Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e35332e3137392e302f32342d3234203d3e20313336373837.roa
File: 3137362e35332e3137392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: mO6GgQIEXME0K5/dZybhpV4bgK8NRQbPiyVPmRTPdt8=
Subject key identifier: 38:D4:E1:D0:2D:F5:E0:73:85:DF:FE:CC:01:D6:15:A9:95:3E:A0:25
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 449B64C23A5B5785A4CA5C3EE0B9F328307B1BCF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e35332e3137392e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 26 Jan 2024 19:02:22 +0000
ROA not before: Fri 26 Jan 2024 18:57:22 +0000
ROA not after: Fri 24 Jan 2025 19:02:22 +0000
asID: 136787
IP address blocks: 176.53.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:9b:64:c2:3a:5b:57:85:a4:ca:5c:3e:e0:b9:f3:28:30:7b:1b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 26 18:57:22 2024 GMT
Not After : Jan 24 19:02:22 2025 GMT
Subject: CN=38D4E1D02DF5E07385DFFECC01D615A9953EA025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:06:67:13:60:72:bd:e6:3c:0e:1f:1a:12:49:
d9:d6:e0:db:6e:3f:10:f0:ac:99:30:8b:a6:a0:ff:
c0:a7:85:0b:e4:4b:b3:dd:9b:68:33:00:4b:0b:dc:
91:b5:86:8b:34:9d:c1:22:ed:51:37:ee:a1:66:b9:
93:8e:79:94:fb:e9:2a:93:b8:ce:89:4c:9f:94:df:
a5:08:c3:18:f4:3e:93:44:0c:62:c8:da:a5:f5:09:
03:dd:0a:7c:90:d5:eb:c4:05:56:6a:c6:c8:f6:c9:
a4:f7:55:d9:b0:75:3b:42:2e:25:8a:cd:13:4c:68:
25:2d:86:e6:7a:1e:5b:55:52:16:ed:58:bd:21:01:
ff:46:77:1a:54:25:1f:f3:09:ad:1b:1f:13:d5:b3:
a0:44:67:9a:1e:28:c7:42:a9:4e:bf:3b:84:51:1d:
1b:0e:48:c8:50:3c:bd:67:a7:93:87:cc:91:84:9f:
ef:f2:94:47:34:61:9f:65:fa:6b:c2:5a:0b:0b:62:
a3:2a:73:14:35:d7:43:27:64:54:b4:e5:94:55:ce:
e5:b0:53:4d:38:b0:b6:61:52:76:1e:24:97:a8:18:
b8:47:e2:6c:3d:cd:76:0a:1b:c6:9e:f4:5b:29:79:
68:bd:78:5c:ff:db:6f:4d:c3:0c:c2:a3:cd:6a:c2:
46:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D4:E1:D0:2D:F5:E0:73:85:DF:FE:CC:01:D6:15:A9:95:3E:A0:25
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137362e35332e3137392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.179.0/24
Signature Algorithm: sha256WithRSAEncryption
48:82:52:bc:e4:fb:a8:6c:7e:1c:ca:7c:2b:1a:b8:4b:bf:7b:
28:d4:20:96:4e:9b:78:f1:e9:b5:a2:ce:da:ea:53:6a:55:4a:
d3:46:e1:40:61:d9:cc:0d:d0:08:a0:90:a2:c2:01:7d:7a:7e:
10:d2:61:b2:1a:aa:74:2e:58:6f:20:8c:85:e1:13:80:e9:0e:
4d:54:db:55:9f:be:86:d6:88:a6:c2:a7:76:d1:d9:2e:30:e3:
89:ba:2d:57:30:12:41:6f:6b:0d:f8:fd:d5:af:a3:0b:71:c8:
92:24:0f:41:14:41:37:e1:40:2a:19:50:31:a2:cf:92:7d:e5:
cd:8d:7f:4a:62:69:a0:b7:63:c8:e7:a3:fc:fd:09:40:77:8b:
6a:41:17:86:86:74:f6:eb:6e:bf:cb:08:d9:87:07:5b:a2:75:
25:f0:cf:9d:fa:30:7b:8f:af:b9:bb:ca:34:9d:29:60:8b:26:
41:68:61:89:ca:62:71:af:f4:fc:76:28:3c:3f:2e:9b:dd:54:
12:99:48:fc:5a:9c:16:09:61:18:62:c0:aa:45:21:f8:71:30:
74:cd:00:e8:20:2f:7a:1a:c0:5b:d2:ef:7c:c1:2b:98:38:31:
10:92:47:51:3d:97:ff:32:62:1f:d1:88:b6:23:27:3a:12:96:
38:10:58:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 21:49:15 2024 by rpki-client on console-ams.rpki-client.org