Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135392e34382e35332e302f32342d3332203d3e203531313637.roa
File: 3135392e34382e35332e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: wJTqyAeNcCY9h7qi4BzJlOS0Im/WjodLb+YkLdI2vvw=
Subject key identifier: 7F:B4:D8:45:86:78:4D:98:A3:A9:6E:25:42:6A:02:97:51:CD:2C:DA
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 688900E6276E520222C2C01D98D0B5AD4B56C686
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135392e34382e35332e302f32342d3332203d3e203531313637.roa
Signing time: Wed 15 May 2024 07:52:36 +0000
ROA not before: Wed 15 May 2024 07:47:36 +0000
ROA not after: Wed 14 May 2025 07:52:36 +0000
asID: 51167
IP address blocks: 159.48.53.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 20:24:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:89:00:e6:27:6e:52:02:22:c2:c0:1d:98:d0:b5:ad:4b:56:c6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 15 07:47:36 2024 GMT
Not After : May 14 07:52:36 2025 GMT
Subject: CN=7FB4D84586784D98A3A96E25426A029751CD2CDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f1:6e:b1:89:e5:4c:32:86:5c:ed:41:f0:1f:
1f:d2:3a:c8:1d:d6:1a:6c:ca:a7:9b:b0:47:c3:8d:
13:f5:f7:8b:c1:4a:84:f5:9f:df:7a:78:8a:f6:17:
b6:c2:9b:ca:5a:1e:bb:90:25:05:23:ab:80:61:2a:
81:71:c5:f1:e6:a0:80:24:6c:75:81:5e:06:da:75:
29:8c:7d:bf:37:5e:a7:91:b3:a1:9b:39:5e:bc:39:
1a:af:c7:69:79:42:f6:ad:44:9b:a9:85:f1:55:dd:
ce:0f:fa:92:06:ec:94:f2:1b:17:aa:40:88:c5:7c:
8a:10:c1:f6:af:43:e8:55:3b:10:b9:6a:2b:e7:71:
09:12:4e:7c:ef:28:a6:14:22:b5:11:16:b2:8a:c5:
b0:01:61:f7:88:f1:8d:72:89:80:bf:21:46:4a:55:
7d:3c:97:d0:ab:6f:3a:a1:41:57:78:86:ee:3b:39:
17:6f:5d:7a:3c:30:be:5c:73:21:d0:4a:a0:4b:9e:
35:0f:3e:50:99:5a:6f:97:dc:d9:0e:96:1f:53:97:
1d:af:6c:25:f9:f4:dd:43:95:9b:78:df:b0:77:26:
ea:96:58:3f:49:37:1a:4b:18:f8:3f:dc:f1:1a:eb:
4a:dd:56:45:93:f0:02:6b:43:d9:fc:49:aa:b3:ff:
63:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B4:D8:45:86:78:4D:98:A3:A9:6E:25:42:6A:02:97:51:CD:2C:DA
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135392e34382e35332e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.48.53.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:4f:67:28:fc:21:49:c0:3c:92:84:7e:87:5c:33:ea:dd:1c:
2e:2b:b8:86:77:b4:ac:51:69:c1:c7:c6:ab:2c:8a:73:72:0f:
9f:f5:8d:60:84:23:22:9e:40:01:02:7e:c1:ee:51:ca:14:36:
ba:96:eb:1c:9a:c8:87:7e:c0:fd:3e:60:a5:4e:f8:ad:bf:28:
98:05:a4:7d:20:d5:9f:db:53:e8:6c:e2:1b:af:7a:58:97:27:
67:e7:22:ff:42:ac:f3:ce:67:4c:49:bc:5c:29:d3:13:1c:56:
08:66:14:e5:56:56:40:3c:23:d0:2b:d8:fd:30:7d:7a:0e:9c:
0c:eb:30:42:bb:5a:5b:ba:23:df:8b:9b:4b:59:ba:ac:87:7d:
f7:21:38:9b:f2:a0:a5:95:bd:0a:da:80:5e:5f:fc:5e:e1:e5:
9f:6b:1b:6b:c0:e4:85:6b:ad:39:68:38:16:a5:61:a0:97:aa:
b5:14:e0:c3:ad:7c:b8:d8:70:e6:a7:3f:d3:5e:40:bc:0c:75:
ce:e2:aa:b9:b8:93:68:93:06:de:e7:ac:6c:b3:c8:5c:2e:56:
84:32:b7:35:79:53:60:4f:d8:d8:c3:1b:77:e1:ed:7a:da:c5:
43:55:9e:a2:97:3d:aa:cd:02:6a:4e:bd:31:d3:ee:2e:44:0a:
6e:45:09:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 03:15:00 2024 by rpki-client on console-ams.rpki-client.org