Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e3131392e3139352e302f32342d3234203d3e203439343533.roa
File: 3137362e3131392e3139352e302f32342d3234203d3e203439343533.roa (raw, json)
Hash identifier: ugAaiphzpepc93uf96rzr+AXTd2Uc4h72M6aKNuDgKU=
Subject key identifier: D0:EA:99:22:D0:EF:E9:EB:4A:12:56:C9:CF:79:CD:C5:DA:6C:85:1E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 6FA9EA56C75B13BF8BBDA59D7ACF998A74DA8256
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e3131392e3139352e302f32342d3234203d3e203439343533.roa
Signing time: Wed 01 May 2024 12:03:33 +0000
ROA not before: Wed 01 May 2024 11:58:33 +0000
ROA not after: Wed 30 Apr 2025 12:03:33 +0000
asID: 49453
IP address blocks: 176.119.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 16:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:a9:ea:56:c7:5b:13:bf:8b:bd:a5:9d:7a:cf:99:8a:74:da:82:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 1 11:58:33 2024 GMT
Not After : Apr 30 12:03:33 2025 GMT
Subject: CN=D0EA9922D0EFE9EB4A1256C9CF79CDC5DA6C851E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f0:3d:6f:83:95:d4:28:1d:fa:bc:4b:95:ea:
8e:c2:55:d4:23:01:98:3a:1e:7d:1c:56:a0:1b:47:
34:31:e6:7e:9a:96:46:79:1d:bc:0b:4c:6d:56:eb:
c7:b6:da:d2:5c:9c:07:ca:76:8f:6e:0b:eb:8e:0a:
b7:06:8b:13:a3:2c:cb:62:57:0e:b5:52:de:26:90:
fe:d0:5c:1b:86:d2:da:fe:3c:5a:4d:0f:cc:aa:a8:
8d:bc:48:06:a6:68:a9:8d:a4:cb:33:fe:fa:e3:8a:
15:95:88:ff:32:d6:72:fc:49:71:4a:39:bd:a1:50:
8f:0e:48:f4:e2:cf:9d:59:84:ca:9f:a9:b7:21:61:
1b:22:b8:0a:02:77:76:4e:94:1f:a4:a9:c5:e2:25:
a0:8d:0b:91:6b:66:b0:84:8b:10:35:f5:e7:8b:20:
6c:73:4c:f8:f1:9f:cb:f8:2d:28:0f:ae:90:7f:b5:
e1:83:73:f4:9c:65:5b:5d:c9:e4:ed:34:5c:69:57:
09:b9:f1:68:2c:22:b3:8c:11:be:14:25:a3:fc:d7:
db:41:27:ea:29:ea:8a:17:44:ad:9d:b1:66:25:77:
35:44:eb:2d:13:9d:44:9e:af:ff:e8:71:cc:40:a2:
ec:a8:2f:9c:a3:1f:c6:6e:76:8d:0d:bb:6d:6d:cd:
04:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:EA:99:22:D0:EF:E9:EB:4A:12:56:C9:CF:79:CD:C5:DA:6C:85:1E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e3131392e3139352e302f32342d3234203d3e203439343533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.195.0/24
Signature Algorithm: sha256WithRSAEncryption
71:5a:06:bd:a6:8e:c2:15:b7:89:ec:c9:6c:f2:e9:68:a9:77:
53:81:68:7c:f3:aa:e1:b8:ca:79:df:8c:a6:b2:b7:1a:50:c8:
ea:40:7e:40:15:82:e2:7c:47:8c:f0:08:1c:b6:36:e5:0b:ed:
52:54:35:4f:12:c9:e1:dc:ac:4a:9a:1a:24:b0:11:92:e7:09:
c5:75:ee:53:a1:1c:f1:c2:eb:4a:e7:ef:b6:50:5c:70:2f:b7:
82:f2:6c:24:33:52:a2:fe:d6:ef:ea:61:9b:4e:fc:43:1a:d4:
2a:28:8d:54:47:77:c6:c0:db:9d:35:00:c3:71:2a:8d:cb:b2:
42:69:6f:86:86:32:8b:05:df:ff:ce:70:80:c7:01:25:da:67:
84:47:07:53:93:d9:87:87:08:0b:c5:db:31:a5:6d:22:7f:98:
8a:d5:2f:57:dd:2a:ea:f7:78:88:f5:d9:b6:30:b3:3a:b0:38:
99:5c:df:df:97:e5:65:14:4f:ab:d2:16:4d:8f:4d:f7:b7:97:
d4:4d:73:15:23:3b:f1:4c:33:62:1c:7d:4b:99:13:a0:ec:6b:
5d:c8:1c:36:95:50:de:61:30:71:6a:7f:cf:ec:0f:7d:8d:c5:
56:09:35:4e:da:de:ae:4c:29:6c:cc:f6:44:67:5c:56:e7:58:
25:8f:6a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 19:21:53 2024 by rpki-client on console-ams.rpki-client.org