Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3130342e302f32342d3234203d3e20313336373837.roa
File: 3137382e3133322e3130342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: AQREoZyf4bJQMOJwFchrk/WUC/w7BwsvcOFJ/Kd6YHE=
Subject key identifier: BC:E9:E2:9D:50:0C:F4:FE:1A:9D:38:04:D0:89:5F:D2:9B:0F:3B:66
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 538AB3189F5F1E8515BDA026877983E60F6FD024
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3130342e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 26 Feb 2024 08:53:26 +0000
ROA not before: Mon 26 Feb 2024 08:48:26 +0000
ROA not after: Mon 24 Feb 2025 08:53:26 +0000
asID: 136787
IP address blocks: 178.132.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:8a:b3:18:9f:5f:1e:85:15:bd:a0:26:87:79:83:e6:0f:6f:d0:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:26 2024 GMT
Not After : Feb 24 08:53:26 2025 GMT
Subject: CN=BCE9E29D500CF4FE1A9D3804D0895FD29B0F3B66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:9e:dd:66:4b:48:c1:87:cc:90:cf:9e:25:59:
50:c9:af:f1:a6:ee:87:7e:f1:80:6e:8b:dc:52:59:
af:3a:50:d0:08:00:8b:06:2b:fc:9b:8d:e5:d6:a4:
f9:4b:f8:04:30:30:67:07:37:f0:7a:d1:f6:85:a0:
2d:12:ff:6c:7c:84:ee:58:b5:50:0f:34:5d:ec:2e:
6f:df:72:10:41:a5:53:c7:06:f4:17:0c:22:6a:7a:
6f:a9:af:f0:a8:e0:1b:43:d9:d4:85:e4:43:09:37:
f8:ad:a7:90:d1:17:35:87:54:06:68:0d:58:fa:fb:
9f:b8:aa:f8:ad:d2:c8:ed:58:f5:9f:5f:c2:96:b7:
9f:5d:99:1e:d2:a0:69:9b:fe:90:e7:f3:89:f9:da:
6a:63:77:7a:75:36:00:38:07:c5:c1:eb:1f:74:a8:
ea:00:60:1d:f7:a5:e5:28:95:e7:71:f5:3d:57:92:
7c:26:0d:73:21:07:8a:03:2b:cf:62:d7:55:cf:15:
2f:4c:af:b5:1f:cd:e0:51:c0:d5:b0:20:be:24:13:
e8:3f:5b:fa:93:66:0b:3d:31:ee:a7:68:85:03:a2:
64:3e:c1:37:17:d4:55:a6:3b:b5:e8:19:4c:93:dd:
3a:b0:e7:e9:dd:57:59:37:83:7d:58:73:ef:fa:2a:
b6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E9:E2:9D:50:0C:F4:FE:1A:9D:38:04:D0:89:5F:D2:9B:0F:3B:66
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3130342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.132.104.0/24
Signature Algorithm: sha256WithRSAEncryption
13:06:f8:4b:aa:89:a3:f6:53:55:42:fe:7e:db:f0:52:44:0f:
16:d3:bb:fd:50:e5:fc:6b:3c:52:7c:88:11:ba:7c:66:0f:b7:
09:23:ba:b4:e8:25:bf:7b:3a:45:7e:6c:bc:e2:09:a6:3a:ae:
3f:1b:02:34:dc:25:f3:86:04:1f:79:a2:e4:27:03:16:e6:3c:
08:59:4c:60:8d:86:a9:60:c6:79:75:01:96:3f:d4:ca:94:e1:
fe:c2:1d:d2:e7:ef:e4:17:5c:d1:ab:05:50:22:23:ee:3e:a6:
4f:00:65:10:c2:9f:c6:05:3f:ae:eb:48:d7:d1:80:93:a3:64:
b9:7d:18:17:85:cf:da:67:83:24:51:7f:69:b8:ea:d5:73:a3:
71:e2:29:77:91:87:70:ed:85:15:b5:8b:dd:52:16:2f:c3:98:
d6:8d:b1:a3:4d:5d:8f:a1:46:72:7c:02:69:6c:7e:c7:cd:50:
88:75:bb:c1:9d:e1:97:6b:42:d2:36:80:e2:ae:d9:4e:c7:b9:
33:11:b7:cb:6d:8a:b7:f7:01:77:a7:d0:fa:cd:f9:1f:4a:24:
27:fe:9c:15:28:f6:62:6a:a7:29:7e:4d:68:5f:91:4f:c6:d8:
e5:40:d9:c9:74:af:8a:13:fb:a5:53:9a:78:e6:5c:7e:1f:d3:
d0:62:a7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 11:32:58 2024 by rpki-client on console-ams.rpki-client.org