Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138332e35352e302f32342d3234203d3e20313336373837.roa
File: 3138352e3138332e35352e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: SXnAulrYo3YeFNrdFZraK27s9/vX+L023UvKzrxckeY=
Subject key identifier: DD:95:DC:5C:C5:60:05:D4:2B:22:F8:3B:0A:70:BB:F0:0C:14:E7:8C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 7669924646A7A24246C60035B7416ED31E51B136
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138332e35352e302f32342d3234203d3e20313336373837.roa
Signing time: Sat 15 Jun 2024 07:03:56 +0000
ROA not before: Sat 15 Jun 2024 06:58:56 +0000
ROA not after: Sat 14 Jun 2025 07:03:56 +0000
asID: 136787
IP address blocks: 185.183.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:69:92:46:46:a7:a2:42:46:c6:00:35:b7:41:6e:d3:1e:51:b1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jun 15 06:58:56 2024 GMT
Not After : Jun 14 07:03:56 2025 GMT
Subject: CN=DD95DC5CC56005D42B22F83B0A70BBF00C14E78C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ce:02:e2:aa:cc:b4:d9:74:c4:eb:4f:1d:2a:
06:5a:2a:ca:8b:9e:a8:aa:43:e5:2c:00:11:62:f3:
5d:d4:86:39:61:ea:f5:d3:9c:92:89:f3:d5:2f:ba:
a8:b4:6c:18:66:79:d9:76:ed:85:10:86:c4:26:f1:
eb:27:71:7c:43:58:c9:65:64:40:35:d2:cd:6a:6a:
66:e1:44:37:23:fe:5a:b5:b8:ad:46:29:42:4a:13:
9b:a0:f0:e0:b0:0b:a6:c9:51:40:0d:67:d8:cd:4d:
e5:ae:5f:cd:d1:d0:74:2c:9d:49:46:93:5e:7b:d8:
6c:43:fc:20:d1:3e:93:06:62:f0:64:e4:38:ee:d5:
d8:b0:c8:f2:d9:3e:a9:6e:cc:00:05:7e:b8:58:76:
8f:fd:94:65:46:d8:63:ca:4c:cd:d9:b9:ed:32:4c:
f2:c6:11:de:0b:ac:1e:f3:83:ef:ac:0f:b9:a3:78:
f8:3e:65:70:dd:ae:19:f6:03:11:ce:97:a9:5c:af:
3a:10:e1:62:cc:8a:a6:70:78:22:04:46:fc:a4:5b:
19:c0:e7:39:55:d2:c3:b8:59:7a:3b:c4:c0:1b:f9:
b2:0f:76:77:3b:d5:5c:90:31:b1:bd:12:00:a4:dc:
1a:81:34:a1:56:4a:2a:9c:2f:27:8a:0a:98:1f:8e:
b6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:95:DC:5C:C5:60:05:D4:2B:22:F8:3B:0A:70:BB:F0:0C:14:E7:8C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138332e35352e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.55.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:e8:fd:ac:84:3d:b5:76:88:85:b8:ff:32:97:d9:fe:97:b0:
c6:ac:57:84:df:cb:e0:77:be:2c:c0:03:d2:b6:4c:be:81:eb:
bc:68:46:5b:ab:09:eb:23:3e:0a:78:7f:26:cd:d4:b4:39:1d:
5c:4b:43:d7:3e:4f:ef:92:67:c9:ce:8e:e1:5f:a6:c3:ce:2d:
a1:ab:b8:5d:73:be:e8:5c:06:08:c7:7d:e8:60:ef:65:73:ef:
59:93:6e:3d:21:fb:7b:74:bb:34:22:63:cd:b0:c3:07:34:2f:
00:a1:54:ee:49:a4:90:c4:8e:ee:63:47:d0:f3:3f:fd:ff:f5:
9f:c5:c8:00:5d:61:c8:a5:45:f1:b2:e6:04:3e:da:84:a6:d6:
99:ff:3b:b1:83:fb:b5:9d:d5:1d:23:e5:4d:35:3b:48:5a:2d:
29:93:cb:2a:38:47:bb:76:98:15:b3:c2:8f:2b:1e:60:95:ea:
5a:90:88:fd:e3:03:4c:e4:0c:b7:0c:0b:75:6f:6d:e1:cf:5e:
3c:bf:c0:40:4e:ea:bf:9e:db:10:df:55:06:d8:da:d0:fd:14:
30:4f:23:3f:e9:4d:64:15:e8:35:eb:78:21:8a:44:c4:81:5c:
d0:ad:e1:44:a8:33:27:c8:2d:b2:e6:9b:00:21:25:71:c1:46:
67:76:64:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:45 2024 by rpki-client on console-ams.rpki-client.org