Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233322e302f32342d3234203d3e20323635333032.roa
File: 3138352e3138372e3233322e302f32342d3234203d3e20323635333032.roa (raw, json)
Hash identifier: 1NewegeKt5rbTCyDRgVkcg2Wgr3cF5vroEHmn6rHcjE=
Subject key identifier: 56:FF:A3:55:7B:3E:56:4D:67:BD:1E:C4:85:D7:DE:E2:5C:A1:CC:6C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 2B2A4AB6FD8DBBB408BC52955D2BABAC807A6083
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233322e302f32342d3234203d3e20323635333032.roa
Signing time: Wed 30 Oct 2024 11:02:42 +0000
ROA not before: Wed 30 Oct 2024 10:57:42 +0000
ROA not after: Wed 29 Oct 2025 11:02:42 +0000
asID: 265302
IP address blocks: 185.187.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:2a:4a:b6:fd:8d:bb:b4:08:bc:52:95:5d:2b:ab:ac:80:7a:60:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 30 10:57:42 2024 GMT
Not After : Oct 29 11:02:42 2025 GMT
Subject: CN=56FFA3557B3E564D67BD1EC485D7DEE25CA1CC6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:65:b4:95:3d:b5:04:a0:83:e6:f6:8b:84:15:
1a:61:93:d5:3e:4a:55:5d:b9:23:b4:ca:62:19:09:
99:47:a1:c7:21:83:0a:f8:0f:56:58:7b:d2:3d:18:
2f:e5:cb:2b:0e:db:e6:6e:c7:96:e1:23:9a:af:42:
ad:3b:21:73:54:6d:ad:bd:54:78:b5:26:e4:65:61:
90:0e:7f:2d:ae:d1:8d:05:1d:5a:35:ed:fd:3b:a0:
8a:72:19:fe:bf:0d:68:61:31:1f:68:e6:d2:70:e4:
30:38:be:94:97:b8:7d:59:e1:84:2d:3a:68:a7:d6:
5d:31:06:93:8b:17:4f:e9:64:82:0e:a7:d4:9d:d0:
44:bb:4d:82:e5:5e:16:89:79:fb:50:51:cc:ef:6e:
ec:85:32:27:f8:10:a3:ae:d8:bd:db:68:b7:9e:d1:
5a:67:99:95:91:ec:fa:ac:d9:d8:52:29:47:28:5d:
a0:53:90:c4:22:35:fc:85:99:1a:3c:66:fb:a5:12:
a9:1c:6d:fc:1f:68:16:e2:7b:d8:80:85:89:f7:3b:
ea:23:cc:17:78:43:0c:36:c3:8e:28:d6:23:d7:15:
93:fd:09:b5:d2:f6:10:39:25:2b:02:17:d4:a0:e3:
8e:c0:00:96:6c:92:0f:84:38:a7:e1:70:89:6a:02:
bf:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FF:A3:55:7B:3E:56:4D:67:BD:1E:C4:85:D7:DE:E2:5C:A1:CC:6C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233322e302f32342d3234203d3e20323635333032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.232.0/24
Signature Algorithm: sha256WithRSAEncryption
33:3f:74:f0:01:80:9a:57:5e:61:bb:1b:ea:dd:b9:69:82:3b:
4e:75:54:ad:86:26:ec:f2:56:10:3b:c5:d4:12:34:dd:cb:ee:
a2:81:07:c1:0f:7d:9d:60:44:de:9e:0f:8f:5b:1d:ae:7c:97:
88:24:3a:bb:d7:be:2e:15:b8:c2:a7:ef:e6:02:e0:09:5b:95:
92:e4:d8:50:57:60:28:86:e2:67:1a:6c:9e:e1:ba:7c:09:88:
59:75:b3:0f:bb:54:bf:ff:53:4f:e5:44:cc:3c:7b:0b:68:c8:
e1:33:5c:58:ef:5d:30:ad:46:e0:71:71:65:8d:4b:53:eb:ef:
07:1a:98:c1:cb:24:bd:c2:d6:5e:f9:5d:d9:b8:71:a5:18:2e:
c2:f2:c6:81:27:01:3e:cf:08:32:60:e7:86:32:c3:3b:74:da:
6e:22:94:ed:79:f2:e3:95:e6:00:23:cd:24:e9:b8:59:7a:62:
3b:a8:12:84:b5:b9:1e:84:92:f2:7a:1f:c7:72:24:be:39:5f:
1c:73:16:1f:db:94:c1:6c:82:a1:1d:6a:1f:bc:a1:4f:8f:84:
97:aa:3b:3c:cb:ce:c5:bb:20:bb:eb:8e:2b:03:a7:0b:ba:bd:
06:91:3c:da:62:3c:66:19:f3:6f:d2:8e:98:e6:37:a5:e3:97:
a3:1c:ee:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:42:56 2024 by rpki-client on console-fra.rpki-client.org