Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37382e302f32342d3234203d3e20313336373837.roa
File: 3135382e3232302e37382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: EY6mSdRpNssvtuqx2vUOOxDs6ZLatYWfB0ZfM1NlOJ0=
Subject key identifier: 8C:49:20:54:DB:60:09:E2:59:18:E8:1E:5D:BD:E4:BF:7F:9E:D7:8D
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 629ACC074F1F32180B003A2B363E220E74C1F9BA
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37382e302f32342d3234203d3e20313336373837.roa
Signing time: Wed 25 Sep 2024 19:05:04 +0000
ROA not before: Wed 25 Sep 2024 19:00:04 +0000
ROA not after: Wed 24 Sep 2025 19:05:04 +0000
asID: 136787
IP address blocks: 158.220.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:9a:cc:07:4f:1f:32:18:0b:00:3a:2b:36:3e:22:0e:74:c1:f9:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 25 19:00:04 2024 GMT
Not After : Sep 24 19:05:04 2025 GMT
Subject: CN=8C492054DB6009E25918E81E5DBDE4BF7F9ED78D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7f:f4:f4:b3:e8:89:48:29:bc:7c:cd:64:bd:
e7:9b:a6:c9:ce:dd:2a:20:c0:72:b2:80:4e:cc:f9:
c1:60:84:54:c6:1d:82:5c:c6:92:ce:9c:22:fd:e0:
09:1d:30:03:c1:d4:7a:29:4b:0e:73:e4:ef:db:75:
c4:3d:53:f8:bb:ce:c1:45:3f:98:91:fd:76:82:d0:
04:fd:e2:80:28:42:38:d7:b8:f7:e2:af:cb:f1:b6:
38:7c:1e:fa:2b:62:a1:67:0e:19:af:15:4e:f1:88:
c6:21:6a:fc:be:91:51:b8:8e:98:a6:88:f7:04:e8:
e7:fe:eb:3d:50:bc:05:d4:ed:77:74:97:46:39:e4:
20:10:61:2e:99:51:0c:29:39:6b:05:36:8d:55:ae:
aa:01:30:99:61:76:68:3a:d4:69:69:52:49:5e:34:
83:29:72:7c:ec:ff:67:68:61:89:fb:f5:c8:81:9b:
cb:a5:f4:7e:df:80:f0:a1:11:9a:d5:97:8a:9e:43:
b0:41:6d:f7:de:b7:7d:3e:3f:db:f6:33:8c:c8:ad:
bc:c7:95:e9:f7:3c:3e:74:92:94:c3:28:0f:45:e4:
2c:4a:91:2e:97:da:d6:e9:d0:c3:03:d5:84:2f:40:
5e:f8:77:78:35:aa:90:bf:11:bf:6f:5d:bd:8a:9a:
6f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:49:20:54:DB:60:09:E2:59:18:E8:1E:5D:BD:E4:BF:7F:9E:D7:8D
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.220.78.0/24
Signature Algorithm: sha256WithRSAEncryption
71:b5:bf:1a:20:31:5c:62:7e:44:b5:6a:10:d4:a5:c3:b0:ca:
3b:3b:a8:57:80:82:e5:57:3c:f8:60:f1:db:94:38:7b:2d:79:
37:75:dd:94:ad:44:ce:be:be:a4:05:06:1a:e9:90:40:df:20:
c4:b2:28:57:02:60:ef:89:8b:0b:02:0e:a5:2a:9b:5a:21:1b:
e6:0b:87:73:5e:51:5b:6a:62:59:a9:96:34:7b:67:80:35:10:
f8:0f:91:ea:a5:4b:6d:4f:49:76:7c:08:db:02:0f:ba:c2:83:
c7:ce:04:ab:4a:3e:2e:94:91:78:f3:05:20:92:95:e0:b9:0b:
b4:a9:f0:77:49:d0:46:cd:6a:cb:86:1f:be:df:90:b9:b3:87:
60:e3:84:a6:85:8d:30:ee:68:c0:86:86:a3:72:ff:ea:2a:84:
58:7a:62:a0:04:50:75:05:c4:18:1d:ee:47:5a:0c:d2:d5:08:
94:a8:d6:ad:df:a8:1d:a4:1a:2f:82:79:e8:f7:f3:2c:d1:fb:
e0:f2:db:e5:68:34:dc:3b:6d:50:b8:1e:3e:f4:c4:8f:c9:9d:
b7:dd:ad:3f:91:03:41:af:bc:f6:77:ee:d8:8c:d1:0d:97:9f:
dd:18:a1:75:42:d3:61:3f:e9:09:8f:f3:98:12:44:ef:ea:e3:
1d:4a:30:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:07:03 2024 by rpki-client on console-fra.rpki-client.org