Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3130382e302f32342d3234203d3e20313336373837.roa
File: 3137382e3133322e3130382e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: DLmHQuzLa352T2BbO18dtiWDWV0OT2xyvUi55LbFy5M=
Subject key identifier: C1:D9:83:E3:44:84:C5:34:E8:BF:D0:B4:36:EE:DC:C7:AB:4E:E0:9B
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 1663D5D8D2AAD5F464BF3B1CD9816C258C251F0F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3130382e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 19 Jun 2023 16:33:04 +0000
ROA not before: Mon 19 Jun 2023 16:28:04 +0000
ROA not after: Mon 17 Jun 2024 16:33:04 +0000
asID: 136787
IP address blocks: 178.132.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:63:d5:d8:d2:aa:d5:f4:64:bf:3b:1c:d9:81:6c:25:8c:25:1f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 19 16:28:04 2023 GMT
Not After : Jun 17 16:33:04 2024 GMT
Subject: CN=C1D983E34484C534E8BFD0B436EEDCC7AB4EE09B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d4:bf:66:c4:4a:5b:bc:09:2e:a4:7b:5d:ea:
5e:a3:d2:05:d2:71:62:d9:91:6b:d3:54:86:71:b6:
f2:14:1e:74:7b:60:6b:97:0d:af:83:e5:0e:ac:25:
cc:5f:b8:7d:f5:9f:2e:40:16:34:a5:c1:7c:f8:20:
c0:96:00:a0:e9:f5:bc:bf:f4:26:19:b2:1f:70:57:
a5:3f:bc:96:10:c9:42:0f:f0:05:a8:d4:52:9e:fc:
44:02:90:dc:bc:04:77:24:ad:28:d5:57:60:ce:2c:
72:6e:55:ed:1a:4b:2e:89:9a:6b:be:9c:5c:43:d4:
f0:2e:50:1c:2f:f5:4e:27:da:35:83:83:46:d7:8b:
bb:71:52:96:20:97:3f:c7:54:48:74:d3:91:a2:3d:
f1:56:bc:bf:13:0c:78:34:6f:4c:46:7e:89:83:34:
08:6b:ea:76:91:ce:ba:0b:6d:eb:ae:16:8c:f5:2e:
3f:3e:cf:6e:4b:6a:d7:54:87:fc:3a:1f:18:9c:e2:
b7:53:ba:a0:87:da:7a:01:d9:1a:38:45:4f:35:c5:
3f:04:27:ac:67:0d:e5:b5:24:8b:b1:8d:13:3b:9b:
d1:4e:ef:55:50:d5:cd:e4:d9:e7:f3:30:de:9b:ac:
a8:9c:27:a0:d7:17:cb:e4:cc:12:e0:02:5b:3f:b4:
bd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D9:83:E3:44:84:C5:34:E8:BF:D0:B4:36:EE:DC:C7:AB:4E:E0:9B
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3130382e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.132.108.0/24
Signature Algorithm: sha256WithRSAEncryption
03:fa:61:e1:ea:14:c5:19:d2:85:de:f7:ae:0d:b7:5f:e4:9f:
36:83:67:ff:63:50:cf:95:7e:e0:4f:0b:3c:31:31:3a:f1:03:
1e:03:8e:bc:e9:fc:09:b1:80:39:30:10:3f:01:18:51:cb:35:
04:df:d8:22:5e:23:35:f3:b9:c2:9e:bb:07:f4:28:ae:b9:e8:
05:a2:44:09:d2:b7:bf:04:9c:2f:89:cc:d2:eb:86:f1:1f:19:
8f:3f:79:1a:b0:da:b6:1a:07:30:4a:dc:ee:27:70:be:ac:e8:
dd:44:12:a0:a8:99:e6:61:09:a4:66:8d:05:06:fa:80:b0:20:
fa:d0:ed:4d:f3:05:fc:10:62:69:ad:90:7f:b9:87:f1:71:ce:
98:b9:07:fd:9f:44:d3:f9:3f:8a:2c:c1:3e:47:c8:8b:d9:bc:
f7:a7:4c:34:22:9a:86:26:3d:77:62:1c:9d:1c:e4:43:45:4b:
72:02:4a:46:4e:c5:1c:e0:d7:b1:af:c9:3b:17:57:a8:8f:18:
fe:71:33:04:79:46:15:07:ae:41:5f:d9:84:d8:56:14:5f:57:
3d:34:82:a6:3d:62:a5:3b:48:3a:26:ae:22:31:8b:58:b1:d2:
03:37:62:7e:5f:65:72:5b:7b:20:e3:e0:45:e6:26:25:6c:16:
1f:90:94:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 11:32:58 2024 by rpki-client on console-ams.rpki-client.org