Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3130362e302f32342d3234203d3e20313336373837.roa
File: 3137382e3133322e3130362e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: fhoKvbmbQ1pgQ75XGzOLcScDi3lGt8XCT5dTGP//1EY=
Subject key identifier: 8C:87:2B:81:9D:6D:0C:78:97:4B:40:0D:F0:CA:E5:5A:17:62:42:C4
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0CC80B5FD803719973753E36045CF740753440C7
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3130362e302f32342d3234203d3e20313336373837.roa
Signing time: Wed 03 Apr 2024 19:03:26 +0000
ROA not before: Wed 03 Apr 2024 18:58:26 +0000
ROA not after: Wed 02 Apr 2025 19:03:26 +0000
asID: 136787
IP address blocks: 178.132.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:c8:0b:5f:d8:03:71:99:73:75:3e:36:04:5c:f7:40:75:34:40:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Apr 3 18:58:26 2024 GMT
Not After : Apr 2 19:03:26 2025 GMT
Subject: CN=8C872B819D6D0C78974B400DF0CAE55A176242C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7a:e4:87:dd:9e:25:27:09:ed:c0:c2:75:61:
10:03:2b:5e:d8:ca:11:63:62:4b:0d:68:11:3d:c3:
e2:8b:83:54:78:34:b6:4d:de:b0:b4:2f:cb:e4:fb:
00:39:15:9c:9c:54:e0:7f:b5:15:d5:77:50:33:b8:
3c:2e:cb:3e:32:10:a8:d7:09:47:36:14:9b:82:d6:
10:c4:f1:6e:c7:d8:24:88:65:ed:8b:b4:a5:cc:ed:
5a:fd:9b:8c:31:47:36:1b:d4:dd:28:ce:c2:3a:28:
1b:00:97:cd:e0:d0:2c:e9:a9:04:eb:f4:f1:b5:c2:
c5:26:31:0a:75:1e:85:30:f0:78:e4:e4:ec:9d:f5:
51:32:51:a6:68:9c:60:10:75:2f:a2:41:b2:8a:6d:
19:6c:9d:0a:d4:2a:47:59:9c:79:52:c0:00:ef:a1:
06:df:f7:be:62:55:fb:31:ac:fa:78:ea:53:d6:f5:
fd:92:c4:4b:f0:b1:cd:5d:fe:41:09:3b:e6:ab:b8:
a5:28:ca:fc:e9:bd:f5:44:84:1c:09:00:26:68:b0:
51:85:e0:b3:a5:dd:7a:c2:39:bc:9d:13:1f:7a:f8:
1a:09:2d:42:00:43:c3:96:f9:c3:a8:1e:9c:cb:c3:
ea:51:b2:ef:cc:2b:79:00:ac:9c:21:e6:6f:45:0b:
62:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:87:2B:81:9D:6D:0C:78:97:4B:40:0D:F0:CA:E5:5A:17:62:42:C4
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3130362e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.132.106.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:03:26:da:be:d3:c1:2f:bb:94:9b:15:38:39:9f:1d:77:83:
4b:1b:c5:e6:f6:26:f2:42:de:5c:86:20:25:98:80:2d:9d:a9:
77:fd:40:bb:75:35:f7:4c:63:46:f9:9e:37:40:57:e8:c9:11:
c4:e4:64:90:f1:ef:c8:bb:6e:e6:83:b8:fa:45:59:2a:3c:3f:
a3:b6:cd:66:92:2d:9d:05:3f:11:3e:05:36:c7:ed:2c:7c:40:
35:52:24:57:9f:9d:c2:c2:57:1d:8d:2e:dc:94:04:2f:2e:12:
c0:17:45:6f:17:49:7b:41:23:25:2f:1e:24:ed:3b:88:98:b6:
49:ea:f4:f7:d7:58:fd:a8:b6:21:e2:b9:95:a6:d2:95:ae:8c:
98:fe:65:4a:4f:1a:04:4e:ad:69:1f:07:c5:c9:8e:14:cf:5e:
48:43:90:40:b3:76:68:e5:d4:4f:71:d1:22:23:f1:f0:e0:1e:
a6:b7:5b:c9:6f:01:8c:97:2c:49:3e:cb:81:06:ed:42:35:6e:
e6:70:6c:cd:48:2d:88:cc:56:01:d5:e1:82:d3:e0:50:0a:74:
e1:6d:02:2b:e1:e3:06:22:f3:d0:e4:e2:07:74:cd:4b:e6:62:
84:48:46:ba:9c:11:25:7d:71:c4:62:cf:fc:d4:25:79:8e:8f:
2d:83:41:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 11:32:58 2024 by rpki-client on console-ams.rpki-client.org