Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3131302e302f32342d3234203d3e20313336373837.roa
File: 3137382e3133322e3131302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: h0fskCvSD042y37R/bhUfAy+6Uif0EIgJ1FJWg7vEkY=
Subject key identifier: DC:C7:4A:8F:25:C4:4E:C2:0B:FF:BE:81:E8:B6:A2:14:27:A2:CD:8A
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 711C24D80B2AC308C2216D5DB362668CABD9F994
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3131302e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 19 Jun 2023 16:33:18 +0000
ROA not before: Mon 19 Jun 2023 16:28:18 +0000
ROA not after: Mon 17 Jun 2024 16:33:18 +0000
asID: 136787
IP address blocks: 178.132.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:1c:24:d8:0b:2a:c3:08:c2:21:6d:5d:b3:62:66:8c:ab:d9:f9:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 19 16:28:18 2023 GMT
Not After : Jun 17 16:33:18 2024 GMT
Subject: CN=DCC74A8F25C44EC20BFFBE81E8B6A21427A2CD8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:12:91:61:3c:0f:85:47:9c:90:c2:74:50:da:
3d:79:40:03:43:34:83:79:2c:bc:33:66:44:3b:eb:
9d:ac:6e:7e:82:fa:b8:63:ed:02:32:b5:b0:4a:af:
49:8d:f4:18:23:58:bc:e0:4b:af:34:2b:2e:f8:0b:
e4:06:30:b5:fe:f2:24:ba:4b:61:ee:37:bd:eb:64:
d1:c5:1e:fb:a3:81:4c:85:6c:fb:20:eb:7e:08:10:
ea:fe:71:79:8e:52:9c:29:e3:4f:25:1e:4e:17:bb:
87:18:e4:76:f2:6b:94:92:a3:2d:62:f8:0f:15:b8:
cb:37:2c:29:9d:29:b9:8c:38:4c:03:1a:08:f6:f4:
c3:f5:d8:c1:e2:64:e2:05:ee:e5:bf:d3:1e:d6:32:
30:08:a3:ed:13:1d:65:da:82:93:06:89:3c:d2:b5:
60:d8:1f:95:02:0b:c9:98:c6:70:06:cc:dc:10:a5:
f2:5c:41:e8:07:35:b0:d7:b9:3f:aa:db:29:86:cb:
a0:1d:09:46:7d:5c:1f:43:62:fc:b8:75:7f:2b:1d:
cc:32:43:b1:96:b8:76:00:2d:5d:20:5c:17:a6:32:
e3:2b:3d:fc:55:3a:a6:4c:a7:06:f6:d3:7d:a2:1e:
8b:91:cc:8d:00:63:0d:ba:1d:61:dd:ad:82:89:fe:
b5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C7:4A:8F:25:C4:4E:C2:0B:FF:BE:81:E8:B6:A2:14:27:A2:CD:8A
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3131302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.132.110.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:a4:3f:39:b5:0c:16:dd:d0:96:37:6d:12:6f:1d:ad:6b:32:
c9:14:92:9a:0d:ad:0e:55:d2:e7:a6:5f:b5:64:b5:78:9e:e5:
23:49:91:e8:ca:d7:e4:bc:3c:5d:f0:b3:e1:21:ae:ec:a1:f8:
44:50:cc:00:53:1a:3e:66:ce:13:81:78:63:27:c4:b4:4a:06:
9d:8c:9a:81:8b:ad:f9:8f:a1:f7:c7:da:c3:fa:dd:07:b9:e2:
72:6a:6e:97:c9:a4:ed:60:0f:c6:17:38:c0:53:c5:65:cb:0e:
9a:56:2f:9c:7f:70:d4:1d:c3:2f:b4:15:2b:97:a1:ff:ca:3e:
22:9e:27:e8:b4:1a:b8:ca:8e:ef:1d:73:fd:44:b7:4c:4f:28:
a8:b0:d4:c2:2a:69:c5:e8:c6:d8:05:e0:07:d7:c7:33:61:9b:
0e:c4:1e:3d:bb:0c:61:a6:1e:23:3e:75:1e:15:ed:a7:35:89:
1c:db:19:ad:40:5f:54:f1:24:b4:d0:6c:df:a3:92:91:db:e0:
35:44:90:5b:1e:da:65:40:a7:3a:8e:84:3b:5a:2c:33:fa:9b:
52:f8:2e:43:bd:0c:44:d2:28:c4:59:80:4f:e1:22:7c:e3:dd:
11:7b:20:f6:52:e6:3f:b7:67:a4:af:c6:98:5f:6d:49:ad:e7:
2f:21:71:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 11:32:58 2024 by rpki-client on console-ams.rpki-client.org