Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3234322e302f32342d3332203d3e203531313637.roa
File: 3138352e3138372e3234322e302f32342d3332203d3e203531313637.roa (raw, json)
Hash identifier: oKb3RoSnEj+G8nMt49CXBcwfeGMtxSHszOBREJ9MMzk=
Subject key identifier: 6A:A7:22:82:2A:C0:5F:A7:04:19:93:3A:D3:BF:E1:33:B4:84:04:55
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 54E1485D4B88930188FC2C371B32D6ADB15209B0
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3234322e302f32342d3332203d3e203531313637.roa
Signing time: Fri 20 Oct 2023 13:41:47 +0000
ROA not before: Fri 20 Oct 2023 13:36:47 +0000
ROA not after: Fri 18 Oct 2024 13:41:47 +0000
asID: 51167
IP address blocks: 185.187.242.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 02:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:e1:48:5d:4b:88:93:01:88:fc:2c:37:1b:32:d6:ad:b1:52:09:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 20 13:36:47 2023 GMT
Not After : Oct 18 13:41:47 2024 GMT
Subject: CN=6AA722822AC05FA70419933AD3BFE133B4840455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fa:bb:12:47:6d:c7:11:ce:c0:9a:9e:64:bf:
79:c6:b8:39:d5:aa:be:d1:2f:2f:a2:40:52:e1:52:
e5:29:f6:fe:f3:4f:14:14:b2:7a:74:7d:cf:da:e8:
12:f4:5c:29:df:4b:b9:27:e9:db:a5:e0:11:5e:37:
76:10:c8:01:6f:b7:ab:cb:b7:1d:94:f5:ce:e5:38:
cb:41:cd:aa:ed:77:b1:d0:d0:c3:86:75:b4:b9:03:
10:14:7f:c8:eb:3f:59:95:e4:88:e7:b9:d5:2d:75:
17:c5:2e:99:2c:02:33:7e:12:67:1b:73:30:9f:b8:
84:0f:d1:95:f2:86:91:5b:91:28:26:00:1f:77:c0:
fd:3c:f5:9f:f7:6a:33:a2:e2:44:4d:e5:33:27:26:
9d:db:be:86:3b:3a:32:fd:57:32:36:f3:a3:44:05:
8d:c4:89:09:55:d5:bf:40:15:dd:c5:d5:78:a6:dd:
66:93:18:78:04:69:d8:71:1a:14:2f:41:54:ee:d1:
c3:0f:1b:4e:26:75:ce:62:87:28:fa:e3:dc:b8:3a:
eb:21:68:03:01:1d:ef:ea:d9:54:d8:b5:7f:b5:40:
ba:fd:5b:f4:8e:54:9d:df:30:ee:ed:da:e1:a9:20:
99:c0:bb:2c:2c:c5:34:a6:1d:9a:93:b9:44:dc:0e:
66:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A7:22:82:2A:C0:5F:A7:04:19:93:3A:D3:BF:E1:33:B4:84:04:55
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138372e3234322e302f32342d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.242.0/24
Signature Algorithm: sha256WithRSAEncryption
30:f6:5f:b8:cd:5a:16:02:53:20:7a:bc:be:41:39:e9:e0:13:
0a:1c:17:66:95:86:88:6c:02:cd:0b:70:9f:61:58:52:ad:b2:
6b:80:1d:08:f4:0a:35:3c:1e:a6:8b:5c:a7:c9:03:49:3d:6d:
27:ce:78:01:55:41:92:cd:de:ee:90:e1:04:9e:69:c4:b2:c5:
e3:20:45:1e:9d:1d:d3:b5:11:56:7a:8f:69:d6:07:1a:53:b4:
7d:c8:1d:8b:10:07:1d:35:cd:09:c1:6e:62:3f:8d:c4:34:fa:
d3:a7:95:4c:a2:39:a2:89:6c:31:2a:4c:18:fe:76:93:e9:c0:
0c:00:83:d3:9d:24:21:ee:29:a6:5b:8b:ba:27:31:6d:1c:2a:
27:a6:bd:60:9d:d9:03:60:38:2d:2d:32:93:2d:05:d4:ec:07:
f7:79:a2:8e:bf:7f:fc:29:37:40:c8:bf:ed:f8:aa:bf:e8:3f:
51:3b:ef:26:06:2e:01:f7:27:6a:c6:41:24:82:66:2f:e0:88:
71:c0:8e:21:30:b8:01:3b:f6:90:27:e4:8a:c4:87:b0:87:66:
a2:a2:cb:71:fa:e0:c4:60:f0:98:02:5f:59:83:61:01:42:10:
15:e6:9d:34:b8:ed:c9:6e:48:f5:53:81:cb:24:b0:92:a2:38:
a7:d4:76:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 09:23:49 2024 by rpki-client on console-ams.rpki-client.org