Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138342e3138382e302f32342d3332203d3e203430303231.roa
File: 3138352e3138342e3138382e302f32342d3332203d3e203430303231.roa (raw, json)
Hash identifier: I/5ltCT+wU0i1uVI5IWE+P5AM1E78M55uUCEFVZQG7Y=
Subject key identifier: A7:E2:50:B8:85:E8:79:D9:2D:B2:ED:A5:D8:5B:DD:39:5F:90:1B:48
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3B54CE47ABC01945A4B59968A101E83F85C4C258
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138342e3138382e302f32342d3332203d3e203430303231.roa
Signing time: Thu 10 Oct 2024 10:05:13 +0000
ROA not before: Thu 10 Oct 2024 10:00:13 +0000
ROA not after: Thu 09 Oct 2025 10:05:13 +0000
asID: 40021
IP address blocks: 185.184.188.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:54:ce:47:ab:c0:19:45:a4:b5:99:68:a1:01:e8:3f:85:c4:c2:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 10 10:00:13 2024 GMT
Not After : Oct 9 10:05:13 2025 GMT
Subject: CN=A7E250B885E879D92DB2EDA5D85BDD395F901B48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f9:42:eb:70:10:b5:a1:56:db:e5:54:ce:2b:
55:13:26:eb:f1:8e:99:32:84:a9:a5:3d:76:6f:73:
2f:5b:f0:e7:da:3d:7d:f0:51:93:fe:eb:88:3e:b5:
d4:4a:39:1c:82:5b:5e:ec:f8:c5:93:0c:5c:48:cf:
f2:e3:15:76:e0:35:a0:88:9c:09:9b:df:49:9d:95:
32:13:e9:46:aa:08:23:24:30:92:c1:b3:49:24:50:
7a:77:23:c7:dc:ee:b2:d8:cb:e9:d4:a8:92:5b:3c:
b4:82:a6:38:8b:54:fd:6b:2f:68:57:7b:2e:af:7e:
fe:7f:de:85:4e:48:35:1b:68:d3:73:fd:3e:6f:e9:
e2:36:a7:c4:1c:ba:87:d2:ab:08:92:08:e0:fa:1d:
70:78:7c:bd:c5:10:90:c7:83:d9:24:e1:59:54:5c:
55:c5:ce:23:b9:6a:20:9a:82:85:40:91:82:ca:92:
11:da:75:2c:0c:f3:14:d2:bd:b0:1b:45:cc:b9:d7:
40:5e:83:cc:a0:55:b1:9c:35:c3:00:5b:82:0b:b8:
06:06:f0:17:b5:fb:c7:6d:3d:8c:9d:ac:5a:31:fa:
78:32:2f:08:2e:84:5c:5a:5a:27:b6:3c:0d:e5:01:
6f:2c:8b:e4:21:3b:71:45:9d:46:99:41:67:ce:96:
e9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E2:50:B8:85:E8:79:D9:2D:B2:ED:A5:D8:5B:DD:39:5F:90:1B:48
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138342e3138382e302f32342d3332203d3e203430303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.188.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:05:e1:98:d2:51:b6:97:f9:0a:49:aa:76:38:e4:ec:54:2e:
1d:8a:cc:13:e6:77:e1:3d:12:1d:62:14:eb:fc:5d:b7:94:dc:
86:d3:81:1a:9f:2b:47:3a:e1:d1:9b:35:e0:90:ba:5d:ce:05:
15:6c:00:8c:cd:98:ef:f8:e5:ec:1e:53:0f:06:c6:bc:84:57:
9a:4b:f0:49:2e:14:10:9b:a2:5e:00:9e:94:b9:19:c9:3c:22:
f5:7a:06:b9:a3:3c:fa:4a:d4:90:ac:40:e9:dc:ae:9c:27:70:
e5:c3:8b:c1:7b:73:05:30:0e:7c:73:6c:9d:6b:3f:67:48:de:
2a:d7:9a:90:15:b8:d4:71:46:dd:39:f5:b5:ec:82:bd:4f:2e:
33:35:57:6a:d9:a0:42:75:e2:6a:68:58:8e:46:f1:91:19:14:
60:81:a8:6d:97:62:e0:58:6e:45:0e:2e:17:30:ed:47:10:b8:
78:c3:c0:7a:ce:4c:07:93:df:ca:84:7e:a3:98:94:da:bd:fd:
ff:c3:66:c9:fe:83:7f:d7:04:69:87:32:94:32:1e:69:af:81:
6d:72:a0:c7:68:5f:70:78:6c:10:82:46:3c:c5:ae:b9:46:c8:
02:fc:a4:35:9f:86:20:31:12:d7:d0:6e:f0:41:24:47:c1:e3:
7e:5f:da:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:42:55 2024 by rpki-client on console-fra.rpki-client.org