Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135392e34382e35322e302f32342d3332203d3e20313336373837.roa
File: 3135392e34382e35322e302f32342d3332203d3e20313336373837.roa (raw, json)
Hash identifier: iT2MTy/8ZPZDfXzg7FmABB0pdiqLnClQleBgAmFDE4A=
Subject key identifier: 87:31:71:30:42:16:9F:ED:9C:A8:EE:04:EE:10:41:F7:71:6D:43:A1
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 21C47CA852FB262A425B7D9EFC2B30CC2D2A6A14
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135392e34382e35322e302f32342d3332203d3e20313336373837.roa
Signing time: Mon 26 Feb 2024 08:53:22 +0000
ROA not before: Mon 26 Feb 2024 08:48:22 +0000
ROA not after: Mon 24 Feb 2025 08:53:22 +0000
asID: 136787
IP address blocks: 159.48.52.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 16:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:c4:7c:a8:52:fb:26:2a:42:5b:7d:9e:fc:2b:30:cc:2d:2a:6a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:22 2024 GMT
Not After : Feb 24 08:53:22 2025 GMT
Subject: CN=8731713042169FED9CA8EE04EE1041F7716D43A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:90:b9:ee:09:c5:e1:78:48:10:f4:b8:d1:1f:
88:34:72:f6:e7:f6:fc:15:41:a0:ed:ed:82:b3:16:
d3:52:58:a5:a5:d4:51:33:82:51:25:00:8c:c2:a1:
ad:4e:99:3a:da:97:3d:a0:54:08:00:cf:9e:7a:7d:
45:4d:76:5d:48:c0:e4:b7:b3:29:3e:aa:35:52:57:
a5:52:9a:20:0c:02:12:2d:de:7a:86:8e:2b:c6:5c:
18:ce:53:21:b2:60:61:bd:2c:c3:d3:28:04:f9:eb:
2b:97:65:51:6a:63:f6:c9:c2:cd:c0:6e:ce:1d:ff:
ff:0b:03:d2:4a:80:95:c0:8b:66:84:c0:31:8d:6c:
05:67:32:1e:2c:a9:f7:d9:5e:ab:4b:1b:c5:25:5a:
bd:cb:2d:0a:69:b5:8e:02:52:fd:dd:43:c2:71:00:
5e:4c:75:06:9e:57:45:9e:9a:8f:3b:47:16:27:8b:
f1:91:aa:21:dd:55:f2:ae:a3:c5:1b:f7:c7:a3:24:
61:5f:2d:69:80:c1:30:10:69:33:f8:c9:56:c3:1d:
fe:9d:a9:04:6a:3c:4d:fe:d0:10:bd:cd:23:3f:f5:
2c:6f:b7:14:f0:e3:56:8a:24:fa:bd:76:36:51:96:
3a:d8:65:da:4e:af:66:65:c9:73:8a:7d:ca:97:bb:
4e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:31:71:30:42:16:9F:ED:9C:A8:EE:04:EE:10:41:F7:71:6D:43:A1
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135392e34382e35322e302f32342d3332203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.48.52.0/24
Signature Algorithm: sha256WithRSAEncryption
39:ef:b4:2f:2e:12:1c:9a:ee:5d:02:9d:8e:13:c9:33:66:00:
97:0d:dd:d3:9e:c1:ca:48:96:2b:92:59:2e:0e:c8:3c:65:de:
22:4d:91:a1:4b:db:95:50:bf:a7:9e:4a:26:6a:e4:9c:b9:d9:
5c:70:af:2d:aa:4a:c7:5b:cd:d0:e8:72:09:16:78:ab:b9:bb:
4c:45:61:e1:a6:1c:32:aa:64:c5:bb:52:d2:f0:2e:c7:95:57:
e6:32:e5:9f:c9:17:37:b4:70:a5:c2:e0:7e:81:74:fd:dd:d8:
a7:19:85:cf:23:18:5a:22:03:30:58:bc:e3:7b:4a:b9:19:bd:
8d:dd:7d:97:e5:84:00:1d:28:38:a2:88:0e:19:d3:02:fc:a9:
4c:c6:89:52:33:85:74:44:ff:a8:a8:41:f5:9a:7b:a6:a2:da:
82:ca:4f:8e:95:21:57:81:46:62:3f:62:92:df:40:88:67:03:
e8:10:88:39:e2:4b:49:93:45:e9:24:49:17:dc:01:12:84:cc:
e8:cf:97:5d:5a:be:d4:fe:da:a3:ac:6f:24:66:0f:de:36:40:
06:f4:3d:f5:58:0d:0b:b9:5f:85:d3:55:82:fd:12:38:5b:15:
a0:09:56:4b:3e:b2:eb:77:ff:c5:00:75:a9:75:9e:3c:15:16:
20:27:e1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 20:21:25 2024 by rpki-client on console-fra.rpki-client.org