a4:07:3f:89:e7:be:74:58:5f:
81:31:fc:35:ff:70:bf:9a:29:91:57:45:d8:7b:21:
6f:30:d7:c8:23:de:b8:96:64:06:b8:97:80:32:d7:
70:84:d5:10:63:33:0a:cb:22:7d:70:06:95:bc:40:
de:2f:65:09:69:d2:7a:e0:ee:45:b3:53:7e:07:c1:
3b:30:d3:60:16:01:eb:b2:c8:16:50:3e:29:70:6f:
96:7a:c3:5f:21:c9:2f:26:34:d8:c5:84:97:11:4b:
d1:af:1d:10:05:c0:df:34:84:79:12:30:23:36:36:
ab:f5:04:73:6c:f8:01:5a:95:a5:11:db:b9:c1:15:
f9:90:eb:33:4a:8d:5d:69:13:15:9f:ae:60:1c:8e:
b2:41:21:c3:a9:66:70:2b:33:b5:52:38:2b:bb:e3:
f6:d4:23:18:d2:c9:88:7a:d5:61:2a:11:02:c3:72:
50:a1:4f:7f:62:64:af:7c:a0:1b:ea:59:ee:0d:c4:
a6:9a:89:8a:84:18:af:9a:0a:6c:e6:7e:37:52:3a:
13:70:1f:ca:0e:6d:29:e9:d6:a5:eb:59:f5:d8:9b:
19:e5:7f:f2:56:4e:3b:63:5a:75:47:25:19:6c:84:
7f:02:68:68:e2:12:c5:c3:46:e6:ae:8b:45:30:22:
a4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:7B:B3:D1:4D:0A:40:F3:F5:54:03:4D:22:A1:F7:AD:8D:92:EF:DE
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.220.73.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:78:4c:3b:b0:b1:64:59:31:4c:80:8d:c9:f8:74:1d:9f:32:
70:05:85:92:57:eb:18:ae:e6:af:13:bc:3b:a7:3a:4a:e6:4d:
c1:e0:db:ab:02:91:ac:74:39:23:de:2b:aa:26:74:90:71:3d:
42:8d:8c:d4:db:e7:26:04:e2:52:e8:ce:83:40:b1:d5:0c:9f:
ae:f8:d9:af:fb:34:ae:83:4c:74:7f:51:f7:55:e7:c7:6e:f0:
35:d7:2f:00:ea:08:ba:02:15:e2:fe:35:17:78:20:c2:d9:f6:
ef:fb:dd:a6:9a:fe:9c:e5:95:d4:23:46:a0:0c:99:81:70:42:
63:ab:b6:ff:ef:fd:1d:07:37:05:18:76:a0:ff:2c:63:69:cc:
28:05:7f:e9:ba:ef:81:79:92:4d:6e:93:73:2c:71:30:86:d8:
e8:50:65:53:0d:b5:db:ac:b5:ab:db:9a:a2:3c:58:81:d1:b6:
a5:a6:fc:13:59:13:58:d6:e1:d8:fd:cd:33:d2:a0:99:c8:62:
18:14:32:d5:5d:be:4d:31:82:67:f8:2f:41:c9:b0:7e:49:81:
eb:89:6a:f0:bb:67:d5:b8:85:46:e8:71:fd:7c:23:a1:5b:53:
07:63:0f:12:38:e9:63:41:20:ad:1a:b0:c2:25:48:de:7d:c0:
c2:a5:71:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 20:21:25 2024 by rpki-client on console-fra.rpki-client.org