Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138342e3139302e302f32342d3234203d3e20313336373837.roa
File: 3138352e3138342e3139302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: +/gdmUzb92ZBFmyeh+nlI3jtLoSXqm+w6pJ+T5XGAos=
Subject key identifier: F0:59:13:41:83:4C:E6:B2:23:3A:59:6C:DD:C7:C9:95:22:D5:D4:7E
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 3A338B0A18D1D5D205ADCF99E13AD385391477D9
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138342e3139302e302f32342d3234203d3e20313336373837.roa
Signing time: Sun 14 Jan 2024 18:07:56 +0000
ROA not before: Sun 14 Jan 2024 18:02:56 +0000
ROA not after: Sun 12 Jan 2025 18:07:56 +0000
asID: 136787
IP address blocks: 185.184.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 16:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:33:8b:0a:18:d1:d5:d2:05:ad:cf:99:e1:3a:d3:85:39:14:77:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Jan 14 18:02:56 2024 GMT
Not After : Jan 12 18:07:56 2025 GMT
Subject: CN=F0591341834CE6B2233A596CDDC7C99522D5D47E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7a:53:71:56:18:5e:e8:38:4d:06:e2:7d:04:
20:b9:10:14:18:0a:53:a0:9d:84:f7:7f:7d:4b:2a:
e7:1f:35:dd:e7:be:ce:58:6e:65:de:37:62:57:9c:
de:ca:ec:13:5d:99:62:48:8e:9d:c9:00:01:ea:15:
a4:08:5c:bf:81:fa:72:6c:d2:73:50:40:37:f2:70:
28:2a:ff:84:cf:af:58:23:b3:4a:ad:9c:af:00:42:
58:96:09:84:15:e5:5d:43:27:f9:93:5f:f2:44:92:
2a:4c:de:64:22:81:71:91:b6:82:29:d0:2d:0a:82:
f6:e1:86:e5:6e:25:db:11:24:01:6c:cf:77:6f:ed:
5c:87:23:f6:49:3d:fd:31:e8:0f:25:b2:8d:3a:cd:
7d:df:15:8f:32:9e:86:eb:04:19:fe:c2:07:a2:75:
e3:0d:82:4e:33:0c:b0:37:de:3f:d3:12:d6:40:59:
7d:96:0a:ac:f9:2d:eb:e3:13:5c:8e:86:bf:f8:0d:
f0:5d:10:8d:7e:9a:ca:c7:32:f1:31:52:07:1f:76:
90:e3:43:c9:e1:d1:ac:79:f1:ee:41:40:24:f9:6a:
6e:a9:b5:d2:c5:b8:ed:a9:65:be:34:06:5a:0a:60:
7b:ee:89:a3:1b:67:55:a4:84:82:2e:99:f6:c1:a6:
80:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:59:13:41:83:4C:E6:B2:23:3A:59:6C:DD:C7:C9:95:22:D5:D4:7E
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138342e3139302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.190.0/24
Signature Algorithm: sha256WithRSAEncryption
18:3a:5c:a7:6e:b1:be:be:e6:cb:c8:11:83:cd:b2:b4:39:36:
3c:58:bf:2f:c5:38:87:f2:57:1d:9d:4b:ce:eb:f3:5a:5b:c2:
3d:72:82:d3:e6:29:25:46:03:85:19:71:cf:14:af:4f:7a:a2:
6e:f5:3c:e5:22:11:59:a6:72:f7:95:74:c1:81:f1:04:6c:2c:
b7:2b:ce:f9:a4:63:77:36:b2:35:f7:0c:7c:6f:df:72:91:5e:
5e:4c:7e:53:44:e8:a0:77:3b:8f:15:de:8d:3d:ec:5f:b0:8c:
83:b7:09:ae:6a:86:bb:76:4d:82:9e:4d:97:db:6a:79:b8:40:
1a:fa:18:5e:30:96:48:bd:6a:c4:91:5c:d1:8d:03:f1:6d:3f:
2f:f3:78:53:dc:b6:1c:5d:56:62:ba:cc:87:95:b7:17:af:9d:
12:a1:63:c1:64:88:dd:d7:f3:3c:00:10:c8:a9:16:c9:60:c4:
da:fb:0b:de:0e:88:71:0f:fa:2a:43:24:1e:1b:22:a4:4e:95:
be:f6:d2:96:65:d2:78:cc:b5:35:8f:11:63:ad:a5:84:1e:ab:
e0:c7:e8:25:cc:c0:67:d7:3e:f2:ad:72:89:b8:40:b4:e3:bc:
67:d4:94:c2:a1:d4:26:e5:18:12:93:d0:c1:94:75:97:6f:89:
df:8a:5e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 20:21:25 2024 by rpki-client on console-fra.rpki-client.org