Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3131302e302f32342d3234203d3e20313336373837.roa
File: 3137382e3133322e3131302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: ZnicrTlDkRvZWijRyDmvkzYZb9IqhECoTYqYWtDq5zE=
Subject key identifier: 01:15:35:C9:38:81:98:71:B6:EA:F9:11:F0:71:DA:0F:04:52:32:7C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 40FCCD0004E120F64A6BEF19BE4E587BB3D9F725
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3131302e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 20 May 2024 17:03:44 +0000
ROA not before: Mon 20 May 2024 16:58:44 +0000
ROA not after: Mon 19 May 2025 17:03:44 +0000
asID: 136787
IP address blocks: 178.132.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:fc:cd:00:04:e1:20:f6:4a:6b:ef:19:be:4e:58:7b:b3:d9:f7:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: May 20 16:58:44 2024 GMT
Not After : May 19 17:03:44 2025 GMT
Subject: CN=011535C938819871B6EAF911F071DA0F0452327C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d8:16:0f:d2:6a:90:bd:2b:16:5f:f7:be:b5:
6b:24:fd:52:cf:21:7d:a4:2d:35:5d:31:f1:6a:39:
ef:17:47:f1:7b:8f:66:8e:6b:83:ea:3f:f8:07:08:
1d:1a:88:77:d3:a6:61:e3:fe:63:e4:a7:db:f4:7b:
2a:e9:af:70:4d:70:2c:3e:99:6c:11:56:75:49:18:
15:fa:02:69:ca:31:f9:20:f4:af:db:ca:11:75:05:
9a:a2:b7:c6:f7:1f:89:45:44:01:d9:d8:f2:4c:43:
b2:df:76:7f:04:d8:a4:72:c5:a3:ed:8f:8f:f4:58:
a7:29:1f:69:07:e7:ab:8d:b9:60:fd:52:0e:ef:0f:
c6:49:7c:68:ed:2c:f0:20:9a:9c:f7:1e:cd:b5:15:
29:2a:9c:55:d4:f1:75:f3:a9:6a:8e:6f:72:66:67:
1d:0f:6f:96:bd:85:8e:5c:fd:27:71:d1:f2:aa:4a:
6c:30:b6:a6:4b:b6:55:c4:e7:c9:46:40:0d:56:49:
dd:e7:74:49:09:fa:20:97:e4:7f:0c:75:2d:c0:6e:
ae:0f:a8:22:16:6a:74:5d:0a:a4:5c:d1:e0:c0:2c:
ba:da:b5:46:50:c7:d5:2a:90:95:f8:82:e5:b1:62:
76:66:6a:0d:7d:78:d9:25:fa:b5:d9:c7:4a:5e:e0:
6c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:15:35:C9:38:81:98:71:B6:EA:F9:11:F0:71:DA:0F:04:52:32:7C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3137382e3133322e3131302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.132.110.0/24
Signature Algorithm: sha256WithRSAEncryption
53:93:15:c8:b0:7b:4e:d7:db:b8:4f:23:b7:3e:60:0c:88:83:
b9:c7:bc:86:3b:24:ee:b5:0e:bd:f5:61:c5:bb:c7:0a:ef:f6:
1a:ef:56:50:27:8d:ff:99:2c:5b:7d:43:61:f9:eb:d1:0e:b6:
e4:54:99:9b:ef:f5:f8:40:d5:da:69:95:98:a6:e8:34:17:54:
c9:ce:65:c4:5b:1a:d1:c3:01:78:18:b8:d0:2a:7a:eb:0a:53:
d3:dd:d9:ef:b9:12:25:1b:07:76:bc:40:ce:2d:96:98:c2:2f:
1c:5a:8d:82:0b:b8:00:c1:a2:a1:a7:09:e8:78:73:3c:af:42:
5a:69:e6:8d:69:61:10:98:3b:a1:55:0a:8e:57:fa:0c:c9:bd:
01:fc:ed:6c:fa:63:3a:b6:08:9e:57:bf:1e:50:dd:a2:2f:41:
c5:3b:e4:e0:49:6c:25:ef:d8:23:66:d2:ff:19:6b:de:06:5a:
b6:37:77:f3:da:e3:7a:f5:7a:44:31:1b:a0:26:28:f4:c2:9d:
1f:ca:7d:5e:95:ec:01:ed:05:bd:5d:80:35:54:18:c7:2f:9b:
7b:95:96:e7:20:00:cc:6a:79:e6:e3:d7:45:36:0e:b4:08:0b:
3e:8d:6e:0d:aa:b4:c7:c6:27:d0:58:3e:00:bc:71:e8:6f:aa:
1a:0f:24:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:45 2024 by rpki-client on console-ams.rpki-client.org