Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37372e302f32342d3234203d3e20313336373837.roa
File: 3135382e3232302e37372e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: Y/a+emn3i9cnV4TStz4TPUYM832i4r9wVSpULSlh6Dw=
Subject key identifier: DB:E9:4B:2B:5E:8E:4D:EB:CB:02:24:39:C7:ED:86:71:79:3A:3D:B4
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4B34CB8A2116610499F596E2E7C39D23092EF4A7
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37372e302f32342d3234203d3e20313336373837.roa
Signing time: Wed 02 Oct 2024 06:59:56 +0000
ROA not before: Wed 02 Oct 2024 06:54:56 +0000
ROA not after: Wed 01 Oct 2025 06:59:56 +0000
asID: 136787
IP address blocks: 158.220.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 13:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:34:cb:8a:21:16:61:04:99:f5:96:e2:e7:c3:9d:23:09:2e:f4:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 2 06:54:56 2024 GMT
Not After : Oct 1 06:59:56 2025 GMT
Subject: CN=DBE94B2B5E8E4DEBCB022439C7ED8671793A3DB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:00:a3:b3:ab:57:05:33:af:3a:92:9e:7f:ed:
8a:3d:b5:5b:70:c3:cf:26:01:a8:3c:e1:2d:cc:26:
44:24:23:f9:88:3a:ac:72:7f:84:d0:88:d3:eb:eb:
83:35:f4:f9:d4:13:d5:97:ea:f6:ff:de:91:ad:c5:
3e:b5:99:68:57:65:90:6e:db:18:e0:2c:48:01:86:
fa:5f:ce:75:0c:7b:f9:be:1c:5a:78:d4:25:b3:52:
dd:a4:38:67:b7:f2:d1:b4:5b:8d:28:d0:76:ba:d5:
09:9d:48:67:c1:4f:11:40:44:a0:47:4a:04:bf:4d:
76:ff:56:80:98:d3:90:1b:96:26:c5:80:9e:2a:6c:
69:bf:47:f8:72:a3:c2:78:ab:e1:69:ed:20:80:fd:
d4:2e:ee:1a:13:2e:52:b5:1e:dc:ff:2d:3a:58:ab:
0d:c9:b4:88:8c:a1:26:12:72:27:78:9f:7b:00:8a:
50:a0:e9:42:db:19:39:00:c6:77:28:2b:c4:80:19:
92:d0:09:5c:2e:73:dd:a9:a9:f6:db:7e:64:d3:df:
97:52:51:6c:b4:49:4d:08:c9:9a:4f:74:1a:94:91:
47:8e:26:1f:8d:57:36:13:d6:b8:74:a7:f0:9f:15:
a0:13:88:3d:d5:51:9d:b2:97:66:41:50:b9:05:e3:
a8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E9:4B:2B:5E:8E:4D:EB:CB:02:24:39:C7:ED:86:71:79:3A:3D:B4
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37372e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.220.77.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:5f:95:4f:74:b4:f4:f6:e4:34:0f:57:fe:80:ea:b2:07:dd:
68:52:b2:38:d1:b7:33:12:31:da:1c:0e:c5:fe:72:c9:00:2a:
80:96:77:02:00:24:8b:2e:19:2e:9d:a3:2e:10:8c:c0:28:b3:
bc:18:ee:f9:c0:43:40:d5:df:a6:3b:a0:1c:cc:29:ec:49:7b:
fd:34:25:d7:49:a7:91:37:83:ec:3e:a9:2f:1b:4e:77:48:8c:
03:1e:03:cb:1d:df:bd:86:60:fa:a3:91:8c:95:74:cc:c6:d7:
bd:cd:76:00:fc:e6:9a:60:7e:4f:61:25:54:67:83:3b:27:07:
a5:77:4c:39:a3:c5:43:bc:58:24:1c:82:96:f6:29:0e:54:2c:
54:5e:43:c3:96:9f:60:3e:94:d9:be:b2:65:38:62:bf:cd:64:
eb:9c:86:9e:29:45:19:64:19:47:e0:3a:ed:09:9f:e6:a0:78:
75:c8:ca:45:05:ed:a3:8c:dc:ca:33:92:23:fe:4d:41:95:e1:
d7:c1:cf:39:bc:70:9f:c3:ae:33:ed:60:da:d0:b3:5f:77:f3:
6d:9c:ac:cc:77:c3:bb:25:67:70:5f:20:f9:de:69:e3:ec:15:
07:a4:77:af:15:1e:e8:ec:0e:8c:eb:b2:36:da:7e:0d:8e:56:
55:7a:65:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:15:08 2025 by rpki-client