Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138332e35342e302f32342d3234203d3e20313336373837.roa
File: 3138352e3138332e35342e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: SaJrsle0IDmeNRsr5W51tSXsainN4hsKzKWOn1ry8To=
Subject key identifier: C3:30:38:F6:8D:5E:9B:52:43:B8:C8:15:E5:9F:B8:20:B5:55:38:50
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 49824E33CF6BBCD1CF4CCD6D7BFDF33658C2C2C1
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138332e35342e302f32342d3234203d3e20313336373837.roa
Signing time: Sat 15 Jul 2023 06:27:43 +0000
ROA not before: Sat 15 Jul 2023 06:22:43 +0000
ROA not after: Sat 13 Jul 2024 06:27:43 +0000
asID: 136787
IP address blocks: 185.183.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:82:4e:33:cf:6b:bc:d1:cf:4c:cd:6d:7b:fd:f3:36:58:c2:c2:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jul 15 06:22:43 2023 GMT
Not After : Jul 13 06:27:43 2024 GMT
Subject: CN=C33038F68D5E9B5243B8C815E59FB820B5553850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:83:9b:b9:82:cb:41:3d:f2:9d:ed:d4:c6:fb:
e8:d8:64:40:41:bd:c2:1f:a5:71:ae:5e:f4:a0:3b:
92:93:fe:f1:1f:26:11:ab:93:06:8c:26:24:0a:f6:
ff:30:e1:1a:d2:18:2d:2d:17:56:97:c0:2c:09:8a:
dc:55:6e:6a:92:c2:44:e2:27:42:08:28:53:e1:1e:
f5:2d:dc:ed:18:67:7c:08:73:aa:97:42:7b:f2:9c:
bb:84:3a:f0:bf:3a:1a:f5:8a:a4:3a:e4:3d:4a:d9:
c7:50:29:ab:70:53:a7:78:38:85:6e:03:cf:b5:10:
05:60:81:9d:dc:ec:d3:0b:2b:59:29:88:83:20:69:
a2:48:f7:e9:3b:35:5e:29:fa:1d:23:3c:40:e7:0e:
85:d6:2e:f7:14:78:50:ba:8f:e0:87:34:9d:19:21:
10:66:4c:f3:ea:ec:8d:08:ea:90:55:a0:72:fc:27:
cd:ea:ad:f7:2a:75:22:c1:4e:2e:77:a8:4d:8e:f5:
8e:37:55:e5:9d:91:67:54:79:08:5d:86:4b:af:dc:
e8:1c:c1:db:d9:a6:37:8e:17:34:33:8c:f8:c7:8c:
5a:1a:a1:1e:19:30:a1:51:c3:9a:a3:b1:ab:ae:e8:
b8:96:46:21:ad:21:eb:22:45:d4:59:0d:79:90:c4:
39:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:30:38:F6:8D:5E:9B:52:43:B8:C8:15:E5:9F:B8:20:B5:55:38:50
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138332e35342e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.54.0/24
Signature Algorithm: sha256WithRSAEncryption
96:a4:c9:f9:b4:b8:9b:b0:67:86:b2:fc:2d:26:22:d1:58:8d:
a7:ae:b4:84:ff:84:64:2a:58:54:b5:e9:73:2c:b9:64:dd:4c:
70:7c:5c:2e:d7:81:28:53:30:d0:65:73:52:82:7a:06:dd:18:
91:22:7c:55:2f:88:15:d0:d7:56:ee:00:89:53:a6:3e:f2:d5:
dd:5d:ed:7d:f7:4f:61:ac:0b:3c:80:ce:76:a2:96:f7:98:f8:
5b:cc:dd:df:02:d2:3b:94:86:78:9d:13:98:51:94:c9:a0:33:
3a:ca:fe:53:97:ff:8e:b0:16:aa:4b:72:f6:88:8d:20:56:58:
d7:e8:96:31:ce:d1:30:42:af:cd:2a:f2:43:68:f4:1c:c2:30:
9d:b7:fe:fa:14:99:9a:4d:95:99:4e:64:cf:de:45:c9:af:d0:
6a:e9:f5:99:b9:b4:03:ce:fb:fe:d2:ab:14:6e:41:11:61:85:
3e:e4:2c:36:98:c9:ce:0b:5e:f5:ba:6b:8f:05:c5:07:a8:4f:
dc:93:02:35:80:8d:30:c1:2b:d4:0c:a3:b0:a0:ae:8b:b5:9f:
0c:5b:3a:4f:6b:c1:55:8c:2d:d9:f7:28:94:80:2e:9b:8b:be:
e8:4e:e9:4b:86:df:f1:23:85:ab:8c:5e:4a:7b:5d:f1:e4:01:
d0:7e:ab:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 11:32:58 2024 by rpki-client on console-ams.rpki-client.org