Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233352e302f32342d3332203d3e203531313637.roa
File: 3138352e3138372e3233352e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: PSLMCdjcUsiJWNJpF8q7Al931HEaltW3A6+AWUsXUis=
Subject key identifier: A1:38:E8:1F:81:28:73:AF:97:DA:E3:E6:C5:80:47:50:42:B0:D4:D7
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 439B570787A6A24F15E4DEDF9BA499C4791506BF
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233352e302f32342d3332203d3e203531313637.roa
Signing time: Fri 20 Sep 2024 14:04:59 +0000
ROA not before: Fri 20 Sep 2024 13:59:59 +0000
ROA not after: Fri 19 Sep 2025 14:04:59 +0000
asID: 51167
IP address blocks: 185.187.235.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:9b:57:07:87:a6:a2:4f:15:e4:de:df:9b:a4:99:c4:79:15:06:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Sep 20 13:59:59 2024 GMT
Not After : Sep 19 14:04:59 2025 GMT
Subject: CN=A138E81F812873AF97DAE3E6C580475042B0D4D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fc:09:72:58:d4:7a:a7:6e:f2:74:c0:bf:7b:
81:8d:ad:66:d8:03:3d:37:53:d6:1c:eb:5f:e8:7b:
f1:5e:e6:62:a5:5b:fd:13:88:78:8e:5d:3b:2c:a0:
25:51:db:5e:cd:77:29:51:10:82:60:9f:ca:5f:cb:
d0:6f:de:33:cc:e4:a8:43:ef:ce:d9:63:3f:d3:be:
87:89:a6:d3:d1:d6:c9:79:34:55:af:d0:2f:81:8d:
c9:24:81:e7:5b:8f:76:bb:c2:21:d6:b3:0f:05:a5:
9e:d9:e5:d0:d5:80:c5:a2:82:b7:7a:6a:56:c8:86:
96:d3:e8:e4:fc:f8:0e:39:83:1c:fd:a9:bb:3b:c6:
6a:67:75:62:2d:ae:d0:dd:20:1f:cd:82:02:86:f4:
b5:ed:f4:8e:32:66:1d:21:ed:79:02:ee:4a:59:49:
2d:22:8a:00:f3:60:cb:65:83:90:36:ec:3b:e4:f4:
b8:fd:b4:d4:17:7c:c7:b9:ac:67:76:70:46:15:6a:
11:53:a2:a3:ff:30:1c:0c:5b:80:a9:04:3e:db:61:
8d:77:6d:06:69:9b:45:ec:10:e4:74:65:96:84:30:
7a:e1:18:9e:43:c0:d6:f3:f7:3c:a5:ce:c7:6e:4b:
d3:9b:79:70:7a:01:7c:3b:33:6e:fb:5a:37:0f:d8:
63:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:38:E8:1F:81:28:73:AF:97:DA:E3:E6:C5:80:47:50:42:B0:D4:D7
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3233352e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.235.0/24
Signature Algorithm: sha256WithRSAEncryption
93:60:f9:ff:1f:54:b1:b1:69:4b:2f:09:b2:ff:91:c0:66:e1:
cf:e0:84:a1:45:52:9f:f4:4d:5f:9e:1d:77:85:66:12:13:f7:
eb:7f:b9:5e:67:81:05:a1:b2:93:28:39:19:99:81:99:22:84:
f8:79:2b:cf:48:8b:33:e8:04:45:b4:72:bc:21:63:33:b0:ca:
57:c0:08:d9:d8:f0:c7:14:d6:75:e9:7f:a6:d2:92:50:0e:8d:
aa:c9:13:ab:61:45:f0:ec:df:22:37:99:eb:a4:d2:e8:e0:f3:
14:37:ce:29:a0:df:d6:6e:ed:75:70:c2:b7:3e:93:60:65:7d:
2f:de:a4:03:55:66:3c:22:3f:fb:ef:ee:d1:6d:54:04:d7:83:
6a:9e:c5:9c:18:a9:f1:2d:be:62:92:f2:79:c7:6c:60:45:fd:
6e:36:8f:d5:38:98:4d:f9:36:15:fc:c5:da:e1:cd:14:c8:13:
2a:01:45:bc:66:40:99:4d:9e:bf:54:6c:c8:92:65:9d:f9:35:
e9:7a:12:64:53:d6:3b:53:f6:cd:21:c2:3e:3a:d1:d3:1a:60:
4c:8e:75:29:ed:da:10:38:c4:9b:75:cc:ba:2e:c4:bc:17:7d:
59:5d:69:71:6d:1a:dc:63:95:a0:c9:9a:4f:85:e9:e3:d7:3d:
e0:5d:02:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:42:56 2024 by rpki-client on console-fra.rpki-client.org