Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37362e302f32332d3234203d3e20313336373837.roa
File: 3135382e3232302e37362e302f32332d3234203d3e20313336373837.roa (raw, json)
Hash identifier: wfFRwrGizVbZ5r1Tnm+461Yr/IJel3ij+Qzn0sLgcjU=
Subject key identifier: CB:A0:54:6E:F5:3D:24:0E:54:66:3C:57:1D:F6:6D:2A:37:97:79:C7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 18ABCC1C9870A36BE87383F80C73AE19A62EB88C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37362e302f32332d3234203d3e20313336373837.roa
Signing time: Sun 11 Jun 2023 10:59:49 +0000
ROA not before: Sun 11 Jun 2023 10:54:49 +0000
ROA not after: Sun 09 Jun 2024 10:59:49 +0000
asID: 136787
IP address blocks: 158.220.76.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 16:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:ab:cc:1c:98:70:a3:6b:e8:73:83:f8:0c:73:ae:19:a6:2e:b8:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 11 10:54:49 2023 GMT
Not After : Jun 9 10:59:49 2024 GMT
Subject: CN=CBA0546EF53D240E54663C571DF66D2A379779C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8c:78:d4:36:a0:db:7c:75:b4:ff:e8:02:c8:
7a:3d:e0:90:d8:49:5b:45:ff:09:ec:58:b9:cc:6d:
21:0b:10:53:b7:68:d2:b8:0a:a4:45:03:b6:26:71:
48:86:5b:b2:8d:3c:ea:ec:ce:31:40:d6:b4:d8:05:
f8:b4:69:bd:57:37:95:e9:d8:4e:fc:f9:5b:80:66:
7e:13:c2:e0:a5:1a:62:6e:1f:41:a4:a8:4e:22:24:
7f:bd:3f:8a:57:c2:a3:f1:a3:20:c1:9e:b4:54:ee:
0b:73:28:aa:e4:49:83:c9:ab:dd:d9:3f:08:39:ad:
46:ea:44:bb:04:0a:de:38:da:1a:a9:5a:69:53:cc:
8b:c9:6a:74:0e:a6:d9:7e:4c:c7:05:6f:79:88:bf:
58:aa:7f:5d:99:a9:b2:fb:4f:86:f6:75:bf:a3:9f:
fa:da:42:36:f9:02:bc:a0:38:2e:a5:36:ea:18:99:
8b:d7:6a:71:3b:47:86:f1:90:a1:18:27:de:c8:4a:
98:47:0e:43:0b:0e:5b:07:66:17:04:c9:4f:bb:54:
df:d2:56:23:22:a0:61:89:7d:5d:6a:57:81:63:e4:
7d:c4:d7:a5:70:4d:6b:53:c3:38:a7:90:a3:b4:71:
f6:e5:36:6f:a4:67:73:6a:a7:3f:fb:6e:00:23:a5:
88:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A0:54:6E:F5:3D:24:0E:54:66:3C:57:1D:F6:6D:2A:37:97:79:C7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37362e302f32332d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.220.76.0/23
Signature Algorithm: sha256WithRSAEncryption
73:98:83:22:fc:14:cd:52:9b:f0:ca:f9:09:fa:84:60:ee:d8:
68:55:d8:98:72:23:97:96:c3:90:39:df:6e:65:87:2c:a2:ce:
98:66:d5:51:2c:df:b0:a9:9a:50:59:92:79:f3:f9:11:76:9b:
9c:2e:58:5e:c7:84:73:4e:23:1f:fa:e4:ab:8e:28:1f:01:b3:
7e:74:f2:23:87:ea:fe:f2:5e:94:15:3b:fe:4e:99:dc:0a:aa:
77:8f:38:93:68:ce:25:ad:f7:7d:ae:68:26:fe:48:97:a8:6a:
e9:1d:a7:55:b6:18:74:32:45:70:15:77:53:56:25:19:ba:8d:
20:b1:a1:a7:95:fd:9c:cf:f9:07:72:5f:fc:49:f7:b5:70:ab:
4d:d9:38:9f:77:f8:ca:cc:21:d1:04:da:48:8c:86:26:13:fb:
ea:14:b6:eb:98:a0:48:f8:66:ed:05:b2:34:10:a0:f5:4e:a6:
d5:51:65:8d:84:61:35:3c:ed:08:0a:10:59:10:6a:fe:0b:57:
df:53:09:1b:ef:82:67:75:05:c8:4f:c2:fe:38:d6:d4:ea:25:
84:fc:04:51:35:c3:f8:65:2d:9c:36:d7:1d:38:43:cf:db:7b:
e9:82:04:db:1b:f4:db:4c:5c:88:44:15:95:07:7b:0e:49:6b:
db:47:bc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 20:21:25 2024 by rpki-client on console-fra.rpki-client.org