Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3137312e302f32342d3234203d3e20313336373837.roa
File: 3138352e3138372e3137312e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: ZODounMm+m02FKQZZ0DpVjacfUDxxZ29ANKCmzFXGw4=
Subject key identifier: 4E:B7:3F:43:3E:EA:ED:10:D6:9C:AE:87:D0:55:F8:82:C9:D6:99:DB
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0D97332EA2D191500AE6CADAFB40EB1B0274B99F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3137312e302f32342d3234203d3e20313336373837.roa
Signing time: Mon 26 Feb 2024 08:53:27 +0000
ROA not before: Mon 26 Feb 2024 08:48:27 +0000
ROA not after: Mon 24 Feb 2025 08:53:27 +0000
asID: 136787
IP address blocks: 185.187.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:97:33:2e:a2:d1:91:50:0a:e6:ca:da:fb:40:eb:1b:02:74:b9:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:27 2024 GMT
Not After : Feb 24 08:53:27 2025 GMT
Subject: CN=4EB73F433EEAED10D69CAE87D055F882C9D699DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f8:63:21:b3:67:a7:d0:38:f1:32:bb:3f:17:
25:9c:d7:09:40:ad:1d:27:5f:13:ca:35:63:86:5d:
b0:21:d5:8b:8b:82:ea:27:36:c3:d7:e7:77:54:fe:
64:c0:0f:41:00:52:63:97:85:09:5e:cd:93:0e:4a:
db:af:a8:fa:e5:e0:25:3d:e5:45:79:73:6a:f4:75:
e3:25:94:13:ec:e9:b2:78:fb:a2:68:f8:ec:04:77:
8e:38:c6:86:38:98:ab:44:75:dc:b1:ca:83:11:00:
55:41:89:07:42:e7:85:bd:92:a5:84:d1:0a:e1:f0:
96:fb:e2:06:ba:e8:7f:3a:d0:41:60:6b:af:bf:07:
ee:7d:ba:4d:a8:4e:20:b1:12:37:fd:4f:d5:40:25:
29:9d:18:c2:63:75:3c:92:47:62:a6:a5:5c:65:51:
b2:a2:66:4e:df:03:dc:a4:75:21:ac:a7:cd:8c:f7:
a6:92:11:15:ce:f5:5d:07:c5:12:f0:1f:25:2f:57:
23:12:22:ad:09:bb:40:d9:a0:33:33:d9:54:77:94:
27:87:9e:d0:46:93:58:09:9a:2d:c6:dc:be:16:01:
12:f0:89:7d:9b:fd:ce:3d:d8:09:fc:7f:29:cd:76:
4c:e3:97:a3:ea:e0:29:07:51:ee:c7:af:67:6f:f2:
09:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B7:3F:43:3E:EA:ED:10:D6:9C:AE:87:D0:55:F8:82:C9:D6:99:DB
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3137312e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.171.0/24
Signature Algorithm: sha256WithRSAEncryption
18:4f:2f:cb:d1:56:51:d9:1a:18:3d:70:85:7d:a5:7b:a5:2d:
2d:13:eb:13:7e:c6:3d:21:07:7b:f0:fa:f8:2a:58:8c:aa:4e:
08:88:f3:62:79:f4:ec:8c:19:eb:b3:7f:a1:04:82:78:a3:57:
f0:ec:c5:34:2a:a5:66:71:27:c6:ad:bf:4e:62:ce:08:25:f3:
a1:c0:03:92:d7:ba:af:3d:aa:e5:0b:06:71:91:25:e3:40:2d:
31:79:e4:56:27:a0:8a:e0:35:8c:aa:c9:cf:ea:f3:3d:9b:10:
43:00:f1:3b:0d:0f:08:80:9f:45:46:a9:d3:9c:52:21:13:7a:
89:e2:b2:17:70:53:99:81:30:da:a9:d8:79:b9:cb:7f:e0:67:
34:7b:b6:41:ce:50:03:fe:68:05:f8:15:a0:13:a8:f8:24:db:
ef:ac:3a:93:87:a4:f3:95:a1:07:45:b1:61:e0:bf:a4:3f:38:
fd:a3:94:d8:d7:3f:5f:39:0b:b8:ce:c2:2c:55:89:f2:5b:e1:
01:4d:1a:e6:99:51:4d:bf:99:0a:96:0f:63:c7:8f:5d:bd:86:
73:f6:13:20:a7:f1:93:48:b6:18:e9:70:82:f2:85:cd:84:f0:
ea:9d:d0:bf:10:d8:be:7c:5c:15:e0:c6:93:41:df:81:4a:69:
ae:d5:91:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 21:04:27 2024 by rpki-client on console-fra.rpki-client.org