Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3133352e3133382e302f32332d3234203d3e20313336373837.roa
File: 3138352e3133352e3133382e302f32332d3234203d3e20313336373837.roa (raw, json)
Hash identifier: 8zrF7bZiXzSFbAAhvggjEPk2wCku7KmFujU8vwLsbHM=
Subject key identifier: 3C:63:45:FA:B7:F9:24:38:0B:F7:57:F0:66:51:BB:D5:E5:60:83:8C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 63B09293A925D5F8859AD57C7D806FB9C2FE9473
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3133352e3133382e302f32332d3234203d3e20313336373837.roa
Signing time: Sun 11 Jun 2023 11:00:03 +0000
ROA not before: Sun 11 Jun 2023 10:55:03 +0000
ROA not after: Sun 09 Jun 2024 11:00:03 +0000
asID: 136787
IP address blocks: 185.135.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:b0:92:93:a9:25:d5:f8:85:9a:d5:7c:7d:80:6f:b9:c2:fe:94:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 11 10:55:03 2023 GMT
Not After : Jun 9 11:00:03 2024 GMT
Subject: CN=3C6345FAB7F924380BF757F06651BBD5E560838C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a8:be:8b:b2:ab:63:6f:13:f9:e3:8b:5a:2b:
1f:e4:77:06:2f:6d:9f:4d:f4:68:d0:8f:99:86:cf:
ba:b2:6c:59:0b:d3:5b:01:5f:93:5b:3a:01:78:82:
5a:08:05:26:c0:c9:59:87:2e:59:04:77:45:34:53:
25:56:be:6b:b3:1e:57:f0:fa:58:d2:1e:17:17:aa:
a8:79:a4:a9:ad:01:21:50:5e:62:3c:be:4c:73:d5:
ff:59:02:93:52:40:52:9c:2b:6a:68:f8:d6:e4:8a:
ce:f7:88:26:b6:cc:6a:55:35:a8:31:f4:35:a4:64:
8f:51:00:61:4f:58:20:06:c9:16:d2:25:49:8b:d4:
69:21:34:bf:ef:88:25:ff:4f:a8:0a:53:cb:69:37:
1b:c3:88:f8:58:7f:71:f7:c8:20:cf:cc:9c:2a:94:
92:8a:58:e1:b8:da:2f:21:d0:46:1d:35:20:ff:78:
fd:ab:45:1e:45:43:f6:4f:c9:cc:9e:71:90:5f:be:
a4:28:b7:44:46:43:cc:84:5c:fc:c0:e1:3d:5a:74:
0d:40:2a:77:c7:50:84:88:64:28:29:5e:fb:a2:87:
09:ad:b9:4f:b8:c2:4a:2a:d0:0e:1d:b3:39:f4:50:
32:59:f6:7c:b9:fc:e0:db:50:1a:d2:f0:06:fd:a9:
6e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:63:45:FA:B7:F9:24:38:0B:F7:57:F0:66:51:BB:D5:E5:60:83:8C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3133352e3133382e302f32332d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.138.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:25:ae:ea:ce:15:75:ec:fc:d1:3e:d7:a8:f5:76:a1:6f:1e:
2c:5b:13:b4:75:95:ba:84:99:a0:af:33:fa:bf:b0:81:f3:00:
d8:4b:77:b1:7e:1b:dd:13:50:e1:2a:8c:3f:88:92:e3:05:ac:
9a:3a:a4:6d:0d:3a:be:10:12:35:82:c1:53:89:25:fd:3b:35:
fa:55:b8:72:fb:c7:51:a2:28:2d:84:a2:37:69:3a:0f:85:4a:
f9:a1:3e:bb:7e:91:f5:51:ab:32:07:c1:fb:11:2a:2f:df:4b:
c0:1d:95:7c:74:e9:cd:79:a3:dd:75:bd:49:4d:b0:cf:2a:83:
39:da:3e:f0:65:ef:1f:da:55:c9:9d:62:43:f8:fc:5d:da:44:
14:7e:34:08:a0:da:8b:d9:82:89:eb:81:f3:5c:c3:4b:eb:2f:
33:44:f8:6e:84:f0:9d:c7:fc:e8:52:9e:28:91:b1:61:91:f5:
45:f0:5f:56:ce:a9:ef:54:5d:10:e5:15:16:15:a3:ee:3c:0f:
13:c5:e9:d7:c8:a4:ac:85:2e:ca:11:20:a7:2f:0b:98:7f:ed:
72:a5:43:ee:2a:ae:1e:49:67:db:36:f2:ca:7b:53:41:db:0e:
b2:f7:7d:3e:f5:72:f5:4d:b6:7f:91:79:cd:a6:5d:d8:23:f5:
03:99:0f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 11:54:23 2024 by rpki-client on console-fra.rpki-client.org