Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139322e39362e302f32332d3332203d3e203531313637.roa
File: 3138352e3139322e39362e302f32332d3332203d3e203531313637.roa (raw, json)
Hash identifier: iye7gyvUDot1I+KMhdrxJbcWGh/5x8kCXMYeJKwbEDo=
Subject key identifier: 6B:68:70:83:7D:F1:AB:FF:0E:B1:D2:38:FC:24:BF:EA:E5:92:4E:18
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 0AE03E67337243319CC970ED75BCC496D54FEE05
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139322e39362e302f32332d3332203d3e203531313637.roa
Signing time: Mon 26 Feb 2024 08:53:13 +0000
ROA not before: Mon 26 Feb 2024 08:48:13 +0000
ROA not after: Mon 24 Feb 2025 08:53:13 +0000
asID: 51167
IP address blocks: 185.192.96.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:e0:3e:67:33:72:43:31:9c:c9:70:ed:75:bc:c4:96:d5:4f:ee:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Feb 26 08:48:13 2024 GMT
Not After : Feb 24 08:53:13 2025 GMT
Subject: CN=6B6870837DF1ABFF0EB1D238FC24BFEAE5924E18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:95:da:8a:35:98:a0:7b:09:78:eb:2c:ca:f1:
99:96:cc:de:bb:54:03:af:9d:9a:7b:e4:fb:8a:33:
11:b4:82:cb:24:2a:52:69:70:37:87:4c:fc:38:24:
12:ae:cd:e6:67:2e:07:8f:63:53:67:7c:74:b0:89:
00:28:2f:8d:61:4c:45:56:3d:7b:93:a5:87:b5:f7:
41:35:08:1d:97:a7:97:cc:0f:8f:7e:45:22:3f:d1:
84:8d:18:5f:e7:96:ce:c1:df:fc:72:44:73:54:80:
2c:cf:ed:75:6c:09:fc:3b:39:e3:8e:cd:9f:6d:93:
7f:02:82:f4:2c:19:04:ef:98:cd:65:29:95:63:5b:
fa:9f:63:ca:ba:21:c7:33:13:cc:58:83:59:fe:61:
6e:bc:9b:c0:b6:66:6a:03:ab:50:3e:e9:ab:f8:35:
67:a7:04:2a:cd:39:e0:a8:cb:fe:d8:ed:57:8a:c2:
d7:cd:a2:42:49:a9:56:0b:44:fd:85:6d:56:b5:ca:
ce:7f:d0:f0:0e:aa:fb:a2:7e:ea:1e:06:02:4c:a9:
4d:a2:a1:61:8e:43:29:f6:2e:c0:6a:cf:ef:0d:b0:
b0:f6:2a:c7:9c:cd:9a:00:c7:c0:e1:e2:45:9a:11:
44:c3:3e:26:ba:cd:1e:e2:01:00:6d:58:c1:e0:8e:
5e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:68:70:83:7D:F1:AB:FF:0E:B1:D2:38:FC:24:BF:EA:E5:92:4E:18
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3139322e39362e302f32332d3332203d3e203531313637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.96.0/23
Signature Algorithm: sha256WithRSAEncryption
43:a5:8b:b5:83:11:dc:87:52:15:b1:7f:e1:47:4a:23:7d:72:
29:31:78:e0:c6:2e:21:8a:b0:46:70:0a:d9:5d:e9:90:b2:2f:
34:c0:25:40:7e:ca:0e:a4:a1:95:ec:37:64:ca:45:2b:d7:05:
dc:e8:73:43:ef:3b:ca:d9:22:cd:40:88:c8:c3:dc:09:18:dd:
51:4c:d9:32:2a:bc:78:1a:7a:aa:c4:0f:15:88:96:0d:3f:c1:
e6:cf:2e:87:4f:a3:9c:63:2e:ef:e9:76:00:99:58:f1:04:2e:
14:12:9c:42:1f:24:4e:b3:2a:bd:f3:fd:f4:71:5f:7c:0e:f5:
5f:5d:f3:b7:37:6b:c1:11:2d:73:16:33:f2:31:44:22:0e:f4:
43:bb:13:cb:5b:dc:f8:cf:ea:4a:61:c1:14:65:0f:00:8c:d7:
a8:bb:06:62:d9:2b:7f:92:c0:47:7f:cf:3c:44:2a:ca:95:84:
7e:2c:a6:12:86:4c:6c:f3:eb:41:24:e2:75:d6:de:d9:d0:fc:
00:6f:a3:4d:22:0b:d5:db:5c:80:26:73:1f:04:2c:e5:bf:c5:
95:58:75:9c:10:3c:ce:e5:46:ee:2a:1e:ef:d3:b3:9a:f8:6d:
a0:e0:37:9a:28:26:ca:db:8a:b2:3f:fe:bc:e0:6f:cb:03:4b:
5e:13:12:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:29:13 2024 by rpki-client on console-ams.rpki-client.org