Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135392e34382e35352e302f32342d3234203d3e20313336373837.roa
File: 3135392e34382e35352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: S6d/EnsMDc7kHl0C0EQGmAqH3LWEs8yTZm9XayLKCSE=
Subject key identifier: 91:C4:77:DD:A9:AE:D8:5A:95:CA:7A:17:C4:FE:1F:C5:29:72:BB:25
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2DB0D7CD642E83F4318B6A2FC9601E3944AEB4B2
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135392e34382e35352e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 26 Feb 2024 08:53:20 +0000
ROA not before: Mon 26 Feb 2024 08:48:20 +0000
ROA not after: Mon 24 Feb 2025 08:53:20 +0000
asID: 136787
IP address blocks: 159.48.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 16:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:b0:d7:cd:64:2e:83:f4:31:8b:6a:2f:c9:60:1e:39:44:ae:b4:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:20 2024 GMT
Not After : Feb 24 08:53:20 2025 GMT
Subject: CN=91C477DDA9AED85A95CA7A17C4FE1FC52972BB25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d8:c6:7b:44:5c:59:36:f2:bb:85:77:b3:a0:
13:44:71:7a:a3:02:6b:1a:f5:e3:46:9b:2c:e1:d6:
c1:5b:0a:14:ca:51:aa:0e:a3:20:5e:8f:e7:9e:9d:
fc:c4:42:ce:3b:b3:00:a0:11:f5:81:1c:ec:9b:bd:
dc:b4:b8:9e:7e:0a:d7:0f:76:0c:f7:97:ce:3f:cd:
a2:88:66:1d:1f:35:05:53:28:5f:40:bb:35:1d:b6:
2d:cd:6a:6c:e1:d9:a1:16:52:01:14:8e:e9:5b:f1:
10:03:bc:1c:8a:67:36:d6:63:d4:77:d0:af:06:ef:
9c:51:c8:e0:df:9a:fa:22:1d:9f:d6:20:b2:75:fe:
b0:07:bb:61:1b:06:2d:e5:26:4b:15:1c:f7:bc:7e:
af:69:0c:54:f5:ab:78:8b:c2:40:9d:e5:a1:d2:5b:
f9:fb:4d:f6:36:8c:38:e8:7c:eb:b9:2e:eb:8d:29:
8d:fd:34:9d:d3:1f:b8:ad:e9:0a:16:e4:d5:2d:ac:
6f:aa:10:26:34:46:06:3b:00:23:8b:29:b0:83:f2:
05:c5:01:2b:f0:d9:e2:84:4b:d4:64:e7:bd:15:33:
de:61:56:76:ae:30:14:01:c7:ca:4c:09:fa:03:39:
7a:60:01:de:23:55:7c:0f:e8:03:2c:29:fa:d5:d0:
0f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C4:77:DD:A9:AE:D8:5A:95:CA:7A:17:C4:FE:1F:C5:29:72:BB:25
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3135392e34382e35352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.48.55.0/24
Signature Algorithm: sha256WithRSAEncryption
97:37:2f:aa:ec:96:7a:83:d9:c6:78:7c:f3:e8:08:db:0c:44:
a8:1d:2c:c5:07:06:53:07:80:7c:19:72:d5:5d:f2:9a:b6:cb:
5d:cc:2a:b4:19:52:b5:24:ec:fc:70:66:b0:2f:c0:87:07:39:
37:eb:e7:d6:75:cc:7f:88:e5:00:ea:95:84:bb:5c:6b:4d:70:
c6:ef:5b:aa:5d:61:93:fc:f7:6e:41:9a:19:8a:e4:a5:2c:40:
16:60:b7:38:0f:71:bd:7f:66:25:4a:2c:b1:8f:8a:d1:71:c4:
a0:2e:ee:ab:a8:bc:e3:51:8d:a9:74:a9:e6:7b:62:66:6a:21:
50:2f:9b:34:64:f7:0f:81:b1:51:69:a8:d1:a5:68:8f:53:75:
bf:8e:ee:98:e0:85:ed:26:10:64:4e:8d:c9:64:c8:6f:7e:86:
12:fe:04:9e:88:85:30:1e:3f:3c:97:46:d8:b2:50:e5:a9:68:
cb:74:23:e9:bd:10:c7:59:ae:26:24:87:7b:f3:e8:2d:5f:2e:
9c:82:1f:1d:40:4f:fc:ba:77:fb:4a:9c:0e:2e:c6:16:8b:dd:
f1:c1:55:05:64:47:03:97:84:15:e2:19:3d:4d:85:09:10:bb:
26:2c:56:ce:c4:2e:a1:e4:a8:95:2a:07:81:27:53:d3:2d:fc:
36:9b:a3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 20:21:25 2024 by rpki-client on console-fra.rpki-client.org