Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138322e31312e302f32342d3234203d3e20313336373837.roa
File: 3138352e3138322e31312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: UxdlpEhBtqrtSZwCchIfx1Wbtlwt3MIy8p5attRSeN4=
Subject key identifier: B0:C2:A5:FD:46:FE:55:4B:6D:7C:EE:4C:A4:51:F5:AB:93:19:26:53
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3E5EAC6176230464D797184C6443976553230F60
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138322e31312e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 26 Nov 2023 19:47:11 +0000
ROA not before: Sun 26 Nov 2023 19:42:11 +0000
ROA not after: Sun 24 Nov 2024 19:47:11 +0000
asID: 136787
IP address blocks: 185.182.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:5e:ac:61:76:23:04:64:d7:97:18:4c:64:43:97:65:53:23:0f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Nov 26 19:42:11 2023 GMT
Not After : Nov 24 19:47:11 2024 GMT
Subject: CN=B0C2A5FD46FE554B6D7CEE4CA451F5AB93192653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5e:ae:49:b1:21:b5:9e:ef:ba:1d:3e:66:47:
d7:a8:e1:5b:0b:a1:90:9f:b2:0e:e7:02:e2:e8:07:
c3:d2:08:9d:93:eb:f9:49:ec:c7:17:08:97:2f:ee:
ce:8b:ec:48:ca:9e:a7:9c:cf:d6:6c:6b:eb:54:0e:
48:e4:48:cd:51:01:b1:a5:49:9e:a9:f3:2b:f8:4f:
30:50:fd:de:c2:94:e4:31:5a:69:e7:1a:ec:28:3a:
7e:4b:01:85:54:3b:45:cd:73:00:80:3e:13:52:c1:
43:cf:18:dc:20:71:0c:77:83:78:60:15:61:9f:76:
91:bc:9a:53:d5:26:9a:ea:43:07:34:10:80:a3:b3:
d9:a4:65:b9:87:b1:d4:fc:45:2b:e8:06:87:3a:a0:
99:11:f9:ee:67:5a:9e:89:44:20:81:1e:ff:5f:e8:
65:36:07:89:9e:67:b2:67:89:6b:89:50:72:49:69:
5e:ad:d5:f7:e2:5b:d6:23:04:76:2c:1f:02:e2:ea:
6a:71:97:71:bc:72:25:33:f6:d3:fa:0a:10:47:82:
69:3b:6c:21:16:bf:37:f5:c4:24:af:d4:17:a6:88:
db:79:3d:07:3b:55:e7:65:40:59:20:ee:76:cb:13:
4d:55:5a:ee:a0:2e:61:59:e9:f9:82:ac:8f:62:14:
24:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C2:A5:FD:46:FE:55:4B:6D:7C:EE:4C:A4:51:F5:AB:93:19:26:53
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138322e31312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.11.0/24
Signature Algorithm: sha256WithRSAEncryption
25:72:2b:25:ed:e7:da:8e:98:70:65:a8:ee:bd:cc:f9:1b:01:
a5:27:8e:08:da:e8:0a:e4:9f:2f:f9:f0:d0:08:8a:80:84:99:
38:99:77:3e:e9:57:20:a7:9b:71:a1:96:fa:fc:28:20:4a:cc:
de:40:79:21:47:02:35:0f:bf:be:c4:2c:77:55:5c:ad:ba:cd:
9a:a2:f0:bf:94:52:a1:71:07:b4:d7:62:59:98:74:36:1a:1c:
15:d9:ce:0d:79:5c:1f:b1:68:28:de:15:4d:3c:a1:92:1c:3c:
c4:5d:c2:10:f6:31:3a:74:0b:2c:33:95:82:7a:0d:8c:ab:30:
dd:a1:1e:c5:96:29:cb:da:1c:2f:11:4c:98:a9:9d:d3:8b:3f:
26:1d:d3:37:2e:32:24:8c:21:b8:12:1f:c3:f6:c5:c5:45:d5:
34:55:40:75:00:a3:b9:86:8e:28:01:0c:21:2c:9a:19:0d:32:
26:05:17:72:d0:14:99:1b:50:ed:a0:25:58:22:98:41:6a:51:
16:69:71:7b:73:29:36:a0:1d:5f:ed:df:91:32:85:c5:36:36:
cf:dd:6c:8e:a3:a4:01:8f:ac:72:a8:86:b1:c7:f1:69:d1:50:
35:93:70:b6:94:c7:43:39:73:53:a4:ac:89:ad:ff:3a:02:f5:
b3:39:76:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 11:54:23 2024 by rpki-client on console-fra.rpki-client.org