Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37382e302f32342d3234203d3e20313336373837.roa
File: 3135382e3232302e37382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: mZSb/YIvO/8oJ2rJYETycjXB2w+StP/Tp0JltnE+D2U=
Subject key identifier: 38:BB:BD:1C:EF:7A:71:A9:80:E9:9C:A5:82:FA:8E:6E:E2:D0:B8:C0
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6A0DF815474C7ECF593AAE0FD51C3E75A93C8A28
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37382e302f32342d3234203d3e20313336373837.roa
Signing time: Wed 25 Oct 2023 18:30:05 +0000
ROA not before: Wed 25 Oct 2023 18:25:05 +0000
ROA not after: Wed 23 Oct 2024 18:30:05 +0000
asID: 136787
IP address blocks: 158.220.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 16:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:0d:f8:15:47:4c:7e:cf:59:3a:ae:0f:d5:1c:3e:75:a9:3c:8a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 25 18:25:05 2023 GMT
Not After : Oct 23 18:30:05 2024 GMT
Subject: CN=38BBBD1CEF7A71A980E99CA582FA8E6EE2D0B8C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:da:81:d3:11:54:d0:74:de:58:db:0c:c1:9d:
21:cd:40:12:0a:46:2e:df:66:fd:1c:f4:27:02:1b:
50:cd:89:a6:8d:04:ff:4a:b2:d2:f8:5e:fb:30:aa:
f3:e5:f5:9b:49:c8:b8:33:99:18:8f:9b:ec:bb:b6:
85:4d:2f:aa:89:ac:88:34:a9:bc:17:2a:20:fb:c8:
7c:a2:51:4d:3b:67:ad:2b:63:4d:a8:e5:1b:cb:da:
80:2b:a6:35:09:e4:38:56:2c:15:e4:a3:da:2d:11:
97:5f:b7:11:1d:27:01:89:5a:fa:0f:14:d2:2b:10:
3a:40:e8:9e:fc:bf:47:8a:02:af:dd:12:08:15:7d:
de:7c:12:bb:6c:db:2e:b7:b1:3b:b9:1d:50:47:74:
50:37:d4:d8:b9:aa:0d:74:9e:62:a4:8a:8d:aa:96:
1d:bb:b4:1f:cb:39:55:06:51:da:5f:0b:2c:6c:88:
65:09:d0:f6:6b:76:95:13:e2:cc:c1:8b:2e:17:35:
34:7f:9c:db:2e:43:3f:c2:40:0f:6e:fc:2e:17:fa:
b6:5a:fc:af:ec:1f:8c:8c:c3:c0:d2:14:f0:50:17:
87:8e:19:90:26:07:db:36:82:88:0c:a6:06:89:20:
74:ea:1a:e3:89:47:8a:aa:ec:46:96:3c:40:d1:42:
a7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BB:BD:1C:EF:7A:71:A9:80:E9:9C:A5:82:FA:8E:6E:E2:D0:B8:C0
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135382e3232302e37382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.220.78.0/24
Signature Algorithm: sha256WithRSAEncryption
91:e7:28:4e:6d:5a:1c:46:54:c9:f8:e7:67:7d:85:7a:90:39:
83:30:4e:07:09:fc:9d:ac:91:a6:be:1f:37:1a:0f:c2:75:68:
84:c0:dd:fe:36:00:b3:56:36:23:7b:a6:fd:da:6f:58:0f:6e:
5a:b4:2a:53:f8:00:96:9a:1d:19:12:3f:11:ef:71:a4:ad:ee:
be:55:af:ba:6b:6d:2e:aa:03:5f:07:9f:da:08:48:67:40:02:
46:58:ae:aa:09:3e:b4:6a:c2:cd:3a:b9:89:31:93:99:53:61:
ad:0f:33:fb:b0:7f:37:94:7b:94:af:92:02:da:02:34:30:60:
2b:82:28:a4:bc:0a:43:40:c8:9f:c1:bb:70:52:4e:d8:c6:7c:
7b:ee:88:1c:17:ac:4e:6c:5a:f8:c3:3c:d3:8e:23:80:82:0e:
1b:6e:1d:94:76:dc:47:02:41:52:8f:8e:fe:b6:a3:61:69:a6:
fa:a5:1d:6f:50:74:58:5d:c4:17:3d:01:c4:a6:d5:20:e2:99:
46:92:7d:3c:2a:0b:30:75:6b:83:52:b9:12:0b:d2:f1:c2:88:
2c:4c:7b:05:bd:b4:bb:0b:97:dc:79:a5:88:a1:12:05:10:1f:
b3:ea:ac:e9:bc:5d:b7:15:32:46:93:7e:20:47:36:1b:cf:1c:
4a:28:1a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 19:21:53 2024 by rpki-client on console-ams.rpki-client.org