Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e35332e3137382e302f32342d3234203d3e20313336373837.roa
File: 3137362e35332e3137382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: +rJVZ8BYIpw0n8V62X2eUknD+bxSzZ0SpWDu6XcJhX8=
Subject key identifier: 1D:2B:40:A2:CA:12:40:A0:70:5D:B9:76:DD:59:7A:19:FA:6A:EC:0A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 4E14921ACB32E8ACD4A2B04071D394FEDB328D36
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e35332e3137382e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 26 Jan 2024 19:02:20 +0000
ROA not before: Fri 26 Jan 2024 18:57:20 +0000
ROA not after: Fri 24 Jan 2025 19:02:20 +0000
asID: 136787
IP address blocks: 176.53.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:14:92:1a:cb:32:e8:ac:d4:a2:b0:40:71:d3:94:fe:db:32:8d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 26 18:57:20 2024 GMT
Not After : Jan 24 19:02:20 2025 GMT
Subject: CN=1D2B40A2CA1240A0705DB976DD597A19FA6AEC0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:23:ef:97:4e:05:79:ac:90:ad:3c:bc:e0:1a:
b1:33:7d:06:f1:c2:26:a3:1c:61:28:8f:e3:1a:17:
58:e2:c2:5b:01:8d:a3:18:3c:b9:b9:f2:f4:59:ea:
b5:ac:ac:48:9e:6a:26:0f:82:16:73:bf:15:fb:56:
ee:77:e7:50:f0:78:8f:ae:a7:9f:df:86:75:33:30:
eb:f5:d7:d4:2e:26:74:2c:ea:59:94:76:ad:b0:62:
63:6c:22:22:61:f3:2d:e0:f0:19:a8:41:78:83:8c:
3a:71:96:0d:57:db:75:5b:4e:ec:22:bd:65:d1:59:
35:bf:43:e1:cc:b6:e2:83:63:45:22:fa:3d:f2:11:
42:47:0d:e7:61:bf:b4:2a:80:6e:67:f1:a0:0d:c6:
0b:e0:cf:bd:61:3e:b3:94:6a:6a:ab:f5:a3:73:b0:
f0:c0:fd:6c:67:2f:8d:09:dd:97:7b:27:77:ba:97:
67:92:d1:e3:30:ea:d7:f3:26:be:42:d4:06:1d:e5:
d9:d1:8f:46:93:f5:00:9c:7e:09:e6:0c:d4:7a:e4:
71:9a:ee:5f:bf:0d:4c:01:8d:7b:1c:16:92:43:1c:
3d:47:82:91:29:a0:44:4e:b5:6a:a1:61:32:8f:89:
1a:bc:c9:c1:4a:81:ca:14:81:78:ea:87:a2:77:e9:
09:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2B:40:A2:CA:12:40:A0:70:5D:B9:76:DD:59:7A:19:FA:6A:EC:0A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e35332e3137382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.178.0/24
Signature Algorithm: sha256WithRSAEncryption
91:25:50:14:b9:39:91:10:26:09:7b:b7:87:54:2a:a4:70:a1:
c1:cb:c2:50:e1:b7:71:48:ea:ab:b5:13:09:85:b3:50:b7:c0:
48:1e:2f:9a:2a:ba:b0:2d:8f:10:3c:ac:d1:80:c9:51:df:3b:
f8:24:d5:78:c8:5b:2c:6d:7e:f6:c1:ca:79:a1:84:81:ee:25:
00:58:6f:d7:84:fd:3a:69:fe:b2:77:3c:9d:d0:33:48:84:60:
0b:65:33:ca:53:66:e2:e2:51:34:16:47:73:d0:aa:e8:a2:1b:
be:90:55:e4:8a:ac:8f:2d:09:66:45:17:eb:b0:f0:0f:b3:a7:
2c:1f:7c:64:cb:7a:c7:06:6a:3a:37:9c:8d:30:90:2e:16:5a:
b3:f4:5c:c1:24:2e:42:f8:d9:35:c5:89:55:9a:df:e7:a1:c6:
b4:36:fe:2d:70:bb:f7:a9:4a:cb:28:64:a8:2e:87:3c:93:35:
36:ca:43:fb:35:b9:f6:3d:42:2c:93:18:cd:77:db:dd:ea:be:
63:43:21:20:63:55:bc:74:e0:b8:23:cd:91:7a:26:95:ab:74:
9b:19:45:1f:af:0b:e4:6d:3a:43:5f:b3:bd:01:97:fc:4c:08:
04:46:d1:d0:53:e3:18:8f:de:52:17:84:58:e3:08:17:bb:c5:
eb:63:0e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 21:49:15 2024 by rpki-client on console-ams.rpki-client.org